M365ConfigurationDataExample.psd1
|
# (2024-12-05 01:44:03) Generated using Microsoft365DSC v1.24.1204.1 @{ AllNodes = @( @{ NodeName = 'String | Required | Name of the host of which the LCM is used, normally this is localhost' CertificateFile = 'String | Required | Relative path to the public key of the DSC credential encryption certificate, e.g. .\DSCCertificate.cer' } ) NonNodeData = @{ Environment = @{ Name = 'String | Required | Name of your environment, e.g. TestEnvironment' Tokens = @{ ExampleToken = 'String | Optional | Example of a token that can be used anywhere in the config, by specifying {{ExampleToken}}' } TenantId = 'String | Required | Tenant URL, e.g. test.onmicrosoft.com' OrganizationName = 'String | Required | Name of your organization, prefix of the tenant id, e.g. test' CICD = @{ Approvers = @( @{ Principal = 'String | Required | Principal of the user or groups that needs to get added to the approvers list.' Type = 'String | Required | Type of principal | User / Group' } ) UseCodeBranch = 'String | Required | Name of the branch that is used for the CICD (Script) repository, e.g. main' DependsOn = 'String | Required | Name of the environment this environment depends on, e.g. TestEnvironment' } ShortName = 'String | Required | Abbreviation of the environment name, e.g. TST' UsedWorkloads = @{ Teams = 'Boolean | Required | Specifies if the workload should be included in the configuration' AzureDevOps = 'Boolean | Required | Specifies if the workload should be included in the configuration' PowerPlatform = 'Boolean | Required | Specifies if the workload should be included in the configuration' Defender = 'Boolean | Required | Specifies if the workload should be included in the configuration' SharePoint = 'Boolean | Required | Specifies if the workload should be included in the configuration' Planner = 'Boolean | Required | Specifies if the workload should be included in the configuration' Intune = 'Boolean | Required | Specifies if the workload should be included in the configuration' OneDrive = 'Boolean | Required | Specifies if the workload should be included in the configuration' Azure = 'Boolean | Required | Specifies if the workload should be included in the configuration' Fabric = 'Boolean | Required | Specifies if the workload should be included in the configuration' Office365 = 'Boolean | Required | Specifies if the workload should be included in the configuration' Sentinel = 'Boolean | Required | Specifies if the workload should be included in the configuration' SecurityCompliance = 'Boolean | Required | Specifies if the workload should be included in the configuration' AzureAD = 'Boolean | Required | Specifies if the workload should be included in the configuration' Exchange = 'Boolean | Required | Specifies if the workload should be included in the configuration' } } AppCredentials = @( @{ ApplicationId = 'Guid | Required | The GUID of the Entra ID Service Principal' Workload = 'String | Required | Name of the Workload for which this credential will be used | AzureAD / AzureDevOps / Azure / Defender / Exchange / Fabric / Intune / Office365 / OneDrive / Planner / PowerPlatform / SecurityCompliance / Sentinel / SharePoint / Teams' CertThumbprint = 'String | Required | The Certificate Thumbprint of the certificate used for authentication' } ) AzureAD = @{ AccessReviewDefinitions = @( @{ DescriptionForAdmins = 'String | Optional | Description provided by review creators to provide more context of the review to admins. Supports $select.' StageSettings = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' RecommendationInsightSettings = @( @{ SignInScope = 'String | Optional | Indicates whether inactivity is calculated based on the user''s inactivity in the tenant or in the application. The possible values are tenant, application, unknownFutureValue. application is only relevant when the access review is a review of an assignment to an application. | tenant / application / unknownFutureValue' RecommendationLookBackDuration = 'String | Optional | Optional. Indicates the time period of inactivity (with respect to the start date of the review instance) that recommendations will be configured from. The recommendation will be to deny if the user is inactive during the look-back duration. For reviews of groups and Microsoft Entra roles, any duration is accepted. For reviews of applications, 30 days is the maximum duration. If not specified, the duration is 30 days.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.groupPeerOutlierRecommendationInsightSettings / #microsoft.graph.userLastSignInRecommendationInsightSetting' } ) StageId = 'String | Optional | Unique identifier of the accessReviewStageSettings. The stageId is used in dependsOn property to indicate the stage relationship. Required.' RecommendationsEnabled = 'Boolean | Optional | Indicates whether showing recommendations to reviewers is enabled. Required. NOTE: The value of this property overrides the corresponding setting on the accessReviewScheduleDefinition object.' RecommendationLookBackDuration = 'String | Optional | Optional field. Indicates the time period of inactivity (with respect to the start date of the review instance) from which that recommendations will be configured. The recommendation is to deny if the user is inactive during the look back duration. For reviews of groups and Microsoft Entra roles, any duration is accepted. For reviews of applications, 30 days is the maximum duration. If not specified, the duration is 30 days. NOTE: The value of this property overrides the corresponding setting on the accessReviewScheduleDefinition object.' DependsOnValue = @( 'String | Optional | Defines the sequential or parallel order of the stages and depends on the stageId. Only sequential stages are currently supported. For example, if stageId is 2, then dependsOn must be 1. If stageId is 1, don''t specify dependsOn. Required if stageId isn''t 1.' ) DecisionsThatWillMoveToNextStage = @( 'String | Optional | Indicate which decisions will go to the next stage. Can be a subset of Approve, Deny, Recommendation, or NotReviewed. If not provided, all decisions will go to the next stage. Optional.' ) DurationInDays = 'UInt32 | Optional | The duration of the stage. Required. NOTE: The cumulative value of this property across all stages 1. Will override the instanceDurationInDays setting on the accessReviewScheduleDefinition object. 2. Can''t exceed the length of one recurrence. That is, if the review recurs weekly, the cumulative durationInDays can''t exceed 7.' } ) Id = 'String | Required | The unique identifier for an entity. Read-only.' SettingsValue = @{ ApplyActions = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.disableAndDeleteUserApplyAction / #microsoft.graph.removeAccessApplyAction' } ) InstanceDurationInDays = 'UInt32 | Optional | Duration of each recurrence of review (accessReviewInstance) in number of days. NOTE: If the stageSettings of the accessReviewScheduleDefinition object is defined, its durationInDays setting will be used instead of the value of this property.' RecommendationsEnabled = 'Boolean | Optional | Indicates whether decision recommendations are enabled or disabled. NOTE: If the stageSettings of the accessReviewScheduleDefinition object is defined, its recommendationsEnabled setting will be used instead of the value of this property.' DecisionHistoriesForReviewersEnabled = 'Boolean | Optional | Indicates whether decisions on previous access review stages are available for reviewers on an accessReviewInstance with multiple subsequent stages. If not provided, the default is disabled (false).' DefaultDecisionEnabled = 'Boolean | Optional | Indicates whether the default decision is enabled or disabled when reviewers do not respond. Default value is false. CAUTION: If both autoApplyDecisionsEnabled and defaultDecisionEnabled are true, all access for the principals to the resource risks being revoked if the reviewers fail to respond.' JustificationRequiredOnApproval = 'Boolean | Optional | Indicates whether reviewers are required to provide justification with their decision. Default value is false.' RecommendationInsightSettings = @( @{ SignInScope = 'String | Optional | Indicates whether inactivity is calculated based on the user''s inactivity in the tenant or in the application. The possible values are tenant, application, unknownFutureValue. application is only relevant when the access review is a review of an assignment to an application. | tenant / application / unknownFutureValue' RecommendationLookBackDuration = 'String | Optional | Optional. Indicates the time period of inactivity (with respect to the start date of the review instance) that recommendations will be configured from. The recommendation will be to deny if the user is inactive during the look-back duration. For reviews of groups and Microsoft Entra roles, any duration is accepted. For reviews of applications, 30 days is the maximum duration. If not specified, the duration is 30 days.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.groupPeerOutlierRecommendationInsightSettings / #microsoft.graph.userLastSignInRecommendationInsightSetting' } ) AutoApplyDecisionsEnabled = 'Boolean | Optional | Indicates whether decisions are automatically applied. When set to false, an admin must apply the decisions manually once the reviewer completes the access review. When set to true, decisions are applied automatically after the access review instance duration ends, whether or not the reviewers have responded. Default value is false. CAUTION: If both autoApplyDecisionsEnabled and defaultDecisionEnabled are true, all access for the principals to the resource risks being revoked if the reviewers fail to respond.' ReminderNotificationsEnabled = 'Boolean | Optional | Indicates whether reminders are enabled or disabled. Default value is false.' Recurrence = @{ Range = @{ NumberOfOccurrences = 'UInt32 | Optional | The number of times to repeat the event. Required and must be positive if type is numbered.' Type = 'String | Optional | The recurrence range. Possible values are: endDate, noEnd, numbered. Required. | endDate / noEnd / numbered' RecurrenceTimeZone = 'String | Optional | Time zone for the startDate and endDate properties. Optional. If not specified, the time zone of the event is used.' StartDate = 'String | Optional | The date to start applying the recurrence pattern. The first occurrence of the meeting may be this date or later, depending on the recurrence pattern of the event. Must be the same value as the start property of the recurring event. Required.' EndDate = 'String | Optional | The date to stop applying the recurrence pattern. Depending on the recurrence pattern of the event, the last occurrence of the meeting may not be this date. Required if type is endDate.' } Pattern = @{ DaysOfWeek = @( 'String | Optional | A collection of the days of the week on which the event occurs. The possible values are: sunday, monday, tuesday, wednesday, thursday, friday, saturday. If type is relativeMonthly or relativeYearly, and daysOfWeek specifies more than one day, the event falls on the first day that satisfies the pattern. Required if type is weekly, relativeMonthly, or relativeYearly.' ) Type = 'String | Optional | The recurrence pattern type: daily, weekly, absoluteMonthly, relativeMonthly, absoluteYearly, relativeYearly. Required. For more information, see values of type property. | daily / weekly / absoluteMonthly / relativeMonthly / absoluteYearly / relativeYearly' Interval = 'UInt32 | Optional | The number of units between occurrences, where units can be in days, weeks, months, or years, depending on the type. Required.' Month = 'UInt32 | Optional | The month in which the event occurs. This is a number from 1 to 12.' Index = 'String | Optional | Specifies on which instance of the allowed days specified in daysOfWeek the event occurs, counted from the first instance in the month. The possible values are: first, second, third, fourth, last. Default is first. Optional and used if type is relativeMonthly or relativeYearly. | first / second / third / fourth / last' FirstDayOfWeek = 'String | Optional | The first day of the week. The possible values are: sunday, monday, tuesday, wednesday, thursday, friday, saturday. Default is sunday. Required if type is weekly.' DayOfMonth = 'UInt32 | Optional | The day of the month on which the event occurs. Required if type is absoluteMonthly or absoluteYearly.' } } DefaultDecision = 'String | Optional | Decision chosen if defaultDecisionEnabled is enabled. Can be one of Approve, Deny, or Recommendation.' RecommendationLookBackDuration = 'String | Optional | Optional field. Indicates the period of inactivity (with respect to the start date of the review instance) that recommendations will be configured from. The recommendation will be to deny if the user is inactive during the look-back duration. For reviews of groups and Microsoft Entra roles, any duration is accepted. For reviews of applications, 30 days is the maximum duration. If not specified, the duration is 30 days. NOTE: If the stageSettings of the accessReviewScheduleDefinition object is defined, its recommendationLookBackDuration setting will be used instead of the value of this property.' MailNotificationsEnabled = 'Boolean | Optional | Indicates whether emails are enabled or disabled. Default value is false.' } Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DescriptionForReviewers = 'String | Optional | Description provided by review creators to provide more context of the review to reviewers. Reviewers see this description in the email sent to them requesting their review. Email notifications support up to 256 characters. Supports $select.' ScopeValue = @{ PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' PrincipalScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) Query = 'String | Optional | The query representing what will be reviewed in an access review.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' ResourceScopes = @( @{ Query = 'String | Optional | The query representing what will be reviewed in an access review.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' QueryType = 'String | Optional | Indicates the type of query. Types include MicrosoftGraph and ARM.' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } ) QueryRoot = 'String | Optional | In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query. This property is only required if a relative query is specified. For example, ./manager.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.accessReviewQueryScope / #microsoft.graph.accessReviewReviewerScope / #microsoft.graph.principalResourceMembershipsScope / #microsoft.graph.accessReviewInactiveUsersQueryScope' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | Name of the access review series. Supports $select and $orderby. Required on create.' } ) AccessReviewPolicy = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsGroupOwnerManagementEnabled = 'Boolean | Optional | If true, group owners can create and manage access reviews on groups they own.' } ActivityBasedTimeoutPolicies = @( @{ Id = 'String | Optional | Id of the policy' DefaultTimeOut = 'String | Optional | Timeout value in hh:mm:ss for default: applies the policy to all applications that support activity-based timeout functionality but don''t have application-specific override.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AzurePortalTimeOut = 'String | Optional | Timeout value in hh:mm:ss for c44b4083-3bb0-49c1-b47d-974e53cbdf3c: applies the policy to the Azure portal.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | Display name for this policy. Required.' } ) AdminConsentRequestPolicy = @{ Reviewers = @( @{ ReviewerType = 'String | Optional | Type of reviewwer. Can be User, Group or Role' UniqueId = 'String | Required | [Unique ID to identify this specific object]' QueryRoot = 'String | Optional | Associated query.' ReviewerId = 'String | Optional | Identifier for the reviewer instance.' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsEnabled = 'Boolean | Optional | Determines if the policy is enabled or not.' NotifyReviewers = 'Boolean | Optional | Specifies whether reviewers will receive notifications.' RequestDurationInDays = 'UInt32 | Optional | Specifies the duration the request is active before it automatically expires if no decision is applied.' RemindersEnabled = 'Boolean | Optional | Specifies whether reviewers will receive reminder emails.' } AdministrativeUnits = @( @{ Visibility = 'String | Optional | Visibility of the Administrative Unit. Specify HiddenMembership if members of the AU are hidden' MembershipType = 'String | Optional | Specify membership type. Possible values are Assigned and Dynamic. Note that the functionality is currently in preview.' Members = @( @{ Type = 'String | Optional | Specify User, Group or Device to interpret the identity for Members. Specify User, Group or ServicePrincipal for ScopedRoleMembers. | User / Group / Device / ServicePrincipal' Identity = 'String | Optional | Identity of member. For users, specify a UserPrincipalName. For groups, devices and serviceprincipals, specify DisplayName' } ) Id = 'String | Optional | Object-Id of the Administrative Unit' Ensure = 'String | Optional | Present ensures the Administrative Unit exists, absent ensures it is removed. | Present / Absent' ScopedRoleMembers = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' RoleName = 'String | Optional | Name of the Azure AD Role that is assigned. See https://learn.microsoft.com/en-us/azure/active-directory/roles/admin-units-assign-roles#roles-that-can-be-assigned-with-administrative-unit-scope' RoleMemberInfo = @{ Type = 'String | Optional | Specify User, Group or Device to interpret the identity for Members. Specify User, Group or ServicePrincipal for ScopedRoleMembers. | User / Group / Device / ServicePrincipal' Identity = 'String | Optional | Identity of member. For users, specify a UserPrincipalName. For groups, devices and serviceprincipals, specify DisplayName' } } ) Description = 'String | Optional | Description of the Administrative Unit' IsMemberManagementRestricted = 'Boolean | Optional | Indicates whether the management rights on resources in the administrative units should be restricted to ONLY the administrators scoped on the administrative unit object.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MembershipRuleProcessingState = 'String | Optional | Specify dynamic membership-rule processing-state. Valid values are ''On'' and ''Paused''. Requires that MembershipType is set to Dynamic. Note that the functionality is currently in preview.' MembershipRule = 'String | Optional | Specify membership rule. Requires that MembershipType is set to Dynamic. Note that the functionality is currently in preview.' DisplayName = 'String | Required | DisplayName of the Administrative Unit' } ) Applications = @( @{ Api = @{ PreAuthorizedApplications = @( @{ AppId = 'String | Optional | The unique identifier for the client application.' PermissionIds = @( 'String | Optional | The unique identifier for the scopes the client application is granted.' ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) } Description = 'String | Optional | A free text field to provide a description of the application object to end users. The maximum allowed size is 1024 characters.' Owners = @( 'String | Optional | UPN or ObjectID values of the app''s owners.' ) PublicClient = 'Boolean | Optional | Specifies whether this application is a public client (such as an installed application running on a mobile device). Default is false.' Ensure = 'String | Optional | Specify if the Azure AD App should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsFallbackPublicClient = 'Boolean | Optional | Specifies the fallback application type as public client, such as an installed application running on a mobile device. The default value is false, which means the fallback application type is confidential client such as web app. There are certain scenarios where Microsoft Entra ID cannot determine the client application type (for example, ROPC flow where it is configured without specifying a redirect URI). In those cases, Microsoft Entra ID will interpret the application type based on the value of this property.' AppId = 'String | Optional | AppId for the app.' Permissions = @( @{ AdminConsentGranted = 'Boolean | Optional | Represented whether or not the Admin consent been granted on the app.' Type = 'String | Optional | Type of permission. | AppOnly / Delegated' Name = 'String | Optional | Name of the requested permission.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SourceAPI = 'String | Optional | Name of the API from which the permission comes from.' } ) ApplicationTemplateId = 'String | Optional | Identifier of the associated Application Template.' KnownClientApplications = @( 'String | Optional | Client applications that are tied to this resource application.' ) KeyCredentials = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StartDateTime = 'String | Optional | The date and time at which the credential becomes valid.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.' Type = 'String | Optional | The type of key credential for example, Symmetric, AsymmetricX509Cert.' Key = 'String | Optional | The certificate''s raw data in byte array converted to Base64 string.' KeyId = 'String | Optional | The unique identifier (GUID) for the key.' Usage = 'String | Optional | A string that describes the purpose for which the key can be used for example, Verify.' EndDateTime = 'String | Optional | The date and time at which the credential expires. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.' CustomKeyIdentifier = 'String | Optional | A 40-character binary type that can be used to identify the credential. Optional. When not provided in the payload, defaults to the thumbprint of the certificate.' DisplayName = 'String | Optional | Friendly name for the key. Optional.' } ) UniqueId = 'String | Required | Unique ID to identify this specific object' IdentifierUris = @( 'String | Optional | User-defined URI(s) that uniquely identify a Web application within its Azure AD tenant, or within a verified custom domain.' ) AvailableToOtherTenants = 'Boolean | Optional | Indicates whether this application is available in other tenants.' PasswordCredentials = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Hint = 'String | Optional | Contains the first three characters of the password. Read-only.' StartDateTime = 'String | Optional | The date and time at which the password becomes valid. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Optional.' KeyId = 'String | Optional | The unique identifier for the password.' EndDateTime = 'String | Optional | The date and time at which the password expires represented using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Optional.' DisplayName = 'String | Optional | Friendly name for the password. Optional.' } ) GroupMembershipClaims = 'String | Optional | A bitmask that configures the groups claim issued in a user or OAuth 2.0 access token that the application expects.' ObjectId = 'String | Optional | ObjectID of the app.' OptionalClaims = @{ Saml2Token = @( @{ Source = 'String | Optional | The source (directory object) of the claim. There are predefined claims and user-defined claims from extension properties. If the source value is null, the claim is a predefined optional claim. If the source value is user, the value in the name property is the extension property from the user object.' Name = 'String | Optional | The name of the optional claim.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Essential = 'Boolean | Optional | If the value is true, the claim specified by the client is necessary to ensure a smooth authorization experience for the specific task requested by the end user. The default value is false.' } ) AccessToken = @( @{ Source = 'String | Optional | The source (directory object) of the claim. There are predefined claims and user-defined claims from extension properties. If the source value is null, the claim is a predefined optional claim. If the source value is user, the value in the name property is the extension property from the user object.' Name = 'String | Optional | The name of the optional claim.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Essential = 'Boolean | Optional | If the value is true, the claim specified by the client is necessary to ensure a smooth authorization experience for the specific task requested by the end user. The default value is false.' } ) IdToken = @( @{ Source = 'String | Optional | The source (directory object) of the claim. There are predefined claims and user-defined claims from extension properties. If the source value is null, the claim is a predefined optional claim. If the source value is user, the value in the name property is the extension property from the user object.' Name = 'String | Optional | The name of the optional claim.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Essential = 'Boolean | Optional | If the value is true, the claim specified by the client is necessary to ensure a smooth authorization experience for the specific task requested by the end user. The default value is false.' } ) } LogoutURL = 'String | Optional | The logout url for this application.' DisplayName = 'String | Required | DisplayName of the app' Homepage = 'String | Optional | The URL to the application''s homepage.' AppRoles = @( @{ AllowedMemberTypes = @( 'String | Optional | Specifies whether this app role can be assigned to users and groups (by setting to ''User''), to other application''s (by setting to ''Application'', or both (by setting to ''User'', ''Application''). App roles supporting assignment to other applications'' service principals are also known as application permissions. The ''Application'' value is only supported for app roles defined on application entities.' ) Id = 'String | Optional | Unique role identifier inside the appRoles collection. When creating a new app role, a new GUID identifier must be provided.' IsEnabled = 'Boolean | Optional | When creating or updating an app role, this must be set to true (which is the default). To delete a role, this must first be set to false. At that point, in a subsequent call, this role may be removed.' Origin = 'String | Optional | Specifies if the app role is defined on the application object or on the servicePrincipal entity. Must not be included in any POST or PATCH requests. Read-only.' Description = 'String | Optional | The description for the app role. This is displayed when the app role is being assigned and, if the app role functions as an application permission, during consent experiences.' Value = 'String | Optional | Specifies the value to include in the roles claim in ID tokens and access tokens authenticating an assigned user or service principal. Must not exceed 120 characters in length. Allowed characters are : ! # $ % & '' ( ) * + , - . / : = + _ } , and characters in the ranges 0-9, A-Z and a-z. Any other character, including the space character, aren''t allowed. May not begin with ..' DisplayName = 'String | Optional | Display name for the permission that appears in the app role assignment and consent experiences.' } ) ReplyURLs = @( 'String | Optional | Specifies the URLs that user tokens are sent to for sign in, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to.' ) AuthenticationBehaviors = @{ RequireClientServicePrincipal = 'Boolean | Optional | If true, requires multitenant applications to have a service principal in the resource tenant as part of authorization checks before they''re granted access tokens. This property is only modifiable for multitenant resource applications that rely on access from clients without a service principal and had this behavior as set to false by Microsoft. Tenant administrators should respond to security advisories sent through Azure Health Service events and the Microsoft 365 message center.' BlockAzureADGraphAccess = 'Boolean | Optional | If false, allows the app to have extended access to Azure AD Graph until June 30, 2025 when Azure AD Graph is fully retired. For more information on Azure AD retirement updates, see June 2024 update on Azure AD Graph API retirement.' RemoveUnverifiedEmailClaim = 'Boolean | Optional | If true, removes the email claim from tokens sent to an application when the email address''s domain can''t be verified.' } OnPremisesPublishing = @{ applicationServerTimeout = 'String | Optional | The duration the connector waits for a response from the backend application before closing the connection. Possible values are default, long.' singleSignOnSettings = @{ singleSignOnMode = 'String | Optional | The preferred single-sign on mode for the application. Possible values are: none, onPremisesKerberos, aadHeaderBased,pingHeaderBased, oAuthToken.' kerberosSignOnSettings = @{ kerberosServicePrincipalName = 'String | Optional | The Internal Application SPN of the application server. This SPN needs to be in the list of services to which the connector can present delegated credentials.' kerberosSignOnMappingAttributeType = 'String | Optional | The Delegated Login Identity for the connector to use on behalf of your users. For more information, see Working with different on-premises and cloud identities . Possible values are: userPrincipalName, onPremisesUserPrincipalName, userPrincipalUsername, onPremisesUserPrincipalUsername, onPremisesSAMAccountName.' } } isStateSessionEnabled = 'Boolean | Optional | Indicates whether validation of the state parameter when the client uses the OAuth 2.0 authorization code grant flow is enabled. This setting allows admins to specify whether they want to enable CSRF protection for their apps.' alternateUrl = 'String | Optional | If you''re configuring a traffic manager in front of multiple App Proxy applications, the alternateUrl is the user-friendly URL that points to the traffic manager.' externalUrl = 'String | Optional | The published external url for the application. For example, https://intranet-contoso.msappproxy.net/.' isTranslateHostHeaderEnabled = 'Boolean | Optional | Indicates if the application should translate urls in the response headers. Keep this value as true unless your application required the original host header in the authentication request. Default value is true.' isTranslateLinksInBodyEnabled = 'Boolean | Optional | Indicates if the application should translate urls in the application body. Keep this value as false unless you have hardcoded HTML links to other on-premises applications and don''t use custom domains. For more information, see Link translation with Application Proxy. Default value is false.' internalUrl = 'String | Optional | The internal url of the application. For example, https://intranet/.' isPersistentCookieEnabled = 'Boolean | Optional | Indicates if the Persistent cookie flag should be set in the HTTP response headers. Keep this value set to false. Only use this setting for applications that can''t share cookies between processes. For more information about cookie settings, see Cookie settings for accessing on-premises applications in Microsoft Entra ID. Default value is false.' externalAuthenticationType = 'String | Optional | Details the pre-authentication setting for the application. Pre-authentication enforces that users must authenticate before accessing the app. Pass through doesn''t require authentication. Possible values are: passthru, aadPreAuthentication.' isBackendCertificateValidationEnabled = 'Boolean | Optional | Indicates whether backend SSL certificate validation is enabled for the application. For all new Application Proxy apps, the property is set to true by default. For all existing apps, the property is set to false.' onPremisesApplicationSegments = @( @{ internalUrl = 'String | Optional | The internal URL of the application segment; for example, https://intranet/.' alternateUrl = 'String | Optional | If you''re configuring a traffic manager in front of multiple App Proxy application segments, contains the user-friendly URL that will point to the traffic manager.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' corsConfigurations = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' allowedHeaders = @( 'String | Optional | The request headers that the origin domain may specify on the CORS request. The wildcard character * indicates that any header beginning with the specified prefix is allowed.' ) allowedOrigins = @( 'String | Optional | The origin domains that are permitted to make a request against the service via CORS. The origin domain is the domain from which the request originates. The origin must be an exact case-sensitive match with the origin that the user age sends to the service.' ) resource = 'String | Optional | Resource within the application segment for which CORS permissions are granted. / grants permission for whole app segment.' allowedMethods = @( 'String | Optional | The HTTP request methods that the origin domain may use for a CORS request.' ) maxAgeInSeconds = 'UInt32 | Optional | The maximum amount of time that a browser should cache the response to the preflight OPTIONS request.' } ) externalUrl = 'String | Optional | The published external URL for the application segment; for example, https://intranet.contoso.com./' } ) isSecureCookieEnabled = 'Boolean | Optional | Indicates if the Secure cookie flag should be set in the HTTP response headers. Set this value to true to transmit cookies over a secure channel such as an encrypted HTTPS request. Default value is true.' isHttpOnlyCookieEnabled = 'Boolean | Optional | Indicates if the HTTPOnly cookie flag should be set in the HTTP response headers. Set this value to true to have Application Proxy cookies include the HTTPOnly flag in the HTTP response headers. If using Remote Desktop Services, set this value to False. Default value is false.' } } ) AttributeSets = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Identifier for the attribute set that is unique within a tenant. Can be up to 32 characters long and include Unicode characters. Cannot contain spaces or special characters. Cannot be changed later. Case insensitive' Id = 'String | Required | Identifier for the attribute set that is unique within a tenant. Can be up to 32 characters long and include Unicode characters. Cannot contain spaces or special characters. Cannot be changed later. Case insensitive' MaxAttributesPerSet = 'UInt32 | Optional | Maximum number of custom security attributes that can be defined in this attribute set. Default value is null. If not specified, the administrator can add up to the maximum of 500 active attributes per tenant. Can be changed later.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present' } ) AuthenticationContextClassReferences = @( @{ Id = 'String | Required | Identifier used to reference the authentication context class. The id is used to trigger step-up authentication for the referenced authentication requirements and is the value that will be issued in the acrs claim of an access token. This value in the claim is used to verify that the required authentication context has been satisfied. The allowed values are c1 through c25. | c1 / c2 / c3 / c4 / c5 / c6 / c7 / c8 / c9 / c10 / c11 / c12 / c13 / c14 / c15 / c16 / c17 / c18 / c19 / c20 / c21 / c22 / c23 / c24 / c25' IsAvailable = 'Boolean | Optional | Indicates whether the authenticationContextClassReference has been published by the security admin and is ready for use by apps. When it''s set to false, it shouldn''t be shown in admin UX experiences because the value isn''t currently available for selection.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | A short explanation of the policies that are enforced by authenticationContextClassReference. This value should be used to provide secondary text to describe the authentication context class reference when building user-facing admin experiences. For example, a selection UX.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Optional | A friendly name that identifies the authenticationContextClassReference object when building user-facing admin experiences. For example, a selection UX' } ) AuthenticationFlowPolicy = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SelfServiceSignUpEnabled = 'Boolean | Optional | Indicates whether self-service sign-up flow is enabled or disabled. The default value is false. This property isn''t a key. Required.' Id = 'String | Optional | Unique identifier of the Authentication Flow Policy.' Description = 'String | Optional | Description of the Authentication Flow Policy.' DisplayName = 'String | Optional | Display name of the Authentication Flow Policy.' } AuthenticationMethodPolicies = @( @{ Id = 'String | Optional | The unique identifier for an entity. Read-only.' PolicyMigrationState = 'String | Optional | The state of migration of the authentication methods policy from the legacy multifactor authentication and self-service password reset (SSPR) policies. The possible values are: premigration - means the authentication methods policy is used for authentication only, legacy policies are respected. migrationInProgress - means the authentication methods policy is used for both authenication and SSPR, legacy policies are respected. migrationComplete - means the authentication methods policy is used for authentication and SSPR, legacy policies are ignored. unknownFutureValue - Evolvable enumeration sentinel value. Do not use. | preMigration / migrationInProgress / migrationComplete / unknownFutureValue' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present' ReconfirmationInDays = 'UInt32 | Optional | Days before the user will be asked to reconfirm their method.' Description = 'String | Optional | A description of the policy.' ReportSuspiciousActivitySettings = @{ VoiceReportingCode = 'UInt32 | Optional | Specifies the number the user enters on their phone to report the MFA prompt as suspicious.' IncludeTarget = @{ Id = 'String | Optional | The ID of the entity targeted.' TargetType = 'String | Optional | The kind of entity targeted. Possible values are: user, group. | user / group / unknownFutureValue' } State = 'String | Optional | Specifies the state of the reportSuspiciousActivitySettings object. | default / enabled / disabled / unknownFutureValue' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RegistrationEnforcement = @{ AuthenticationMethodsRegistrationCampaign = @{ SnoozeDurationInDays = 'UInt32 | Optional | Specifies the number of days that the user sees a prompt again if they select ''Not now'' and snoozes the prompt. Minimum 0 days. Maximum: 14 days. If the value is ''0'' The user is prompted during every MFA attempt.' ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD user or group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: user, group, unknownFutureValue. | user / group / unknownFutureValue' } ) IncludeTargets = @( @{ TargetedAuthenticationMethod = 'String | Optional | The authentication method that the user is prompted to register. The value must be microsoftAuthenticator.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: user, group, unknownFutureValue. | user / group / unknownFutureValue' Id = 'String | Optional | The object identifier of an Azure AD user or group.' } ) State = 'String | Optional | Enable or disable the feature. Possible values are: default, enabled, disabled, unknownFutureValue. The default value is used when the configuration hasn''t been explicitly set and uses the default behavior of Azure AD for the setting. The default value is disabled. | default / enabled / disabled / unknownFutureValue' } } PolicyVersion = 'String | Optional | The version of the policy in use.' SystemCredentialPreferences = @{ ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) IncludeTargets = @( @{ Id = 'String | Optional | The ID of the entity targeted.' TargetType = 'String | Optional | The kind of entity targeted. Possible values are: user, group. | user / group / unknownFutureValue' } ) State = 'String | Optional | Indicates whether the feature is enabled or disabled. Possible values are: default, enabled, disabled, unknownFutureValue. The default value is used when the configuration hasn''t been explicitly set, and uses the default behavior of Azure Active Directory for the setting. The default value is disabled. | default / enabled / disabled / unknownFutureValue' } DisplayName = 'String | Required | The name of the policy.' } ) AuthenticationMethodPoliciesAuthenticator = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' FeatureSettings = @{ DisplayLocationInformationRequiredState = @{ ExcludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } IncludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } State = 'String | Optional | Enable or disable the feature. Possible values are: default, enabled, disabled, unknownFutureValue. The default value is used when the configuration hasn''t been explicitly set and uses the default behavior of Azure AD for the setting. The default value is disabled. | default / enabled / disabled / unknownFutureValue' } NumberMatchingRequiredState = @{ ExcludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } IncludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } State = 'String | Optional | Enable or disable the feature. Possible values are: default, enabled, disabled, unknownFutureValue. The default value is used when the configuration hasn''t been explicitly set and uses the default behavior of Azure AD for the setting. The default value is disabled. | default / enabled / disabled / unknownFutureValue' } CompanionAppAllowedState = @{ ExcludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } IncludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } State = 'String | Optional | Enable or disable the feature. Possible values are: default, enabled, disabled, unknownFutureValue. The default value is used when the configuration hasn''t been explicitly set and uses the default behavior of Azure AD for the setting. The default value is disabled. | default / enabled / disabled / unknownFutureValue' } DisplayAppInformationRequiredState = @{ ExcludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } IncludeTarget = @{ Id = 'String | Optional | The ID of the entity that''s targeted in the include or exclude rule or all_users to target all users.' TargetType = 'String | Optional | The kind of entity that''s targeted. The possible values are: group, administrativeUnit, role, unknownFutureValue. | group / administrativeUnit / role / unknownFutureValue' } State = 'String | Optional | Enable or disable the feature. Possible values are: default, enabled, disabled, unknownFutureValue. The default value is used when the configuration hasn''t been explicitly set and uses the default behavior of Azure AD for the setting. The default value is disabled. | default / enabled / disabled / unknownFutureValue' } } Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) IsSoftwareOathEnabled = 'Boolean | Optional | true if users can use the OTP code generated by the Microsoft Authenticator app, false otherwise.' State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) } ) AuthenticationMethodPoliciesEmail = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AllowExternalIdToUseEmailOtp = 'String | Optional | Determines whether email OTP is usable by external users for authentication. Possible values are: default, enabled, disabled, unknownFutureValue. Tenants in the default state who did not use public preview will automatically have email OTP enabled beginning in October 2021. | default / enabled / disabled / unknownFutureValue' } ) AuthenticationMethodPoliciesExternal = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' OpenIdConnectSetting = @{ DiscoveryUrl = 'String | Optional | The host URL of the external identity provider''s OIDC discovery endpoint.' ClientId = 'String | Optional | The Microsoft Entra ID''s client ID as generated by the provider or admin to identify Microsoft Entra ID.' } AppId = 'String | Optional | The appId for the app registration in Microsoft Entra ID representing the integration with the external provider.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | The displayName of the authentication policy configuration. Read-only.' } ) AuthenticationMethodPoliciesFido2 = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' IsSelfServiceRegistrationAllowed = 'Boolean | Optional | Determines if users can register new FIDO2 security keys.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) KeyRestrictions = @{ IsEnforced = 'Boolean | Optional | Determines if the configured key enforcement is enabled.' EnforcementType = 'String | Optional | Enforcement type. Possible values are: allow, block. | allow / block / unknownFutureValue' AaGuids = @( 'String | Optional | A collection of Authenticator Attestation GUIDs. AADGUIDs define key types and manufacturers.' ) } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' IsAttestationEnforced = 'Boolean | Optional | Determines whether attestation must be enforced for FIDO2 security key registration.' } ) AuthenticationMethodPoliciesHardware = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } ) AuthenticationMethodPoliciesSms = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } ) AuthenticationMethodPoliciesSoftware = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } ) AuthenticationMethodPolicyTemporaries = @( @{ IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) Id = 'String | Required | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DefaultLength = 'UInt32 | Optional | Default length in characters of a Temporary Access Pass object. Must be between 8 and 48 characters.' MinimumLifetimeInMinutes = 'UInt32 | Optional | Minimum lifetime in minutes for any Temporary Access Pass created in the tenant. Value can be between 10 and 43200 minutes (equivalent to 30 days).' ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MaximumLifetimeInMinutes = 'UInt32 | Optional | Maximum lifetime in minutes for any Temporary Access Pass created in the tenant. Value can be between 10 and 43200 minutes (equivalent to 30 days).' DefaultLifetimeInMinutes = 'UInt32 | Optional | Default lifetime in minutes for a Temporary Access Pass. Value can be any integer between the minimumLifetimeInMinutes and maximumLifetimeInMinutes.' IsUsableOnce = 'Boolean | Optional | If true, all the passes in the tenant will be restricted to one-time use. If false, passes in the tenant can be created to be either one-time use or reusable.' } ) AuthenticationMethodPoliciesVoice = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | user / group / unknownFutureValue' } ) IsOfficePhoneAllowed = 'Boolean | Optional | true if users can register office phones, otherwise, false.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' } ) AuthenticationMethodPoliciesX509 = @( @{ AuthenticationModeConfiguration = @{ Rules = @( @{ X509CertificateAuthenticationMode = 'String | Optional | The type of strong authentication mode. The possible values are: x509CertificateSingleFactor, x509CertificateMultiFactor, unknownFutureValue. Required. | x509CertificateSingleFactor / x509CertificateMultiFactor / unknownFutureValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Identifier = 'String | Optional | The identifier of the X.509 certificate. Required.' X509CertificateRuleType = 'String | Optional | The type of the X.509 certificate mode configuration rule. The possible values are: issuerSubject, policyOID, unknownFutureValue. Required. | issuerSubject / policyOID / unknownFutureValue' } ) X509CertificateAuthenticationDefaultMode = 'String | Optional | The type of strong authentication mode. The possible values are: x509CertificateSingleFactor, x509CertificateMultiFactor, unknownFutureValue. | x509CertificateSingleFactor / x509CertificateMultiFactor / unknownFutureValue' } Id = 'String | Required | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IncludeTargets = @( @{ isRegistrationRequired = 'Boolean | Optional | Determines if the user is enforced to register the authentication method.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | group / unknownFutureValue' Id = 'String | Optional | The object identifier of an Azure AD group.' } ) ExcludeTargets = @( @{ Id = 'String | Optional | The object identifier of an Azure AD group.' TargetType = 'String | Optional | The type of the authentication method target. Possible values are: group and unknownFutureValue. | group / unknownFutureValue' } ) State = 'String | Optional | The state of the policy. Possible values are: enabled, disabled. | enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CertificateUserBindings = @( @{ Priority = 'UInt32 | Optional | The priority of the binding. Azure AD uses the binding with the highest priority. This value must be a non-negative integer and unique in the collection of objects in the certificateUserBindings property of an x509CertificateAuthenticationMethodConfiguration object. Required' UserProperty = 'String | Optional | Defines the Azure AD user property of the user object to use for the binding. The possible values are: userPrincipalName, onPremisesUserPrincipalName, email. Required.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' X509CertificateField = 'String | Optional | The field on the X.509 certificate to use for the binding. The possible values are: PrincipalName, RFC822Name.' } ) } ) AuthenticationRequirements = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' PerUserMfaState = 'String | Optional | The state of the MFA enablement for the user. Possible values are: enabled, disabled. | enabled / disabled' UserPrincipalName = 'String | Required | The unique identifier for an entity. Read-only.' } ) AuthenticationStrengthPolicies = @( @{ Description = 'String | Optional | A description of the policy.' Id = 'String | Optional | The unique identifier of the policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowedCombinations = @( 'String | Optional | The authentication method combinations allowed by this authentication strength policy.' ) DisplayName = 'String | Required | The name of the policy.' } ) AuthorizationPolicy = @{ GuestUserRole = 'String | Optional | The role that should be granted to guest users. Refer to List unifiedRoleDefinitions to find the list of available role templates. Only supported roles today are User, Guest User, and Restricted Guest User (2af84b1e-32c8-42b7-82bc-daa82404023b). | Guest / RestrictedGuest / User' PermissionGrantPolicyIdsAssignedToDefaultUserRole = @( 'String | Optional | String collection Indicates if user consent to apps is allowed, and if it is, which permission to grant consent and which app consent policy (permissionGrantPolicy) govern the permission for users to grant consent. Value should be in the format managePermissionGrantsForSelf.{id}, where {id} is the id of a built-in or custom app consent policy. An empty list indicates user consent to apps is disabled.' ) DefaultUserRoleAllowedToReadOtherUsers = 'Boolean | Optional | Boolean Indicates whether the default user role can read other users.' DefaultUserRoleAllowedToReadBitlockerKeysForOwnedDevice = 'Boolean | Optional | Indicates whether the registered owners of a device can read their own BitLocker recovery keys with default user role.' DefaultUserRoleAllowedToCreateTenants = 'Boolean | Optional | Indicates whether the default user role can create tenants. This setting corresponds to the Restrict non-admin users from creating tenants setting in the User settings menu in the Azure portal. When this setting is false, users assigned the Tenant Creator role can still create tenants.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify that the Azure Authorization Policy should exist. | Present' AllowedToSignUpEmailBasedSubscriptions = 'Boolean | Optional | Boolean Indicates whether users can sign up for email based subscriptions.' AllowedToUseSSPR = 'Boolean | Optional | Boolean Indicates whether the Self-Serve Password Reset feature can be used by users on the tenant.' Description = 'String | Optional | Description of this policy.' DisplayName = 'String | Optional | Display name for this policy.' DefaultUserRoleAllowedToCreateApps = 'Boolean | Optional | Boolean Indicates whether the default user role can create applications.' DefaultUserRoleAllowedToCreateSecurityGroups = 'Boolean | Optional | Boolean Indicates whether the default user role can create security groups.' BlockMsolPowershell = 'Boolean | Optional | Boolean To disable the use of MSOL PowerShell, set this property to true. This will also disable user-based access to the legacy service endpoint used by MSOL PowerShell. This does not affect Azure AD Connect or Microsoft Graph.' AllowEmailVerifiedUsersToJoinOrganization = 'Boolean | Optional | Boolean Indicates whether a user can join the tenant by email validation.' AllowInvitesFrom = 'String | Optional | Indicates who can invite external users to the organization. Possible values are: None, AdminsAndGuestInviters, AdminsGuestInvitersAndAllMembers, Everyone. Everyone is the default setting for all cloud environments except US Government. | None / AdminsAndGuestInviters / AdminsGuestInvitersAndAllMembers / Everyone' } ClaimsMappingPolicies = @( @{ IsOrganizationDefault = 'Boolean | Optional | If set to true, activates this policy. There can be many policies for the same policy type, but only one can be activated as the organization default. Optional, default value is false.' Description = 'String | Optional | Description for this policy. Required.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Definition = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' ClaimsMappingPolicy = @{ ClaimsTransformation = @( @{ OutputClaims = @( @{ TransformationClaimType = 'String | Optional | The transformation type of the output claims of the claims transformation in the claims mapping policy.' ClaimTypeReferenceId = 'String | Optional | The claim type reference ID of the output claims of the claims transformation in the claims mapping policy.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) TransformationMethod = 'String | Optional | The transformation method of the claims transformation in the claims mapping policy.' InputParameters = @( @{ DataType = 'String | Optional | The data type of the input parameters of the claims transformation in the claims mapping policy.' Id = 'String | Optional | The object identifier of the input parameters of the claims transformation in the claims mapping policy.' Value = 'String | Optional | The value of the input parameters of the claims transformation in the claims mapping policy.' } ) Id = 'String | Optional | The object identifier of the claims transformation in the claims mapping policy.' } ) ClaimsSchema = @( @{ SamlClaimType = 'String | Optional | The SAML claims type of the claims schema in the claims mapping policy.' Source = 'String | Optional | The source name of the claims schema in the claims mapping policy.' Id = 'String | Optional | The object identifier of the claims schema in the claims mapping policy.' } ) IncludeBasicClaimSet = 'Boolean | Optional | If set to true, all claims in the basic claim set are emitted in tokens affected by the policy. If set to false, claims in the basic claim set are not in the tokens, unless they are individually added in the ClaimsSchema property of the same policy.' Version = 'UInt32 | Optional | Set value of 1. Required.' } } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | Display name for this policy. Required.' } ) ConditionalAccessPolicies = @( @{ TransferMethods = 'String | Optional | Names of the associated authentication flow transfer methods. Possible values are '''', ''deviceCodeFlow'', ''authenticationTransfer'', or ''deviceCodeFlow,authenticationTransfer''.' PersistentBrowserIsEnabled = 'Boolean | Optional | Specifies, whether Browser Persistence is controlled by the Policy.' IncludeApplications = @( 'String | Optional | Cloud Apps in scope of the Policy.' ) DisplayName = 'String | Required | DisplayName of the AAD CA Policy' IncludeRoles = @( 'String | Optional | AAD Admin Roles in scope of the Policy.' ) ApplicationsFilter = 'String | Optional | Rule syntax is similar to that used for membership rules for groups in Microsoft Entra ID.' InsiderRiskLevels = 'String | Optional | Insider risk levels conditions. | minor / moderate / elevated / unknownFutureValue' SignInFrequencyInterval = 'String | Optional | Sign in frequency interval. Possible values are: timeBased, everyTime and unknownFutureValue. | timeBased / everyTime / unknownFutureValue' ApplicationEnforcedRestrictionsIsEnabled = 'Boolean | Optional | Specifies, whether Application Enforced Restrictions are enabled in the Policy.' UserRiskLevels = @( 'String | Optional | AAD Identity Protection User Risk Levels in scope of the Policy.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ExcludeUsers = @( 'String | Optional | Users out of scope of the Policy.' ) GrantControlOperator = 'String | Optional | Operator to be used for Grant Controls. | AND / OR' Id = 'String | Optional | Specifies the GUID for the Policy.' CustomAuthenticationFactors = @( 'String | Optional | Custom Controls assigned to the grant property of this policy.' ) IncludeServicePrincipals = @( 'String | Optional | Service Principals in scope of the Policy. ''Attribute Definition Reader'' role is needed.' ) IncludeExternalTenantsMembers = @( 'String | Optional | Represents the Included collection of tenant ids in the scope of Conditional Access for guests and external users policy targeting.' ) ServicePrincipalFilterRule = 'String | Optional | Rule syntax for the Service Principal filter. ''Attribute Definition Reader'' role is needed.' CloudAppSecurityIsEnabled = 'Boolean | Optional | Specifies, whether Cloud App Security is enforced by the Policy.' SignInFrequencyIsEnabled = 'Boolean | Optional | Specifies, whether sign-in frequency is enforced by the Policy.' ExcludeServicePrincipals = @( 'String | Optional | Service Principals out of scope of the Policy. ''Attribute Definition Reader'' role is needed.' ) IncludeExternalTenantsMembershipKind = 'String | Optional | Represents the Included Tenants membership kind. The possible values are: all, enumerated, unknownFutureValue. enumerated references an object of conditionalAccessEnumeratedExternalTenants derived type. | / all / enumerated / unknownFutureValue' SignInRiskLevels = @( 'String | Optional | AAD Identity Protection Sign-in Risk Levels in scope of the Policy.' ) PersistentBrowserMode = 'String | Optional | Specifies, what Browser Persistence control is enforced by the Policy. | Always / Never / ' ExcludeGuestOrExternalUserTypes = @( 'String | Optional | Represents the Excluded internal guests or external user types. This is a multi-valued property. Supported values are: b2bCollaborationGuest, b2bCollaborationMember, b2bDirectConnectUser, internalGuest, OtherExternalUser, serviceProvider and unknownFutureValue. | none / internalGuest / b2bCollaborationGuest / b2bCollaborationMember / b2bDirectConnectUser / otherExternalUser / serviceProvider / unknownFutureValue' ) IncludePlatforms = @( 'String | Optional | Client Device Platforms in scope of the Policy.' ) ServicePrincipalFilterMode = 'String | Optional | Mode to use for the Service Principal filter. Possible values are include or exclude. ''Attribute Definition Reader'' role is needed. | include / exclude' ExcludeGroups = @( 'String | Optional | Groups out of scope of the Policy.' ) IncludeUserActions = @( 'String | Optional | User Actions in scope of the Policy.' ) ExcludeLocations = @( 'String | Optional | AAD Named Locations out of scope of the Policy.' ) ApplicationsFilterMode = 'String | Optional | Mode to use for the filter. Possible values are include or exclude. | include / exclude' DeviceFilterRule = 'String | Optional | Client Device Filter rule of the Policy.' BuiltInControls = @( 'String | Optional | List of built-in Grant Controls to be applied by the Policy.' ) AuthenticationStrength = 'String | Optional | Name of the associated authentication strength policy.' TermsOfUse = 'String | Optional | Display name of the terms of use to assign.' Ensure = 'String | Optional | Specify if the Azure AD CA Policy should exist or not. | Present / Absent' ExcludePlatforms = @( 'String | Optional | Client Device Platforms out of scope of the Policy.' ) AuthenticationContexts = @( 'String | Optional | Authentication context class references.' ) SignInFrequencyType = 'String | Optional | Sign in frequency unit (days/hours) to be interpreted by the policy. | Days / Hours / ' CloudAppSecurityType = 'String | Optional | Specifies, what Cloud App Security control is enforced by the Policy.' ExcludeRoles = @( 'String | Optional | AAD Admin Roles out of scope of the Policy.' ) SignInFrequencyValue = 'UInt32 | Optional | Sign in frequency time in the given unit to be enforced by the policy.' ExcludeApplications = @( 'String | Optional | Cloud Apps out of scope of the Policy.' ) ExcludeExternalTenantsMembershipKind = 'String | Optional | Represents the Excluded Tenants membership kind. The possible values are: all, enumerated, unknownFutureValue. enumerated references an object of conditionalAccessEnumeratedExternalTenants derived type. | / all / enumerated / unknownFutureValue' State = 'String | Optional | Specifies the State of the Policy. | disabled / enabled / enabledForReportingButNotEnforced' IncludeGuestOrExternalUserTypes = @( 'String | Optional | Represents the Included internal guests or external user types. This is a multi-valued property. Supported values are: b2bCollaborationGuest, b2bCollaborationMember, b2bDirectConnectUser, internalGuest, OtherExternalUser, serviceProvider and unknownFutureValue. | none / internalGuest / b2bCollaborationGuest / b2bCollaborationMember / b2bDirectConnectUser / otherExternalUser / serviceProvider / unknownFutureValue' ) DeviceFilterMode = 'String | Optional | Client Device Filter mode of the Policy. | include / exclude' ClientAppTypes = @( 'String | Optional | Client App types in scope of the Policy.' ) IncludeLocations = @( 'String | Optional | AAD Named Locations in scope of the Policy.' ) ExcludeExternalTenantsMembers = @( 'String | Optional | Represents the Excluded collection of tenant ids in the scope of Conditional Access for guests and external users policy targeting.' ) IncludeUsers = @( 'String | Optional | Users in scope of the Policy.' ) IncludeGroups = @( 'String | Optional | Groups in scope of the Policy.' ) } ) ConnectorGroupApplicationProxies = @( @{ Region = 'String | Optional | The region the connectorGroup is assigned to and will optimize traffic for. This region can only be set if no connectors or applications are assigned to the connectorGroup. The possible values are: nam (for North America), eur (for Europe), aus (for Australia), asia (for Asia), ind (for India), and unknownFutureValue. | nam / eur / aus / asia / ind / unknownFutureValue' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The name associated with the connectorGroup.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The unique identifier for an entity. Read-only.' } ) CrossTenantAccessPolicy = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Optional | The name of the policy.' Ensure = 'String | Optional | Specify if the policy should exist or not. | Present' AllowedCloudEndpoints = @( 'String | Optional | Used to specify which Microsoft clouds an organization would like to collaborate with. By default, this value is empty. | microsoftonline.com / microsoftonline.us / partner.microsoftonline.cn' ) } CrossTenantAccessPolicyConfigurationDefault = @{ Ensure = 'String | Optional | Specify if the instance should exist or not. | Present' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) InboundTrust = @{ IsCompliantDeviceAccepted = 'Boolean | Optional | Specifies whether compliant devices from external Azure AD organizations are trusted.' IsHybridAzureADJoinedDeviceAccepted = 'Boolean | Optional | Specifies whether hybrid Azure AD joined devices from external Azure AD organizations are trusted.' IsMfaAccepted = 'Boolean | Optional | Specifies whether MFA from external Azure AD organizations is trusted.' } B2BCollaborationInbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } B2BCollaborationOutbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } B2BDirectConnectOutbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } B2BDirectConnectInbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } } CrossTenantAccessPoliciesConfigurationPartner = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' PartnerTenantId = 'String | Required | The tenant identifier for the partner Azure Active Directory (Azure AD) organization.' B2BDirectConnectOutbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } InboundTrust = @{ IsCompliantDeviceAccepted = 'Boolean | Optional | Specifies whether compliant devices from external Azure AD organizations are trusted.' IsHybridAzureADJoinedDeviceAccepted = 'Boolean | Optional | Specifies whether hybrid Azure AD joined devices from external Azure AD organizations are trusted.' IsMfaAccepted = 'Boolean | Optional | Specifies whether MFA from external Azure AD organizations is trusted.' } Ensure = 'String | Optional | Specify if the policy should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AutomaticUserConsentSettings = @{ InboundAllowed = 'Boolean | Optional | Specifies whether you want to automatically trust Inbound invitations.' OutboundAllowed = 'Boolean | Optional | Specifies whether you want to automatically trust Outbound invitations.' } B2BDirectConnectInbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } B2BCollaborationOutbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } B2BCollaborationInbound = @{ Applications = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } UsersAndGroups = @{ AccessType = 'String | Optional | Defines whether access is allowed or blocked. The possible values are: allowed, blocked, unknownFutureValue. | allowed / blocked / unknownFutureValue' Targets = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' TargetType = 'String | Optional | The type of resource that you want to target. The possible values are: user, group, application, unknownFutureValue. | user / group / application / unknownFutureValue' Target = 'String | Optional | The unique identifier of the user, group, or application; one of the following keywords: AllUsers and AllApplications; or for targets that are applications, you may use reserved values.' } ) } } } ) CustomAuthenticationExtensions = @( @{ EndpointConfiguration = @{ LogicAppWorkflowName = 'String | Optional | Defines the workflow name for the logic app' SubscriptionId = 'String | Optional | Defines the subscription id for the logic app' TargetUrl = 'String | Optional | Defines the target url for the http endpoint' ResourceGroupName = 'String | Optional | Defines the resource group name for the logic app' EndpointType = 'String | Optional | Defines the type of the endpoint configuration' } Id = 'String | Optional | Unique identifier of the Attribute Definition.' AuthenticationConfigurationResourceId = 'String | Optional | Defines the authentication configuration resource id' ClientConfigurationMaximumRetries = 'UInt32 | Optional | Defines the client configuration max retries' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Description = 'String | Optional | Description of the custom security attribute. Can be up to 128 characters long and include Unicode characters. Can''t contain spaces or special characters. Can be changed later. ' ClaimsForTokenConfiguration = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' ClaimIdInApiResponse = 'String | Optional | Defines the claim id in api response.' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ClientConfigurationTimeoutMilliseconds = 'UInt32 | Optional | Defines the client configuration timeout in milliseconds' CustomAuthenticationExtensionType = 'String | Optional | Defines the custom authentication extension type.' AuthenticationConfigurationType = 'String | Optional | Defines the authentication configuration type' DisplayName = 'String | Required | Display Name of the custom security attribute. Must be unique within an attribute set. Can be up to 32 characters long and include Unicode characters. Can''t contain spaces or special characters. Can''t be changed later. Case sensitive.' } ) CustomSecurityAttributeDefinitions = @( @{ AttributeSet = 'String | Required | Name of the attribute set. Case sensitive.' Id = 'String | Optional | Unique identifier of the Attribute Definition.' Type = 'String | Optional | Data type for the custom security attribute values. Supported types are: Boolean, Integer, and String. Can''t be changed later.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' IsSearchable = 'Boolean | Optional | Indicates whether custom security attribute values are indexed for searching on objects that are assigned attribute values. Can''t be changed later.' Description = 'String | Optional | Description of the custom security attribute. Can be up to 128 characters long and include Unicode characters. Can''t contain spaces or special characters. Can be changed later. ' IsCollection = 'Boolean | Optional | Indicates whether multiple values can be assigned to the custom security attribute. Can''t be changed later. If type is set to Boolean, isCollection can''t be set to true.' Name = 'String | Required | Name of the custom security attribute. Must be unique within an attribute set. Can be up to 32 characters long and include Unicode characters. Can''t contain spaces or special characters. Can''t be changed later. Case sensitive.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Status = 'String | Optional | Specifies whether the custom security attribute is active or deactivated. Acceptable values are Available and Deprecated. Can be changed later.' UsePreDefinedValuesOnly = 'Boolean | Optional | Indicates whether only predefined values can be assigned to the custom security attribute. If set to false, free-form values are allowed. Can later be changed from true to false, but can''t be changed from false to true. If type is set to Boolean, usePreDefinedValuesOnly can''t be set to true.' } ) DeviceRegistrationPolicy = @{ AzureAdJoinLocalAdminsRegisteringUsers = @( 'String | Optional | List of users that this policy applies to.' ) LocalAdminPasswordIsEnabled = 'Boolean | Optional | Specifies whether this policy scope is configurable by the admin. The default value is false. An admin can set it to true to enable Local Admin Password Solution (LAPS) within their organzation.' AzureAdJoinLocalAdminsRegisteringMode = 'String | Optional | Scope that a device registration policy applies to for local admins. | All / Selected / None' AzureAdJoinLocalAdminsRegisteringGroups = @( 'String | Optional | List of groups that this policy applies to.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UserDeviceQuota = 'UInt32 | Optional | Specifies the maximum number of devices that a user can have within your organization before blocking new device registrations. The default value is set to 50. If this property isn''t specified during the policy update operation, it''s automatically reset to 0 to indicate that users aren''t allowed to join any devices.' AzureADAllowedToJoin = 'String | Optional | Scope that a device registration policy applies to. | All / Selected / None' AzureADJoinIsAdminConfigurable = 'Boolean | Optional | Determines whether or not administrators can configure Azure AD Join.' MultiFactorAuthConfiguration = 'Boolean | Optional | Specifies the authentication policy for a user to complete registration using Microsoft Entra join or Microsoft Entra registered within your organization.' LocalAdminsEnableGlobalAdmins = 'Boolean | Optional | Indicates whether global administrators are local administrators on all Microsoft Entra-joined devices. This setting only applies to future registrations. Default is true.' AzureADAllowedToJoinUsers = @( 'String | Optional | List of users that this policy applies to.' ) AzureADAllowedToJoinGroups = @( 'String | Optional | List of groups that this policy applies to.' ) } Domains = @( @{ IsAdminManaged = 'Boolean | Optional | The value of the property is false if the DNS record management of the domain is delegated to Microsoft 365. Otherwise, the value is true. Not nullable' Id = 'String | Required | Custom domain name.' PasswordNotificationWindowInDays = 'UInt32 | Optional | Specifies the number of days before a user receives notification that their password expires. If the property isn''t set, a default value of 14 days is used.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' SupportedServices = @( 'String | Optional | The capabilities assigned to the domain. Can include 0, 1 or more of following values: Email, Sharepoint, EmailInternalRelayOnly, OfficeCommunicationsOnline, SharePointDefaultDomain, FullRedelegation, SharePointPublic, OrgIdAuthentication, Yammer, Intune. The values that you can add or remove using the API include: Email, OfficeCommunicationsOnline, Yammer. Not nullable.' ) IsRoot = 'Boolean | Optional | True if the domain is a verified root domain. Otherwise, false if the domain is a subdomain or unverified. Not nullable.' AvailabilityStatus = 'String | Optional | This property is always null except when the verify action is used. When the verify action is used, a domain entity is returned in the response. The availabilityStatus property of the domain entity in the response is either AvailableImmediately or EmailVerifiedDomainTakeoverScheduled.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AuthenticationType = 'String | Optional | Indicates the configured authentication type for the domain. The value is either Managed or Federated. Managed indicates a cloud managed domain where Microsoft Entra ID performs user authentication. Federated indicates authentication is federated with an identity provider such as the tenant''s on-premises Active Directory via Active Directory Federation Services.' IsVerified = 'Boolean | Optional | True if the domain completed domain ownership verification. Not nullable.' IsDefault = 'Boolean | Optional | True if this is the default domain that is used for user creation. There''s only one default domain per company. Not nullable.' PasswordValidityPeriodInDays = 'UInt32 | Optional | Specifies the length of time that a password is valid before it must be changed. If the property isn''t set, a default value of 90 days is used.' } ) EnrichedAuditLogs = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Exchange = 'String | Optional | Accepted values are enabled or disabled.' Teams = 'String | Optional | Accepted values are enabled or disabled.' SharePoint = 'String | Optional | Accepted values are enabled or disabled.' } EntitlementManagementAccessPackages = @( @{ IncompatibleAccessPackages = @( 'String | Optional | The access packages whose assigned users are ineligible to be assigned this access package.' ) IncompatibleGroups = @( 'String | Optional | The groups whose members are ineligible to be assigned this access package.' ) DisplayName = 'String | Required | The display name of the access package.' Id = 'String | Optional | The Id of the access package.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | The description of the access package.' CatalogId = 'String | Optional | Identifier of the access package catalog referencing this access package.' IsRoleScopesVisible = 'Boolean | Optional | Indicates whether role scopes are visible.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AccessPackageResourceRoleScopes = @( @{ AccessPackageResourceRoleDisplayName = 'String | Optional | The display name of the resource role.' AccessPackageResourceOriginId = 'String | Optional | The origine Id of the resource.' Id = 'String | Optional | The Id of the resource roleScope.' } ) IsHidden = 'Boolean | Optional | Whether the access package is hidden from the requestor.' AccessPackagesIncompatibleWith = @( 'String | Optional | The access packages that are incompatible with this package.' ) } ) EntitlementManagementAccessPackageAssignmentPolicies = @( @{ ExpirationDateTime = 'String | Optional | The expiration date for assignments created in this policy. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z' DisplayName = 'String | Required | The display name of the policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AccessReviewSettings = @{ IsEnabled = 'Boolean | Optional | If true, access reviews are required for assignments from this policy.' StartDateTime = 'String | Optional | When the first review should start.' IsAccessRecommendationEnabled = 'Boolean | Optional | Specifies whether to display recommendations to the reviewer. The default value is true' AccessReviewTimeoutBehavior = 'String | Optional | The default decision to apply if the request is not reviewed within the period specified in durationInDays. | acceptAccessRecommendation / keepAccess / removeAccess / unknownFutureValue' IsApprovalJustificationRequired = 'Boolean | Optional | Specifies whether the reviewer must provide justification for the approval. The default value is true.' RecurrenceType = 'String | Optional | The interval for recurrence, such as monthly or quarterly.' Reviewers = @( @{ ManagerLevel = 'UInt32 | Optional | The hierarchical level of the manager with respect to the requestor. For example, the direct manager of a requestor would have a managerLevel of 1, while the manager of the requestor''s manager would have a managerLevel of 2. Default value for managerLevel is 1. Possible values for this property range from 1 to 2.' IsBackup = 'Boolean | Optional | Indicates whether the resource is a backup fallback approver.' Id = 'String | Optional | The id of the resource.' odataType = 'String | Optional | The type of the resource | #microsoft.graph.singleUser / #microsoft.graph.groupMembers / #microsoft.graph.requestorManager / #microsoft.graph.internalSponsors / #microsoft.graph.externalSponsors / #microsoft.graph.connectedOrganizationMembers' } ) ReviewerType = 'String | Optional | Who should be asked to do the review, either Self or Reviewers.' DurationInDays = 'UInt32 | Optional | The number of days within which reviewers should provide input.' } RequestApprovalSettings = @{ ApprovalMode = 'String | Optional | One of SingleStage, Serial, Parallel, NoApproval (default). NoApproval is used when isApprovalRequired is false. | SingleStage / Serial / Parallel / NoApproval' IsRequestorJustificationRequired = 'Boolean | Optional | Indicates whether the requestor is required to supply a justification in their request.' IsApprovalRequiredForExtension = 'Boolean | Optional | Indicates whether approval is required for a user to extend their assignment.' ApprovalStages = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' IsApproverJustificationRequired = 'Boolean | Optional | If true, then one or more escalation approvers are configured in this approval stage.' EscalationTimeInMinutes = 'UInt32 | Optional | Indicates whether the approver is required to provide a justification for approving a request.' EscalationApprovers = @( @{ ManagerLevel = 'UInt32 | Optional | The hierarchical level of the manager with respect to the requestor. For example, the direct manager of a requestor would have a managerLevel of 1, while the manager of the requestor''s manager would have a managerLevel of 2. Default value for managerLevel is 1. Possible values for this property range from 1 to 2.' IsBackup = 'Boolean | Optional | Indicates whether the resource is a backup fallback approver.' Id = 'String | Optional | The id of the resource.' odataType = 'String | Optional | The type of the resource | #microsoft.graph.singleUser / #microsoft.graph.groupMembers / #microsoft.graph.requestorManager / #microsoft.graph.internalSponsors / #microsoft.graph.externalSponsors / #microsoft.graph.connectedOrganizationMembers' } ) PrimaryApprovers = @( @{ ManagerLevel = 'UInt32 | Optional | The hierarchical level of the manager with respect to the requestor. For example, the direct manager of a requestor would have a managerLevel of 1, while the manager of the requestor''s manager would have a managerLevel of 2. Default value for managerLevel is 1. Possible values for this property range from 1 to 2.' IsBackup = 'Boolean | Optional | Indicates whether the resource is a backup fallback approver.' Id = 'String | Optional | The id of the resource.' odataType = 'String | Optional | The type of the resource | #microsoft.graph.singleUser / #microsoft.graph.groupMembers / #microsoft.graph.requestorManager / #microsoft.graph.internalSponsors / #microsoft.graph.externalSponsors / #microsoft.graph.connectedOrganizationMembers' } ) ApprovalStageTimeOutInDays = 'UInt32 | Optional | The number of days that a request can be pending a response before it is automatically denied.' IsEscalationEnabled = 'Boolean | Optional | If escalation is required, the time a request can be pending a response from a primary approver.' } ) IsApprovalRequired = 'Boolean | Optional | Indicates whether approval is required for requests in this policy.' } CustomExtensionHandlers = @( @{ CustomExtensionId = 'String | Optional | Indicates which custom workflow extension will be executed at this stage.' Id = 'String | Optional | Identifier of the stage.' Stage = 'String | Optional | Indicates the stage of the access package assignment request workflow when the access package custom extension runs. | assignmentRequestCreated / assignmentRequestApproved / assignmentRequestGranted / assignmentRequestRemoved / assignmentFourteenDaysBeforeExpiration / assignmentOneDayBeforeExpiration / unknownFutureValue' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' RequestorSettings = @{ AllowedRequestors = @( @{ ManagerLevel = 'UInt32 | Optional | The hierarchical level of the manager with respect to the requestor. For example, the direct manager of a requestor would have a managerLevel of 1, while the manager of the requestor''s manager would have a managerLevel of 2. Default value for managerLevel is 1. Possible values for this property range from 1 to 2.' IsBackup = 'Boolean | Optional | Indicates whether the resource is a backup fallback approver.' Id = 'String | Optional | The id of the resource.' odataType = 'String | Optional | The type of the resource | #microsoft.graph.singleUser / #microsoft.graph.groupMembers / #microsoft.graph.requestorManager / #microsoft.graph.internalSponsors / #microsoft.graph.externalSponsors / #microsoft.graph.connectedOrganizationMembers' } ) AcceptRequests = 'Boolean | Optional | Indicates whether new requests are accepted on this policy.' ScopeType = 'String | Optional | Who can request. | NoSubjects / SpecificDirectorySubjects / SpecificConnectedOrganizationSubjects / AllConfiguredConnectedOrganizationSubjects / AllExistingConnectedOrganizationSubjects / AllExistingDirectoryMemberUsers / AllExistingDirectorySubjects / AllExternalSubjects' } AccessPackageId = 'String | Optional | Identifier of the access package.' Questions = @( @{ AllowsMultipleSelection = 'Boolean | Optional | Indicates whether requestor can select multiple choices as their answer.' IsAnswerEditable = 'Boolean | Optional | Specifies whether the requestor is allowed to edit answers to questions.' Id = 'String | Optional | ID of the question.' RegexPattern = 'String | Optional | This is the regex pattern that the corresponding text answer must follow.' IsSingleLineQuestion = 'Boolean | Optional | Indicates whether the answer will be in single or multiple line format.' QuestionText = @{ LocalizedTexts = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Text = 'String | Optional | The text in the specific language. Required.' LanguageCode = 'String | Optional | The ISO code for the intended language. Required.' } ) DefaultText = 'String | Optional | The fallback string, which is used when a requested localization is not available. Required.' } IsRequired = 'Boolean | Optional | Whether the requestor is required to supply an answer or not.' odataType = 'String | Optional | The type of the resource | #microsoft.graph.accessPackageMultipleChoiceQuestion / #microsoft.graph.accessPackageTextInputQuestion' Choices = @( @{ ActualValue = 'String | Optional | The actual value of the selected choice. This is typically a string value which is understandable by applications. Required.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' displayValue = @{ LocalizedTexts = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Text = 'String | Optional | The text in the specific language. Required.' LanguageCode = 'String | Optional | The ISO code for the intended language. Required.' } ) DefaultText = 'String | Optional | The fallback string, which is used when a requested localization is not available. Required.' } } ) Sequence = 'UInt32 | Optional | Relative position of this question when displaying a list of questions to the requestor.' } ) DurationInDays = 'UInt32 | Optional | The number of days in which assignments from this policy last until they are expired.' Description = 'String | Optional | The description of the policy.' Id = 'String | Optional | Id of the access package assignment policy.' CanExtend = 'Boolean | Optional | Indicates whether a user can extend the access package assignment duration after approval.' } ) EntitlementManagementAccessPackageCatalogs = @( @{ IsExternallyVisible = 'Boolean | Optional | Whether the access packages in this catalog can be requested by users outside of the tenant.' Id = 'String | Optional | The id of the access package catalog.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' CatalogStatus = 'String | Optional | Has the value Published if the access packages are available for management.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | The description of the access package catalog.' CatalogType = 'String | Optional | One of UserManaged or ServiceDefault. | UserManaged / ServiceDefault' DisplayName = 'String | Required | The display name of the access package catalog.' } ) EntitlementManagementAccessPackageCatalogResources = @( @{ ResourceType = 'String | Optional | The type of the resource.' Description = 'String | Optional | A description for the resource.' AddedBy = 'String | Optional | The name of the user or application that first added this resource. Read-only.' DisplayName = 'String | Required | The display name of the resource, such as the application name, group name or site name.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OriginId = 'String | Optional | The unique identifier of the resource in the origin system. In the case of an Azure AD group, this is the identifier of the group.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Url = 'String | Optional | A unique resource locator for the resource, such as the URL for signing a user into an application.' Attributes = @( @{ Id = 'String | Optional | Id of the access package resource attribute.' AttributeName = 'String | Optional | The name of the attribute in the end system.' IsEditable = 'Boolean | Optional | Specifies whether or not an existing attribute value can be edited by the requester.' IsPersistedOnAssignmentRemoval = 'Boolean | Optional | Specifies whether the attribute will remain in the end system after an assignment ends.' AttributeSource = @{ odataType = 'String | Optional | Type of the access package resource attribute source. | #microsoft.graph.accessPackageResourceAttributeQuestion' Question = @{ RegexPattern = 'String | Optional | This is the regex pattern that the corresponding text answer must follow.' Id = 'String | Optional | Id of the access package resource attribute question.' QuestionText = @{ LocalizedTexts = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Text = 'String | Optional | The text in the specific language. Required.' LanguageCode = 'String | Optional | The ISO code for the intended language. Required.' } ) DefaultText = 'String | Optional | The fallback string, which is used when a requested localization is not available. Required.' } IsRequired = 'Boolean | Optional | Indicates whether the requestor is required to supply an answer or not.' AllowsMultipleSelection = 'Boolean | Optional | Indicates whether requestor can select multiple choices as their answer.' odataType = 'String | Optional | Type of the access package resource attribute question. | #microsoft.graph.accessPackageTextInputQuestion / #microsoft.graph.accessPackageMultipleChoiceQuestion' Choices = @( @{ ActualValue = 'String | Optional | The actual value of the selected choice. This is typically a string value which is understandable by applications. Required.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' displayValue = @{ LocalizedTexts = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Text = 'String | Optional | The text in the specific language. Required.' LanguageCode = 'String | Optional | The ISO code for the intended language. Required.' } ) DefaultText = 'String | Optional | The fallback string, which is used when a requested localization is not available. Required.' } } ) Sequence = 'UInt32 | Optional | Relative position of this question when displaying a list of questions to the requestor.' IsSingleLine = 'Boolean | Optional | Indicates whether the answer will be in single or multiple line format.' } } AttributeDestination = @{ odataType = 'String | Optional | Type of the access package resource attribute destination. | #microsoft.graph.accessPackageUserDirectoryAttributeStore' } } ) Id = 'String | Optional | Id of the access package catalog resource.' CatalogId = 'String | Optional | The unique ID of the access package catalog.' OriginSystem = 'String | Optional | The type of the resource in the origin system.' AddedOn = 'String | Optional | The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.' IsPendingOnboarding = 'Boolean | Optional | True if the resource is not yet available for assignment. Read-only.' } ) EntitlementManagementConnectedOrganizations = @( @{ Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The Id of the Connected organization object.' InternalSponsors = @( 'String | Optional | Collection of objectID of internal sponsors. the sponsor can be a user or a group.' ) IdentitySources = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' CloudInstance = 'String | Optional | The ID of the cloud where the tenant is located, one of microsoftonline.com, microsoftonline.us or partner.microsoftonline.cn.' odataType = 'String | Optional | Type of the identity source. | #microsoft.graph.azureActiveDirectoryTenant / #microsoft.graph.crossCloudAzureActiveDirectoryTenant / #microsoft.graph.domainIdentitySource / #microsoft.graph.externalDomainFederation' ExternalTenantId = 'String | Optional | The ID of the Azure Active Directory tenant.' DomainName = 'String | Optional | The domain name.' IssuerUri = 'String | Optional | The issuerURI of the incoming federation.' DisplayName = 'String | Optional | The name of the Azure Active Directory tenant.' } ) Description = 'String | Optional | The description of the connected organization.' State = 'String | Optional | The state of a connected organization defines whether assignment policies with requestor scope type AllConfiguredConnectedOrganizationSubjects are applicable or not. | configured / proposed / unknownFutureValue' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ExternalSponsors = @( 'String | Optional | Collection of objectID of extenal sponsors. the sponsor can be a user or a group.' ) DisplayName = 'String | Required | The display name of the connected organization.' } ) EntitlementManagementRoleAssignments = @( @{ Id = 'String | Optional | Unique Id of the role assignment.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AppScopeId = 'String | Optional | Identifier of the app specific scope when the assignment scope is app specific. The scope of an assignment determines the set of resources for which the principal has been granted access. App scopes are scopes that are defined and understood by a resource application only.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Principal = 'String | Required | Identifier of the principal to which the assignment is granted.' RoleDefinition = 'String | Required | Identifier of the unifiedRoleDefinition the assignment is for.' DirectoryScopeId = 'String | Optional | Identifier of the directory object representing the scope of the assignment. The scope of an assignment determines the set of resources for which the principal has been granted access. Directory scopes are shared scopes stored in the directory that are understood by multiple applications, unlike app scopes that are defined and understood by a resource application only.' } ) EntitlementManagementSettings = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DaysUntilExternalUserDeletedAfterBlocked = 'UInt32 | Optional | If externalUserLifecycleAction is blockSignInAndDelete, the duration, typically many days, after an external user is blocked from sign in before their account is deleted.' ExternalUserLifecycleAction = 'String | Optional | Automatic action that the service should take when an external user''s last access package assignment is removed. The possible values are: none, blockSignIn, blockSignInAndDelete, unknownFutureValue.' } ExternalIdentityPolicy = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowDeletedIdentitiesDataRemoval = 'Boolean | Optional | Reserved for future use.' allowExternalIdentitiesToLeave = 'Boolean | Required | Defines whether external users can leave the guest tenant. If set to false, self-service controls are disabled, and the admin of the guest tenant must manually remove the external user from the guest tenant. When the external user leaves the tenant, their data in the guest tenant is first soft-deleted then permanently deleted in 30 days.' } FeatureRolloutPolicies = @( @{ Feature = 'String | Optional | Possible values are: passthroughAuthentication, seamlessSso, passwordHashSync, emailAsAlternateId, unknownFutureValue, certificateBasedAuthentication. You must use the Prefer: include-unknown-enum-members request header to get the following value or values in this evolvable enum: certificateBasedAuthentication. For more information about the prerequisites for the enabled features, see Prerequisites for enabled features. | passthroughAuthentication / seamlessSso / passwordHashSync / emailAsAlternateId / unknownFutureValue / certificateBasedAuthentication' IsEnabled = 'Boolean | Optional | Indicates whether the feature rollout is enabled.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' IsAppliedToOrganization = 'Boolean | Optional | Indicates whether this feature rollout policy should be applied to the entire organization.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | A description for this feature rollout policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | The display name for this feature rollout policy.' } ) FederationConfigurations = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' MetadataExchangeUri = 'String | Optional | URI of the metadata exchange endpoint used for authentication from rich client applications. Inherited from samlOrWsFedProvider.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Domains = @( 'String | Optional | List of associated domains.' ) SigningCertificate = 'String | Optional | Current certificate used to sign tokens passed to the Microsoft identity platform. The certificate is formatted as a Base64 encoded string of the public portion of the federated IdP''s token signing certificate and must be compatible with the X509Certificate2 class.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PreferredAuthenticationProtocol = 'String | Optional | Preferred authentication protocol. The possible values are: wsFed, saml. Inherited from samlOrWsFedProvider.' PassiveSignInUri = 'String | Optional | URI that web-based clients are directed to when signing in to Microsoft Entra services. Inherited from samlOrWsFedProvider.' IssuerUri = 'String | Optional | Issuer URI of the federation server. Inherited from samlOrWsFedProvider.' DisplayName = 'String | Required | The display name of the SAML/WS-Fed based identity provider. Inherited from identityProviderBase.' } ) FilteringPolicies = @( @{ Id = 'String | Optional | Unique identifier of the policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Description = 'String | Optional | Description for the policy.' Name = 'String | Required | Name of the policy.' Action = 'String | Optional | Action associated with the policy.' } ) FilteringPoliciesRule = @( @{ RuleType = 'String | Optional | Type of rule.' Id = 'String | Optional | Unique Id for the rule.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Policy = 'String | Required | Name of the associated policy.' Name = 'String | Required | Name of the rule.' Destinations = @( @{ name = 'String | Optional | Name of the destination.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' value = 'String | Optional | FQDN value for the destination.' } ) } ) FilteringProfiles = @( @{ Policies = @( @{ LoggingState = 'String | Optional | Logging state for the associated policy.' Priority = 'UInt32 | Optional | Priority of the associated policy.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' PolicyName = 'String | Optional | Name of the associated policy.' State = 'String | Optional | State of the associated policy.' } ) Id = 'String | Optional | Unique identifier for the profile.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Description = 'String | Optional | Description of the profile.' State = 'String | Optional | State of the profile.' Name = 'String | Required | Profile name.' Priority = 'UInt32 | Optional | Priority level for the profile.' } ) Groups = @( @{ GroupTypes = @( 'String | Optional | Specifies that the group is a dynamic group. To create a dynamic group, specify a value of DynamicMembership.' ) Description = 'String | Optional | Specifies a description for the group.' Owners = @( 'String | Optional | User Service Principal values for the group''s owners.' ) DisplayName = 'String | Required | DisplayName of the Azure Active Directory Group' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Members = @( 'String | Optional | User Service Principal values for the group''s members.' ) MembershipRuleProcessingState = 'String | Optional | Specifies the rule processing state. The acceptable values for this parameter are: On. Process the group rule or Paused. Stop processing the group rule. | On / Paused' AssignedToRole = @( 'String | Optional | DisplayName values for the roles that the group is assigned to.' ) Ensure = 'String | Optional | Specify if the Azure AD Group should exist or not. | Present / Absent' IsAssignableToRole = 'Boolean | Optional | Specifies whether this group can be assigned a role. Only available when creating a group and can''t be modified after group is created.' SecurityEnabled = 'Boolean | Required | Specifies whether the group is security enabled. For security groups, this value must be $True.' MemberOf = @( 'String | Optional | DisplayName values for the groups that this group is a member of.' ) MailEnabled = 'Boolean | Required | Specifies whether this group is mail enabled. Currently, you cannot create mail enabled groups in Azure AD.' Visibility = 'String | Optional | This parameter determines the visibility of the group''s content and members list. | Public / Private / HiddenMembership' Id = 'String | Optional | Specifies an ID for the group.' MailNickname = 'String | Required | Specifies a mail nickname for the group.' MembershipRule = 'String | Optional | Specifies the membership rule for a dynamic group.' AssignedLicenses = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' SkuId = 'String | Optional | The unique identifier for the SKU.' DisabledPlans = @( 'String | Optional | A collection of the unique identifiers for plans that have been disabled.' ) } ) GroupAsMembers = @( 'String | Optional | Displayname values for the groups member of the group.' ) } ) GroupLifecyclePolicy = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if the Azure AD Groups Lifecycle Policy should exist or not. | Present / Absent' GroupLifetimeInDays = 'UInt32 | Required | The number of days a group can exist before it needs to be renewed.' AlternateNotificationEmails = @( 'String | Required | Notification emails for groups that have no owners will be sent to these email addresses.' ) ManagedGroupTypes = 'String | Required | This parameter allows the admin to select which office 365 groups the policy will apply to. ''None'' will create the policy in a disabled state. ''All'' will apply the policy to every Office 365 group in the tenant. ''Selected'' will allow the admin to choose specific Office 365 groups that the policy will apply to. | All / None / Selected' } GroupsNamingPolicy = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PrefixSuffixNamingRequirement = 'String | Optional | Prefixes and suffixes to add to the group name.' Ensure = 'String | Optional | Specify if the Azure AD Groups Naming Policy should exist or not. | Present / Absent' CustomBlockedWordsList = @( 'String | Optional | Comma delimited list of words that should be blocked from being included in groups'' names.' ) } GroupsSettings = @{ Ensure = 'String | Optional | Specify if the Azure AD Groups Naming Policy should exist or not. | Present / Absent' NewUnifiedGroupWritebackDefault = 'Boolean | Optional | Boolean, a tenant-wide setting that assigns the default value to the writebackConfiguration/isEnabled property of new groups, if the property isn''t specified during group creation. This setting is applicable when group writeback is configured in Microsoft Entra Connect.' UsageGuidelinesUrl = 'String | Optional | A link to the Group Usage Guidelines.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowToAddGuests = 'Boolean | Optional | A boolean indicating whether or not is allowed to add guests to this directory.' EnableMIPLabels = 'Boolean | Optional | Boolean indicating whether or not sensitivity labels can be assigned to M365-groups.' EnableGroupCreation = 'Boolean | Optional | The flag indicating whether Office 365 group creation is allowed in the directory by non-admin users. This setting does not require an Azure Active Directory Premium P1 license.' AllowGuestsToBeGroupOwner = 'Boolean | Optional | Boolean indicating whether or not a guest user can be an owner of groups.' GroupCreationAllowedGroupName = 'String | Optional | Name of the security group for which the members are allowed to create Office 365 groups even when EnableGroupCreation == false.' GuestUsageGuidelinesUrl = 'String | Optional | The url of a link to the guest usage guidelines.' AllowGuestsToAccessGroups = 'Boolean | Optional | Boolean indicating whether or not a guest user can have access to Office 365 groups content. This setting does not require an Azure Active Directory Premium P1 license.' } HomeRealmDiscoveryPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' IsOrganizationDefault = 'Boolean | Optional | If set to true, activates this policy. There can be many policies for the same policy type, but only one can be activated as the organization default. Optional, default value is false.' Description = 'String | Optional | Description for this policy. Required.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Definition = @( @{ AllowCloudPasswordValidation = 'Boolean | Optional | Allow cloud password validation.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' AlternateIdLogin = @{ Enabled = 'Boolean | Optional | Boolean for whether AlternateIdLogin is enabled.' } AccelerateToFederatedDomain = 'Boolean | Optional | Accelerate to Federated Domain.' PreferredDomain = 'String | Optional | Preffered Domain value.' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | Display name for this policy. Required.' } ) IdentityAPIConnectors = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Password = 'PSCredential | Optional | The password of certificate/basic auth' Certificates = @( @{ IsActive = 'Boolean | Optional | Tells if the certificate is in use or not' Password = 'PSCredential | Optional | Password of the certificate as a secure string' Thumbprint = 'String | Optional | Thumbprint of the certificate in Base64 encoding' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Pkcs12Value = 'PSCredential | Optional | Pkcs12Value of the certificate as a secure string in Base64 encoding' } ) Username = 'String | Optional | The username of the password' TargetUrl = 'String | Optional | The URL of the API endpoint to call.' DisplayName = 'String | Required | The name of the API connector.' } ) IdentityB2XUserFlows = @( @{ UserAttributeAssignments = @( @{ UserInputType = 'String | Optional | User Flow Attribute Input Type. | textBox / dateTimeDropdown / radioSingleSelect / dropdownSingleSelect / emailBox / checkboxMultiSelect' IsOptional = 'Boolean | Optional | Determines whether the identityUserFlowAttribute is optional.' DisplayName = 'String | Optional | The display name of the identityUserFlowAttribute within a user flow.' Id = 'String | Optional | The unique identifier of identityUserFlowAttributeAssignment.' UserAttributeValues = @( @{ IsDefault = 'Boolean | Optional | Used to set the value as the default.' Name = 'String | Optional | The display name of the property displayed to the end user in the user flow.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | The value that is set when this item is selected.' } ) } ) Id = 'String | Required | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IdentityProviders = @( 'String | Optional | The identity providers included in the user flow.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ApiConnectorConfiguration = @{ postAttributeCollectionConnectorName = 'String | Optional | The name of the connector used for post attribute collection step.' postFederationSignupConnectorName = 'String | Optional | The name of the connector used for post federation signup step.' } } ) IdentityGovernanceLifecycleWorkflows = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' IsEnabled = 'Boolean | Optional | Indicates if the Workflow is enabled' ExecutionConditions = @{ OdataType = 'String | Optional | The @odata.type for the Workflow Execution Conditions.' TriggerValue = @{ OffsetInDays = 'SInt32 | Optional | The offset in days for the Trigger.' TimeBasedAttribute = 'String | Optional | The time-based attribute for the Trigger.' OdataType = 'String | Optional | The @odata.type for the Trigger.' } ScopeValue = @{ OdataType = 'String | Optional | The @odata.type for the Scope.' Rule = 'String | Optional | The rule associated with the Scope.' } } Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Category = 'String | Optional | Category of the Workflow' Description = 'String | Optional | Description of the Workflow' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsSchedulingEnabled = 'Boolean | Optional | Indicates if scheduling is enabled for the Workflow' Tasks = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' IsEnabled = 'Boolean | Optional | Indicates if the Workflow Task is enabled or not' Description = 'String | Optional | Description of the Workflow Task' TaskDefinitionId = 'String | Optional | ID of the task definition associated with this Workflow Task' ContinueOnError = 'Boolean | Optional | Specifies whether the task should continue on error' Category = 'String | Optional | Category of the Workflow Task' ExecutionSequence = 'SInt32 | Optional | The sequence in which the task is executed' Arguments = @( @{ Name = 'String | Required | The name of the key' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | The value associated with the key' } ) DisplayName = 'String | Optional | Specifies the display name of the Workflow Task' } ) DisplayName = 'String | Required | Specifies the Display Name of the Workflow' } ) IdentityGovernanceLifecycleWorkflowCustomTaskExtensions = @( @{ CallbackConfiguration = @{ timeoutDuration = 'String | Optional | Callback time out in ISO 8601 time duration. Accepted time durations are between five minutes to three hours. For example, PT5M for five minutes and PT3H for three hours. Inherited from customExtensionCallbackConfiguration.' authorizedApps = @( 'String | Optional | List of apps names that are allowed to resume a task processing result.' ) } Id = 'String | Optional | Unique Id of the extension.' ClientConfiguration = @{ maximumRetries = 'UInt32 | Optional | The max number of retries that Microsoft Entra ID makes to the external API. Values of 0 or 1 are supported. If null, the default for the service applies.' timeoutInMilliseconds = 'UInt32 | Optional | The max duration in milliseconds that Microsoft Entra ID waits for a response from the external app before it shuts down the connection. The valid range is between 200 and 2000 milliseconds. Default duration is 1000.' } Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Description = 'String | Optional | Description of the extension.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EndpointConfiguration = @{ logicAppWorkflowName = 'String | Optional | The name of the logic app.' subscriptionId = 'String | Optional | Identifier of the Azure subscription for the logic app.' url = 'String | Optional | Url of the logic app.' resourceGroupName = 'String | Optional | The Azure resource group name for the logic app.' } DisplayName = 'String | Required | Display name of the custom extension.' } ) IdentityGovernancePrograms = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | A description for this identity governance program.' DisplayName = 'String | Required | The display name for this identity governance program.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The unique identifier for an entity. Read-only.' } ) IdentityProtectionPolicySettings = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsUserRiskClearedOnPasswordReset = 'Boolean | Optional | If true, user risk is cleared on password reset.' } LifecycleWorkflowSettings = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SenderDomain = 'String | Optional | Specifies the domain that should be used when sending email notifications. This domain must be verified in order to be used. We recommend that you use a domain that has the appropriate DNS records to facilitate email validation, like SPF, DKIM, DMARC, and MX, because this then complies with the RFC compliance for sending and receiving email. For details, see Learn more about Exchange Online Email Routing.' UseCompanyBranding = 'Boolean | Optional | Specifies if the organization''s banner logo should be included in email notifications. The banner logo will replace the Microsoft logo at the top of the email notification. If true the banner logo will be taken from the tenant''s branding settings. This value can only be set to true if the organizationalBranding bannerLogo property is set.' WorkflowScheduleIntervalInHours = 'UInt32 | Optional | The interval in hours at which all workflows running in the tenant should be scheduled for execution. This interval has a minimum value of 1 and a maximum value of 24. The default value is 3 hours.' } NamedLocationPolicies = @( @{ IncludeUnknownCountriesAndRegions = 'Boolean | Optional | Specifies the includeUnknownCountriesAndRegions value for the Named Location in Azure Active Directory' Id = 'String | Optional | Specifies the ID of a Named Location in Azure Active Directory.' CountryLookupMethod = 'String | Optional | Determines what method is used to decide which country the user is located in. Possible values are clientIpAddress(default) and authenticatorAppGps. | clientIpAddress / authenticatorAppGps' Ensure = 'String | Optional | Specify if the Azure AD Named Location should exist or not. | Present / Absent' IsTrusted = 'Boolean | Optional | Specifies the isTrusted value for the Named Location (IP ranges only) in Azure Active Directory' CountriesAndRegions = @( 'String | Optional | Specifies the countries and regions for the Named Location in Azure Active Directory' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OdataType = 'String | Optional | Specifies the Odata Type of a Named Location object in Azure Active Directory | #microsoft.graph.countryNamedLocation / #microsoft.graph.ipNamedLocation / #microsoft.graph.compliantNetworkNamedLocation' IpRanges = @( 'String | Optional | Specifies the IP ranges of the Named Location in Azure Active Directory' ) DisplayName = 'String | Required | Specifies the Display Name of a Named Location in Azure Active Directory' } ) NetworkAccessForwardingPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PolicyRules = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' RuleType = 'String | Optional | Type of Rule' Ports = @( 'UInt32 | Optional | List of Ports.' ) Destinations = @( 'String | Optional | List of destinations.' ) Name = 'String | Optional | Policy Rule Name. Required' ActionValue = 'String | Optional | Action value.' Protocol = 'String | Optional | Protocol Value' } ) Name = 'String | Required | Name of the forwarding policy' UniqueId = 'String | Required | Unique ID to identify this specific object' } ) NetworkAccessForwardingProfiles = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | Profile Name. Required.' Id = 'String | Optional | Id of the profile. Unique Identifier' Policies = @( @{ PolicyLinkId = 'String | Optional | Policy Link Id' Name = 'String | Optional | Policy Name. Required' UniqueId = 'String | Required | [Unique ID to identify this specific object]' state = 'String | Optional | status' } ) State = 'String | Optional | status of the profile' } ) NetworkAccessSettingConditionalAccess = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SignalingStatus = 'String | Optional | Enable CA Signaling for Entra ID (covering all cloud apps). Accepted values are enabled or disabled.' } NetworkAccessSettingCrossTenantAccess = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) NetworkPacketTaggingStatus = 'String | Optional | Enable Tenant Restrictions for Entra ID (covering all cloud apps). Accepted values are enabled or disabled.' } OnPremisesPublishingProfilesSettings = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsEnabled = 'Boolean | Optional | Enables of disables private net work connectors in Entra Id.' } OrganizationCertificateBasedAuthConfigurations = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OrganizationId = 'String | Required | The Organization ID. Read-only.' CertificateAuthorities = @( @{ IsRootAuthority = 'Boolean | Optional | Required. true if the trusted certificate is a root authority, false if the trusted certificate is an intermediate authority.' CertificateRevocationListUrl = 'String | Optional | The URL of the certificate revocation list.' DeltaCertificateRevocationListUrl = 'String | Optional | The URL contains the list of all revoked certificates since the last time a full certificate revocaton list was created.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Certificate = 'String | Optional | Required. The base64 encoded string representing the public certificate.' } ) UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' } ) PasswordRuleSettings = @{ Ensure = 'String | Optional | Specify if the Azure AD Password Rule Settings should exist or not. | Present / Absent' EnableBannedPasswordCheckOnPremises = 'Boolean | Optional | Boolean indicating if the banned password check is turned on or not for on-premises system.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) LockoutDurationInSeconds = 'UInt32 | Optional | The duration in seconds of the initial lockout period.' LockoutThreshold = 'UInt32 | Optional | The number of failed login attempts before the first lockout period begins.' BannedPasswordCheckOnPremisesMode = 'String | Optional | How should we enforce password policy check in on-premises system.' BannedPasswordList = @( 'String | Optional | A list of banned words in passwords.' ) EnableBannedPasswordCheck = 'Boolean | Optional | Boolean indicating if the banned password check for tenant specific banned password list is turned on or not.' } RemoteNetworks = @( @{ ForwardingProfiles = @( 'String | Optional | List of the forwarding profile names associated to this remote network' ) Id = 'String | Optional | Id of the remote network' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Region = 'String | Optional | Region' DeviceLinks = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' RedundancyConfiguration = @{ ZoneLocalIPAddress = 'String | Optional | ZoneLocalIpAddress.' RedundancyTier = 'String | Optional | RedundancyTier.' } BandwidthCapacityInMbps = 'String | Optional | Bandwidth Capacity in Mbps' DeviceVendor = 'String | Optional | Device Vendor' Name = 'String | Optional | Name of the Device Link' TunnelConfiguration = @{ IPSecIntegrity = 'String | Optional | IpSecIntegrity' IKEEncryption = 'String | Optional | IkeEncryption' ODataType = 'String | Optional | ODataType' IPSecEncryption = 'String | Optional | IpSecEncryption' DHGroup = 'String | Optional | DhGroup' SaLifeTimeSeconds = 'UInt32 | Optional | SaLifeTimeSeconds' PreSharedKey = 'String | Optional | PreSharedKey' ZoneRedundancyPreSharedKey = 'String | Optional | ZoneRedundancyPreSharedKey' PFSGroup = 'String | Optional | PfsGroup' IKEIntegrity = 'String | Optional | IkeIntegrity' } IPAddress = 'String | Optional | IP Address' BgpConfiguration = @{ Asn = 'UInt32 | Optional | Asn.' PeerIPAddress = 'String | Optional | PeerIpAddress.' LocalIPAddress = 'String | Optional | LocalIpAddress.' } } ) Name = 'String | Required | Name of the remote network.' } ) RoleAssignmentScheduleRequests = @( @{ Principal = 'String | Required | User Principal Name of the eligibility request.' Id = 'String | Optional | Identifier for the Role Eligibility Schedule Request.' DirectoryScopeId = 'String | Required | Identifier of the directory object representing the scope of the role eligibility. The scope of an role eligibility determines the set of resources for which the principal has been granted access. Directory scopes are shared scopes stored in the directory that are understood by multiple applications. Use / for tenant-wide scope. Use appScopeId to limit the scope to an application only. Either directoryScopeId or appScopeId is required.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Action = 'String | Optional | Represents the type of operation on the role eligibility request.The possible values are: adminAssign, adminUpdate, adminRemove, selfActivate, selfDeactivate, adminExtend, adminRenew, selfExtend, selfRenew, unknownFutureValue. | adminAssign / adminUpdate / adminRemove / selfActivate / selfDeactivate / adminExtend / adminRenew / selfExtend / selfRenew / unknownFutureValue' Justification = 'String | Optional | A message provided by users and administrators when create they create the unifiedRoileAssignmentScheduleRequest object. Optional when action is adminRemove. Whether this property is required or optional is also dependent on the settings for the Azure AD role.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' PrincipalType = 'String | Optional | Represented the type of principal to assign the request to. Accepted values are: Group and User. | Group / User / ServicePrincipal' AppScopeId = 'String | Optional | Identifier of the app-specific scope when the role eligibility is scoped to an app. The scope of a role eligibility determines the set of resources for which the principal is eligible to access. App scopes are scopes that are defined and understood by this application only. Use / for tenant-wide app scopes. Use directoryScopeId to limit the scope to particular directory objects, for example, administrative units. Either directoryScopeId or appScopeId is required.' TicketInfo = @{ ticketSystem = 'String | Optional | The description of the ticket system.' ticketNumber = 'String | Optional | The ticket number.' } RoleDefinition = 'String | Required | Role associated with the eligibility request.' IsValidationOnly = 'Boolean | Optional | Determines whether the call is a validation or an actual call. Only set this property if you want to check whether an activation is subject to additional rules like MFA before actually submitting the request.' ScheduleInfo = @{ startDateTime = 'String | Optional | When the eligible or active assignment becomes active.' expiration = @{ duration = 'String | Optional | The requestor''s desired duration of access represented in ISO 8601 format for durations. For example, PT3H refers to three hours. If specified in a request, endDateTime should not be present and the type property should be set to afterDuration.' endDateTime = 'String | Optional | Timestamp of date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.' type = 'String | Optional | The requestor''s desired expiration pattern type. The possible values are: notSpecified, noExpiration, afterDateTime, afterDuration. | notSpecified / noExpiration / afterDateTime / afterDuration' } recurrence = @{ range = @{ numberOfOccurrences = 'UInt32 | Optional | The number of times to repeat the event. Required and must be positive if type is numbered.' type = 'String | Required | The recurrence range. The possible values are: endDate, noEnd, numbered. | endDate / noEnd / numbered' recurrenceTimeZone = 'String | Optional | Time zone for the startDate and endDate properties.' startDate = 'String | Required | The date to start applying the recurrence pattern. The first occurrence of the meeting may be this date or later, depending on the recurrence pattern of the event. Must be the same value as the start property of the recurring event.' endDate = 'String | Required | The date to stop applying the recurrence pattern. Depending on the recurrence pattern of the event, the last occurrence of the meeting may not be this date.' } pattern = @{ daysOfWeek = @( 'String | Optional | A collection of the days of the week on which the event occurs. The possible values are: sunday, monday, tuesday, wednesday, thursday, friday, saturday | sunday / monday / tuesday / wednesday / thursday / friday / saturday' ) type = 'String | Optional | The recurrence pattern type: daily, weekly, absoluteMonthly, relativeMonthly, absoluteYearly, relativeYearly. | daily / weekly / absoluteMonthly / relativeMonthly / absoluteYearly / relativeYearly' interval = 'UInt32 | Optional | The number of units between occurrences, where units can be in days, weeks, months, or years, depending on the type.' month = 'UInt32 | Optional | The month in which the event occurs. This is a number from 1 to 12.' index = 'String | Optional | Specifies on which instance of the allowed days specified in daysOfWeek the event occurs, counted from the first instance in the month. The possible values are: first, second, third, fourth, last. | first / second / third / fourth / last' firstDayOfWeek = 'String | Optional | The first day of the week. | sunday / monday / tuesday / wednesday / thursday / friday / saturday' dayOfMonth = 'UInt32 | Optional | The day of the month on which the event occurs.' } } } } ) RoleDefinitions = @( @{ IsEnabled = 'Boolean | Required | Specifies whether the role definition is enabled.' Ensure = 'String | Optional | Specify if the Azure AD Role definition should exist or not. | Present / Absent' Id = 'String | Optional | Specifies Id for the role definition.' Version = 'String | Optional | Specifies version for the role definition.' Description = 'String | Optional | Specifies a description for the role definition.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ResourceScopes = @( 'String | Optional | Specifies the resource scopes for the role definition.' ) RolePermissions = @( 'String | Required | Specifies permissions for the role definition.' ) TemplateId = 'String | Optional | Specifies template id for the role definition.' DisplayName = 'String | Required | Specifies a display name for the role definition.' } ) RoleEligibilityScheduleRequests = @( @{ Principal = 'String | Required | User Principal Name of the eligibility request.' Id = 'String | Optional | Identifier for the Role Eligibility Schedule Request.' DirectoryScopeId = 'String | Required | Identifier of the directory object representing the scope of the role eligibility. The scope of an role eligibility determines the set of resources for which the principal has been granted access. Directory scopes are shared scopes stored in the directory that are understood by multiple applications. Use / for tenant-wide scope. Use appScopeId to limit the scope to an application only. Either directoryScopeId or appScopeId is required.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Action = 'String | Optional | Represents the type of operation on the role eligibility request.The possible values are: adminAssign, adminUpdate, adminRemove, selfActivate, selfDeactivate, adminExtend, adminRenew, selfExtend, selfRenew, unknownFutureValue. | adminAssign / adminUpdate / adminRemove / selfActivate / selfDeactivate / adminExtend / adminRenew / selfExtend / selfRenew / unknownFutureValue' Justification = 'String | Optional | A message provided by users and administrators when create they create the unifiedRoleEligibilityScheduleRequest object. Optional when action is adminRemove. Whether this property is required or optional is also dependent on the settings for the Azure AD role.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' PrincipalType = 'String | Optional | Represented the type of principal to assign the request to. Accepted values are: Group and User. | Group / User' AppScopeId = 'String | Optional | Identifier of the app-specific scope when the role eligibility is scoped to an app. The scope of a role eligibility determines the set of resources for which the principal is eligible to access. App scopes are scopes that are defined and understood by this application only. Use / for tenant-wide app scopes. Use directoryScopeId to limit the scope to particular directory objects, for example, administrative units. Either directoryScopeId or appScopeId is required.' TicketInfo = @{ ticketSystem = 'String | Optional | The description of the ticket system.' ticketNumber = 'String | Optional | The ticket number.' } RoleDefinition = 'String | Required | Role associated with the eligibility request.' IsValidationOnly = 'Boolean | Optional | Determines whether the call is a validation or an actual call. Only set this property if you want to check whether an activation is subject to additional rules like MFA before actually submitting the request.' ScheduleInfo = @{ startDateTime = 'String | Optional | When the eligible or active assignment becomes active.' expiration = @{ duration = 'String | Optional | The requestor''s desired duration of access represented in ISO 8601 format for durations. For example, PT3H refers to three hours. If specified in a request, endDateTime should not be present and the type property should be set to afterDuration.' endDateTime = 'String | Optional | Timestamp of date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.' type = 'String | Optional | The requestor''s desired expiration pattern type. The possible values are: notSpecified, noExpiration, afterDateTime, afterDuration. | notSpecified / noExpiration / afterDateTime / afterDuration' } recurrence = @{ range = @{ numberOfOccurrences = 'UInt32 | Optional | The number of times to repeat the event. Required and must be positive if type is numbered.' type = 'String | Required | The recurrence range. The possible values are: endDate, noEnd, numbered. | endDate / noEnd / numbered' recurrenceTimeZone = 'String | Optional | Time zone for the startDate and endDate properties.' startDate = 'String | Required | The date to start applying the recurrence pattern. The first occurrence of the meeting may be this date or later, depending on the recurrence pattern of the event. Must be the same value as the start property of the recurring event.' endDate = 'String | Required | The date to stop applying the recurrence pattern. Depending on the recurrence pattern of the event, the last occurrence of the meeting may not be this date.' } pattern = @{ daysOfWeek = @( 'String | Optional | A collection of the days of the week on which the event occurs. The possible values are: sunday, monday, tuesday, wednesday, thursday, friday, saturday | sunday / monday / tuesday / wednesday / thursday / friday / saturday' ) type = 'String | Optional | The recurrence pattern type: daily, weekly, absoluteMonthly, relativeMonthly, absoluteYearly, relativeYearly. | daily / weekly / absoluteMonthly / relativeMonthly / absoluteYearly / relativeYearly' interval = 'UInt32 | Optional | The number of units between occurrences, where units can be in days, weeks, months, or years, depending on the type.' month = 'UInt32 | Optional | The month in which the event occurs. This is a number from 1 to 12.' index = 'String | Optional | Specifies on which instance of the allowed days specified in daysOfWeek the event occurs, counted from the first instance in the month. The possible values are: first, second, third, fourth, last. | first / second / third / fourth / last' firstDayOfWeek = 'String | Optional | The first day of the week. | sunday / monday / tuesday / wednesday / thursday / friday / saturday' dayOfMonth = 'UInt32 | Optional | The day of the month on which the event occurs.' } } } } ) RoleManagementPoliciesRule = @( @{ expirationRule = @{ isExpirationRequired = 'Boolean | Optional | Specifies if expiration is required.' maximumDuration = 'String | Optional | The maximum duration for the expiration.' } notificationRule = @{ isDefaultRecipientsEnabled = 'Boolean | Optional | Indicates if default recipients are enabled.' notificationLevel = 'String | Optional | Level of the notification.' notificationType = 'String | Optional | Notification type for the rule.' recipientType = 'String | Optional | Type of the recipient for the notification.' notificationRecipients = @( 'String | Optional | List of notification recipients.' ) } roleDisplayName = 'String | Required | Role display name.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) id = 'String | Required | The unique identifier for an entity. Read-only.' ruleType = 'String | Optional | Rule Type.' enablementRule = @{ enabledRules = @( 'String | Optional | List of enabled rules.' ) } authenticationContextRule = @{ isEnabled = 'Boolean | Optional | Indicates if the authentication context rule is enabled.' claimValue = 'String | Optional | Claim value associated with the rule.' } approvalRule = @{ setting = @{ approvalMode = 'String | Optional | One of SingleStage, Serial, Parallel, NoApproval (default). NoApproval is used when isApprovalRequired is false.' isRequestorJustificationRequired = 'Boolean | Optional | Indicates whether the requestor is required to supply a justification in their request.' isApprovalRequiredForExtension = 'Boolean | Optional | Indicates whether approval is required for a user to extend their assignment.' approvalStages = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' isApproverJustificationRequired = 'Boolean | Optional | Indicates whether the approver must provide justification for their reponse.' escalationTimeInMinutes = 'UInt32 | Optional | The time a request can be pending a response from a primary approver before it can be escalated to the escalation approvers.' escalationApprovers = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' odataType = 'String | Optional | The type of the subject set.' } ) primaryApprovers = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' odataType = 'String | Optional | The type of the subject set.' } ) approvalStageTimeOutInDays = 'UInt32 | Optional | The number of days that a request can be pending a response before it is automatically denied.' isEscalationEnabled = 'Boolean | Optional | Indicates whether escalation if enabled.' } ) isApprovalRequired = 'Boolean | Optional | Indicates whether approval is required for requests in this policy.' } } policyId = 'String | Optional | Policy Id.' } ) RoleSettings = @( @{ ActiveAssigneeNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when members are assigned as active to this role: Notification to the assigned user (assignee), default recipient (True/False)' ExpireActiveAssignment = 'String | Optional | Expire active assignments after (Days)' PermanentEligibleAssignmentisExpirationRequired = 'Boolean | Optional | Allow permanent eligible assignment (True/False)' ActivateApprover = @( 'String | Optional | Approver User UPN and/or Group Displayname' ) ActiveAssigneeNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when members are assigned as active to this role: Notification to the assigned user (assignee), additional recipient (UPN)' ) DisplayName = 'String | Required | RuleDefinition DisplayName' EligibleAlertNotificationOnlyCritical = 'Boolean | Optional | Send notifications when members are assigned as eligible to this role: Role assignment alert, only critical Email (True/False)' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AuthenticationContextId = 'String | Optional | Authorization context id' AssignmentReqMFA = 'Boolean | Optional | Require Azure Multi-Factor Authentication on active assignment (True/False)' EligibleAlertNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when members are assigned as eligible to this role: Role assignment alert, additional recipient (UPN)' ) ElegibilityAssignmentReqMFA = 'Boolean | Optional | Require Azure Multi-Factor Authentication on eligible assignment (True/False)' ActivationMaxDuration = 'String | Optional | Activation maximum duration (hours).' ActivationReqTicket = 'Boolean | Optional | Require ticket information on activation (True/False)' EligibleAssigneeNotificationOnlyCritical = 'Boolean | Optional | Send notifications when members are assigned as eligible to this role: Notification to the assigned user (assignee), only critical Email (True/False)' AuthenticationContextName = 'String | Optional | Descriptive name of associated authorization context' ActiveApproveNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when members are assigned as active to this role: Request to approve a role assignment renewal/extension, additional recipient (UPN)' ) ApprovaltoActivate = 'Boolean | Optional | Require approval to activate (True/False)' EligibleApproveNotificationOnlyCritical = 'Boolean | Optional | Send notifications when members are assigned as eligible to this role: Request to approve a role assignment renewal/extension, only critical Email (True/False)' ActiveApproveNotificationOnlyCritical = 'Boolean | Optional | Send notifications when members are assigned as active to this role: Request to approve a role assignment renewal/extension, only critical Email (True/False)' EligibleAssignmentAssigneeNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when eligible members activate this role: Notification to activated user (requestor), additional recipient (UPN)' ) ElegibilityAssignmentReqJustification = 'Boolean | Optional | Require justification on eligible assignment (True/False)' ActiveAlertNotificationOnlyCritical = 'Boolean | Optional | Send notifications when members are assigned as active to this role: Role assignment alert, only critical Email (True/False)' EligibleAssignmentAlertNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when eligible members activate this role: Role assignment alert, default recipient (True/False)' EligibleAssignmentAssigneeNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when eligible members activate this role: Notification to activated user (requestor), default recipient (True/False)' PermanentActiveAssignmentisExpirationRequired = 'Boolean | Optional | Allow permanent active assignment (True/False)' EligibleAssignmentAssigneeNotificationOnlyCritical = 'Boolean | Optional | Send notifications when eligible members activate this role: Notification to activated user (requestor), only critical Email (True/False)' Ensure = 'String | Optional | Specify if the Azure AD role setting should exist or not. | Present' ActiveAlertNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when members are assigned as active to this role: Role assignment alert, additional recipient (UPN)' ) ActivationReqJustification = 'Boolean | Optional | Require justification on activation (True/False)' Id = 'String | Optional | Specifies the RoleId.' ActiveApproveNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when members are assigned as active to this role: Request to approve a role assignment renewal/extension, default recipient (True/False)' ExpireEligibleAssignment = 'String | Optional | Expire eligible assignments after (Days)' EligibleAssignmentAlertNotificationOnlyCritical = 'Boolean | Optional | Send notifications when eligible members activate this role: Role assignment alert, only critical Email (True/False)' ActiveAlertNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when members are assigned as active to this role: Role assignment alert, default recipient (True/False)' EligibleApproveNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when members are assigned as eligible to this role: Request to approve a role assignment renewal/extension, default recipient (True/False)' AssignmentReqJustification = 'Boolean | Optional | Require justification on active assignment (True/False)' EligibleAssigneeNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when members are assigned as eligible to this role: Notification to the assigned user (assignee), additional recipient (UPN)' ) EligibleAlertNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when members are assigned as eligible to this role: Role assignment alert, default recipient (True/False)' EligibleAssignmentAlertNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when eligible members activate this role: Role assignment alert, additional recipient (UPN)' ) ActivationReqMFA = 'Boolean | Optional | Require MFA on activation (True/False)' EligibleAssigneeNotificationDefaultRecipient = 'Boolean | Optional | Send notifications when members are assigned as eligible to this role: Notification to the assigned user (assignee), default recipient (True/False)' ActiveAssigneeNotificationOnlyCritical = 'Boolean | Optional | Send notifications when members are assigned as active to this role: Notification to the assigned user (assignee), only critical Email (True/False)' EligibleApproveNotificationAdditionalRecipient = @( 'String | Optional | Send notifications when members are assigned as eligible to this role: Request to approve a role assignment renewal/extension, additional recipient (UPN)' ) AuthenticationContextRequired = 'Boolean | Optional | Authorization context is required (True/False)' } ) SecurityDefaults = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if the Azure AD App should exist or not. | Present / Absent' DisplayName = 'String | Optional | Display name of the security defaults.' IsEnabled = 'Boolean | Optional | Represents whether or not security defaults are enabled.' Description = 'String | Optional | Description of the security defaults.' } ServicePrincipals = @( @{ DelegatedPermissionClassifications = @( @{ Classification = 'String | Optional | Classification of the delegated permission | low / medium / high' UniqueId = 'String | Required | [Unique ID to identify this specific object]' PermissionName = 'String | Optional | Name of the permission' } ) Tags = @( 'String | Optional | Tags linked to this service principal.Note that if you intend for this service principal to show up in the All Applications list in the admin portal, you need to set this value to {WindowsAzureActiveDirectoryIntegratedApp}' ) Owners = @( 'String | Optional | List of the owners of the service principal.' ) DisplayName = 'String | Optional | Displayname of the ServicePrincipal.' Ensure = 'String | Optional | Specify if the Azure AD App should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AlternativeNames = @( 'String | Optional | The alternative names for this service principal' ) AppId = 'String | Required | The unique identifier for the associated application.' ErrorUrl = 'String | Optional | Specifies the error URL of the ServicePrincipal.' PreferredSingleSignOnMode = 'String | Optional | Specifies the signle sign-on mode configured for this application.' Notes = 'String | Optional | Notes associated with the ServicePrincipal.' KeyCredentials = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StartDateTime = 'String | Optional | The date and time at which the credential becomes valid.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.' Type = 'String | Optional | The type of key credential for example, Symmetric, AsymmetricX509Cert.' Key = 'String | Optional | The certificate''s raw data in byte array converted to Base64 string.' KeyId = 'String | Optional | The unique identifier (GUID) for the key.' Usage = 'String | Optional | A string that describes the purpose for which the key can be used for example, Verify.' EndDateTime = 'String | Optional | The date and time at which the credential expires. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.' CustomKeyIdentifier = 'String | Optional | A 40-character binary type that can be used to identify the credential. Optional. When not provided in the payload, defaults to the thumbprint of the certificate.' DisplayName = 'String | Optional | Friendly name for the key. Optional.' } ) UniqueId = 'String | Required | Unique ID to identify this specific object' LogoutUrl = 'String | Optional | Specifies the LogoutURL of the ServicePrincipal.' CustomSecurityAttributes = @( @{ AttributeSetName = 'String | Optional | Attribute Set Name.' AttributeValues = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | If the attribute has a string value' IntValue = 'UInt32 | Optional | If the attribute has a int value' AttributeName = 'String | Optional | Name of the Attribute' StringArrayValue = @( 'String | Optional | If the attribute has a string array value' ) IntArrayValue = @( 'UInt32 | Optional | If the attribute has a int array value' ) BoolValue = 'Boolean | Optional | If the attribute has a boolean value' } ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) PasswordCredentials = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Hint = 'String | Optional | Contains the first three characters of the password. Read-only.' StartDateTime = 'String | Optional | The date and time at which the password becomes valid. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Optional.' KeyId = 'String | Optional | The unique identifier for the password.' EndDateTime = 'String | Optional | The date and time at which the password expires represented using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Optional.' DisplayName = 'String | Optional | Friendly name for the password. Optional.' } ) ObjectID = 'String | Optional | The ObjectID of the ServicePrincipal' AccountEnabled = 'Boolean | Optional | True if the service principal account is enabled; otherwise, false.' SamlMetadataUrl = 'String | Optional | The URL for the SAML metadata of the ServicePrincipal.' AppRoleAssignedTo = @( @{ PrincipalType = 'String | Optional | Type of principal. Accepted values are User or Group | Group / User' Identity = 'String | Optional | Unique identity representing the principal.' } ) ServicePrincipalType = 'String | Optional | The type of the service principal.' AppRoleAssignmentRequired = 'Boolean | Optional | Indicates whether an application role assignment is required.' ReplyUrls = @( 'String | Optional | The URLs that user tokens are sent to for sign in with the associated application, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to for the associated application.' ) Homepage = 'String | Optional | Specifies the homepage of the ServicePrincipal.' PublisherName = 'String | Optional | Specifies the PublisherName of the ServicePrincipal.' ServicePrincipalNames = @( 'String | Optional | Specifies an array of service principal names. Based on the identifierURIs collection, plus the application''s appId property, these URIs are used to reference an application''s service principal.' ) } ) SocialIdentityProviders = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' ClientId = 'String | Required | The client identifier for the application obtained when registering the application with the identity provider.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' IdentityProviderType = 'String | Optional | For a B2B scenario, possible values: Google, Facebook. For a B2C scenario, possible values: Microsoft, Google, Amazon, LinkedIn, Facebook, GitHub, Twitter, Weibo, QQ, WeChat. | AADSignup / EmailOTP / Microsoft / MicrosoftAccount / Google / Amazon / LinkedIn / Facebook / GitHub / Twitter / Weibo / QQ / WeChat' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ClientSecret = 'String | Optional | The client secret for the application that is obtained when the application is registered with the identity provider. This is write-only. A read operation returns ****.' DisplayName = 'String | Optional | The display name of the identity provider.' } ) TenantDetails = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TechnicalNotificationMails = @( 'String | Optional | Email-addresses from the people who should receive Technical Notifications' ) MarketingNotificationEmails = @( 'String | Optional | Email-addresses from the people who should receive Marketing Notifications' ) SecurityComplianceNotificationPhones = @( 'String | Optional | Phone Numbers from the people who should receive Security Notifications' ) SecurityComplianceNotificationMails = @( 'String | Optional | Email-addresses from the people who should receive Security Compliance Notifications' ) } TokenLifetimePolicies = @( @{ IsOrganizationDefault = 'Boolean | Optional | IsOrganizationDefault of the Policy.' Id = 'String | Optional | ObjectID of the Policy.' Ensure = 'String | Optional | Specify if the Azure AD Policy should exist or not. | Present / Absent' Definition = @( 'String | Optional | Definition of the Policy.' ) Description = 'String | Optional | Description of the Policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | DisplayName of the Policy' } ) Users = @( @{ PostalCode = 'String | Optional | The Postal Code of the user' UniqueId = 'String | Required | Unique ID to identify this specific object' Department = 'String | Optional | The Department name of the user' Office = 'String | Optional | The Office Name of the user' DisplayName = 'String | Optional | The display name for the user' Password = 'PSCredential | Optional | The password for the account. The parameter is a PSCredential object, but only the Password component will be used. If Password is not supplied for a new resource a new random password will be generated. Property will only be used when creating the user and not on subsequent updates.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UsageLocation = 'String | Optional | The country code the user will be assigned to' PasswordNeverExpires = 'Boolean | Optional | Specifies whether the user password expires periodically. Default value is false' Fax = 'String | Optional | The Fax Number of the user' LastName = 'String | Optional | The last name of the user' UserType = 'String | Optional | Specifies the title of the user | Guest / Member / Other / Viral' Country = 'String | Optional | The Country name of the user' PreferredLanguage = 'String | Optional | The Prefered Language of the user' State = 'String | Optional | Specifies the state or province where the user is located' City = 'String | Optional | The City name of the user' Title = 'String | Optional | Specifies the title of the user' MobilePhone = 'String | Optional | The Mobile Phone Number of the user' LicenseAssignment = @( 'String | Optional | The account SKU Id for the license to be assigned to the user' ) Ensure = 'String | Optional | Present ensures the user exists, absent ensures it is removed | Present / Absent' MemberOf = @( 'String | Optional | The Groups that the user is a direct member of' ) StreetAddress = 'String | Optional | Specifies the street address of the user' Roles = @( 'String | Optional | The list of Azure Active Directory roles assigned to the user.' ) PhoneNumber = 'String | Optional | The Phone Number of the user' FirstName = 'String | Optional | The first name of the user' UserPrincipalName = 'String | Required | The login name of the user' PasswordPolicies = 'String | Optional | Specifies password policies for the user.' } ) UserFlowAttributes = @( @{ Id = 'String | Optional | User flow attribute Id.' DataType = 'String | Optional | Defines the user flow attribute data type.' Ensure = 'String | Optional | Specify if the Azure AD role setting should exist or not. | Present / Absent' Description = 'String | Optional | Description of the user flow attribute.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | Display name of the user flow attribute.' } ) VerifiedIdAuthorities = @( @{ Id = 'String | Optional | Id of the Verified ID Authority.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DidMethod = 'String | Optional | DID method used by the Verified ID Authority.' Name = 'String | Optional | Name of the Verified ID Authority.' KeyVaultMetadata = @{ SubscriptionId = 'String | Optional | Subscription ID of the Key Vault.' ResourceName = 'String | Optional | Resource name of the Key Vault.' ResourceUrl = 'String | Optional | Resource URL of the Key Vault.' ResourceGroup = 'String | Optional | Resource group of the Key Vault.' } LinkedDomainUrl = 'String | Required | URL of the linked domain.' } ) VerifiedIdAuthorityContracts = @( @{ name = 'String | Required | Name of the Verified ID Authority Contract.' id = 'String | Optional | Id of the Verified ID Authority Contract.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' rules = @{ customStatusEndpoint = @{ url = 'String | Optional | The URL of the custom status endpoint.' type = 'String | Optional | The type of the endpoint.' } validityInterval = 'UInt32 | Optional | This value shows the lifespan of the credential.' vc = @{ type = @( 'String | Optional | The type of the vc.' ) } attestations = @{ idTokenHints = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' clientId = 'String | Optional | Client ID to use when obtaining the ID token.' scopeValue = 'String | Optional | Space delimited list of scopes to use when obtaining the ID token.' trustedIssuers = @( 'String | Optional | A list of DIDs allowed to issue the verifiable credential for this contract.' ) redirectUri = 'String | Optional | Redirect URI to use when obtaining the ID token. MUST BE vcclient://openid/' credentialType = 'String | Optional | Required credential type of the input.' configuration = 'String | Optional | Location of the identity provider''s configuration document.' mapping = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' outputClaim = 'String | Optional | The name of the claim in the verifiable credential.' type = 'String | Optional | Type of claim.' inputClaim = 'String | Optional | The name of the claim to use from the input.' indexed = 'Boolean | Optional | Indicating whether the value of this claim is used for searching.' required = 'Boolean | Optional | Indicating whether this mapping is required or not.' } ) required = 'Boolean | Optional | Indicating whether this attestation is required or not.' } ) accessTokens = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' clientId = 'String | Optional | Client ID to use when obtaining the ID token.' scopeValue = 'String | Optional | Space delimited list of scopes to use when obtaining the ID token.' trustedIssuers = @( 'String | Optional | A list of DIDs allowed to issue the verifiable credential for this contract.' ) redirectUri = 'String | Optional | Redirect URI to use when obtaining the ID token. MUST BE vcclient://openid/' credentialType = 'String | Optional | Required credential type of the input.' configuration = 'String | Optional | Location of the identity provider''s configuration document.' mapping = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' outputClaim = 'String | Optional | The name of the claim in the verifiable credential.' type = 'String | Optional | Type of claim.' inputClaim = 'String | Optional | The name of the claim to use from the input.' indexed = 'Boolean | Optional | Indicating whether the value of this claim is used for searching.' required = 'Boolean | Optional | Indicating whether this mapping is required or not.' } ) required = 'Boolean | Optional | Indicating whether this attestation is required or not.' } ) selfIssued = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' clientId = 'String | Optional | Client ID to use when obtaining the ID token.' scopeValue = 'String | Optional | Space delimited list of scopes to use when obtaining the ID token.' trustedIssuers = @( 'String | Optional | A list of DIDs allowed to issue the verifiable credential for this contract.' ) redirectUri = 'String | Optional | Redirect URI to use when obtaining the ID token. MUST BE vcclient://openid/' credentialType = 'String | Optional | Required credential type of the input.' configuration = 'String | Optional | Location of the identity provider''s configuration document.' mapping = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' outputClaim = 'String | Optional | The name of the claim in the verifiable credential.' type = 'String | Optional | Type of claim.' inputClaim = 'String | Optional | The name of the claim to use from the input.' indexed = 'Boolean | Optional | Indicating whether the value of this claim is used for searching.' required = 'Boolean | Optional | Indicating whether this mapping is required or not.' } ) required = 'Boolean | Optional | Indicating whether this attestation is required or not.' } ) idTokens = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' clientId = 'String | Optional | Client ID to use when obtaining the ID token.' scopeValue = 'String | Optional | Space delimited list of scopes to use when obtaining the ID token.' trustedIssuers = @( 'String | Optional | A list of DIDs allowed to issue the verifiable credential for this contract.' ) redirectUri = 'String | Optional | Redirect URI to use when obtaining the ID token. MUST BE vcclient://openid/' credentialType = 'String | Optional | Required credential type of the input.' configuration = 'String | Optional | Location of the identity provider''s configuration document.' mapping = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' outputClaim = 'String | Optional | The name of the claim in the verifiable credential.' type = 'String | Optional | Type of claim.' inputClaim = 'String | Optional | The name of the claim to use from the input.' indexed = 'Boolean | Optional | Indicating whether the value of this claim is used for searching.' required = 'Boolean | Optional | Indicating whether this mapping is required or not.' } ) required = 'Boolean | Optional | Indicating whether this attestation is required or not.' } ) presentations = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' clientId = 'String | Optional | Client ID to use when obtaining the ID token.' scopeValue = 'String | Optional | Space delimited list of scopes to use when obtaining the ID token.' trustedIssuers = @( 'String | Optional | A list of DIDs allowed to issue the verifiable credential for this contract.' ) redirectUri = 'String | Optional | Redirect URI to use when obtaining the ID token. MUST BE vcclient://openid/' credentialType = 'String | Optional | Required credential type of the input.' configuration = 'String | Optional | Location of the identity provider''s configuration document.' mapping = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' outputClaim = 'String | Optional | The name of the claim in the verifiable credential.' type = 'String | Optional | Type of claim.' inputClaim = 'String | Optional | The name of the claim to use from the input.' indexed = 'Boolean | Optional | Indicating whether the value of this claim is used for searching.' required = 'Boolean | Optional | Indicating whether this mapping is required or not.' } ) required = 'Boolean | Optional | Indicating whether this attestation is required or not.' } ) } } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) displays = @( @{ consent = @{ instructions = 'String | Optional | Supplemental text to use when displaying consent.' title = 'String | Optional | Title of the consent.' } card = @{ description = 'String | Optional | Supplemental text displayed alongside each credential.' textColor = 'String | Optional | Text color of the credential in hex, for example, #FFAABB.' title = 'String | Optional | Title of the credential.' issuedBy = 'String | Optional | The name of the issuer of the credential.' backgroundColor = 'String | Optional | Background color of the credential in hex, for example, #FFAABB.' logo = @{ uri = 'String | Optional | URI of the logo. If this is a URL, it must be reachable over the public internet anonymously.' description = 'String | Optional | Description of the logo.' } } UniqueId = 'String | Required | [Unique ID to identify this specific object]' locale = 'String | Optional | The locale of this display.' claims = @( @{ label = 'String | Optional | The label of the claim in display.' claim = 'String | Optional | The name of the claim to which the label applies.' description = 'String | Optional | The description of the claim.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the claim.' } ) } ) authorityId = 'String | Optional | Id of the Verified ID Authority.' linkedDomainUrl = 'String | Required | URL of the linked domain of the authority.' } ) } AzureDevOps = @{ OrganizationOwners = @( @{ OrganizationName = 'String | Required | NAme of the Azure DevOPS Organization' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' Owner = 'String | Optional | User principal of the organization''s owner' } ) PermissionGroups = @( @{ PrincipalName = 'String | Required | Principal name to identify the group.' Id = 'String | Optional | Unique identifier for the group.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Description of the group.' Level = 'String | Optional | Determines at what level in the hierarchy the group exists. Valid values are Project or Organization. | Organization / Project' OrganizationName = 'String | Required | The name of the Azure DevOPS Organization.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Descriptor = 'String | Optional | Unique descriptor for the group.' Members = @( 'String | Optional | List of principal names of the members of the group.' ) DisplayName = 'String | Optional | Display name for the group.' } ) PermissionGroupSettingsItems = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' DenyPermissions = @( @{ NamespaceId = 'String | Optional | Id of the associate security namespace.' DisplayName = 'String | Optional | Display name of the permission scope.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Bit = 'UInt32 | Optional | Bit mask for the permission' Token = 'String | Optional | Token value' } ) AllowPermissions = @( @{ NamespaceId = 'String | Optional | Id of the associate security namespace.' DisplayName = 'String | Optional | Display name of the permission scope.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Bit = 'UInt32 | Optional | Bit mask for the permission' Token = 'String | Optional | Token value' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OrganizationName = 'String | Optional | Name of the DevOPS Organization.' GroupName = 'String | Required | Name of the group.' Descriptor = 'String | Optional | Descriptor for the group.' } ) SecurityPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AllowAnonymousAccess = 'Boolean | Optional | Controls the Allow public projects setting.' OrganizationName = 'String | Required | The name of the Azure DevOPS Organization.' AllowRequestAccessToken = 'Boolean | Optional | Controls the Request access setting.' DisallowOAuthAuthentication = 'Boolean | Optional | Controls the Third-party application access via OAuth.' ArtifactsExternalPackageProtectionToken = 'Boolean | Optional | Controls the Additional protections when using public package registries setting.' AllowTeamAdminsInvitationsAccessToken = 'Boolean | Optional | Controls the Allow team and project administrators to invite new user setting.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisallowAadGuestUserAccess = 'Boolean | Optional | Controls the external guest access.' LogAuditEvents = 'Boolean | Optional | Controls Log Audit Events.' DisallowSecureShell = 'Boolean | Optional | Controls SSH Authentication.' EnforceAADConditionalAccess = 'Boolean | Optional | Controls the Enable IP Conditional Access policy validation setting.' } ) } Azure = @{ BillingAccountPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' ReservationPurchases = 'String | Optional | The policy that controls whether Azure reservation purchases are allowed.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' SavingsPlanPurchases = 'String | Optional | The policy that controls whether users with Azure savings plan purchase are allowed.' Name = 'String | Optional | Name of the policy.' MarketplacePurchases = 'String | Optional | The policy that controls whether Azure marketplace purchases are allowed.' BillingAccount = 'String | Required | Unique identifier of the associated billing account.' EnterpriseAgreementPolicies = @{ departmentAdminViewCharges = 'String | Optional | The policy that controls whether department admin can view charges.' accountOwnerViewCharges = 'String | Optional | The policy that controls whether account owner can view charges.' authenticationType = 'String | Optional | The state showing the enrollment auth level.' } } ) BillingAccountsAssociatedTenants = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AssociatedTenantId = 'String | Required | The ID that uniquely identifies a tenant.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' BillingManagementState = 'String | Optional | The state determines whether users from the associated tenant can be assigned roles for commerce activities like viewing and downloading invoices, managing payments, and making purchases.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ProvisioningManagementState = 'String | Optional | The state determines whether subscriptions and licenses can be provisioned in the associated tenant. It can be set to ''Pending'' to initiate a billing request.' BillingAccount = 'String | Optional | Name of the billing account.' DisplayName = 'String | Optional | The name of the associated tenant.' } ) BillingAccountScheduledActions = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Notification = @{ subject = 'String | Optional | Subject of the email. Length is limited to 70 characters.' message = 'String | Optional | Optional message to be added in the email. Length is limited to 250 characters.' to = @( 'String | Optional | Array of email addresses.' ) } Schedule = @{ hourOfDay = 'UInt32 | Optional | UTC time at which cost analysis data will be emailed.' daysOfWeek = @( 'String | Optional | Day names in english on which cost analysis data will be emailed. This property is applicable when frequency is Weekly or Monthly.' ) weeksOfMonth = @( 'String | Optional | Weeks in which cost analysis data will be emailed. This property is applicable when frequency is Monthly and used in combination with daysOfWeek.' ) endDate = 'String | Optional | The end date and time of the scheduled action (UTC).' startDate = 'String | Optional | The start date and time of the scheduled action (UTC).' frequency = 'String | Optional | Frequency of the schedule.' dayOfMonth = 'UInt32 | Optional | UTC day on which cost analysis data will be emailed. Must be between 1 and 31. This property is applicable when frequency is Monthly and overrides weeksOfMonth or daysOfWeek.' } NotificationEmail = 'String | Optional | Email address of the point of contact that should get the unsubscribe requests and notification emails.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) BillingAccount = 'String | Optional | Associated billing account id.' View = 'String | Optional | Associated view id.' Status = 'String | Optional | Status of the scheduled action.' DisplayName = 'String | Required | Display name of the scheduled action.' } ) BillingAccountsRoleAssignments = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' PrincipalName = 'String | Required | Name of the principal associated to the role assignment.' PrincipalTenantId = 'String | Optional | The principal tenant id of the user to whom the role was assigned.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' PrincipalType = 'String | Optional | Principal type. Can be User, Group or ServicePrincipal.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) BillingAccount = 'String | Optional | Name of the billing account.' RoleDefinition = 'String | Required | Name of the role assigned to the principal.' } ) DiagnosticSettingsItems = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | Diagnostic setting name.' StorageAccountId = 'String | Optional | Storage account id.' EventHubAuthorizationRuleId = 'String | Optional | Event hub id.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' ServiceBusRuleId = 'String | Optional | Service bus id.' WorkspaceId = 'String | Optional | Workspace id.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EventHubName = 'String | Optional | Event hub name.' Categories = @( @{ Category = 'String | Optional | Name of the category.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' enabled = 'Boolean | Optional | Is the log category enabled or not.' } ) } ) DiagnosticSettingsCustomSecurityAttributes = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | Diagnostic setting name.' StorageAccountId = 'String | Optional | Storage account id.' EventHubAuthorizationRuleId = 'String | Optional | Event hub id.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' ServiceBusRuleId = 'String | Optional | Service bus id.' WorkspaceId = 'String | Optional | Workspace id.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EventHubName = 'String | Optional | Event hub name.' Categories = @( @{ Category = 'String | Optional | Name of the category.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' enabled = 'Boolean | Optional | Is the log category enabled or not.' } ) } ) Subscriptions = @( @{ Id = 'String | Optional | The unique identifier of the subscription.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) InvoiceSectionId = 'String | Optional | The unique identifier of the invoice section associated with the subscription.' Status = 'String | Optional | Status of the subscription.' DisplayName = 'String | Required | The display name of the subscription.' } ) VerifiedIdFaceChecks = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' FaceCheckEnabled = 'Boolean | Optional | Represents whether or not FaceCheck is enabled for the authrotiy.' ResourceGroupName = 'String | Required | Name of the associated resource group.' SubscriptionId = 'String | Required | Id of the Azure subscription.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) VerifiedIdAuthorityLocation = 'String | Optional | Location of the Verified ID Authority.' VerifiedIdAuthorityId = 'String | Required | Id of the verified ID authority.' } ) } Defender = @{ DeviceAuthenticatedScanDefinitions = @( @{ Name = 'String | Required | Name of the scan definition.' Id = 'String | Optional | Unique identified for the scan definition.' ScannerAgent = @{ machineId = 'String | Optional | Id of the machine associated with the agent.' machineName = 'String | Optional | Name of the machine associated with the agent.' id = 'String | Optional | Unique identified for the scan agent.' } Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' ScanType = 'String | Optional | Type of scan.' IntervalInHours = 'UInt32 | Optional | Interval in hours to run the scan.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Target = 'String | Optional | Target of the scan definition.' IsActive = 'Boolean | Optional | Determines if the scan definition is active or not.' ScanAuthenticationParams = @{ Domain = 'String | Optional | Domain name when using WindowsAuthParams.' PrivProtocol = 'String | Optional | Priv protocol to use with SnmpAuthParams and AuthPriv. Possible values are DES, 3DES, AES.' Type = 'String | Optional | Type of scan.' DataType = 'String | Optional | Odata type associated with the request.' AuthProtocol = 'String | Optional | Auth protocol to use with SnmpAuthParams and AuthNoPriv or AuthPriv. Possible values are MD5, SHA1.' PrivPassword = 'String | Optional | Priv password to use with SnmpAuthParams and AuthPriv.' Username = 'String | Optional | Username when using WindowsAuthParams or the username when choosing SnmpAuthParams with any type other than CommunityString.' CommunityString = 'String | Optional | Community string to use when choosing SnmpAuthParams with CommunityString.' AuthPassword = 'String | Optional | Auth password to use with SnmpAuthParams and AuthNoPriv or AuthPriv.' KeyVaultUrl = 'String | Optional | An optional property that specifies from which KeyVault the scanner should retrieve credentials. If KeyVault is specified there''s no need to specify username, password.' IsGMSAUser = 'Boolean | Optional | Must be set to true when choosing WindowsAuthParams.' KeyVaultSecretName = 'String | Optional | An optional property that specifies KeyVault secret name from which the scanner should retrieve credentials. If KeyVault is specified there''s no need to specify username, password.' } } ) SubscriptionPlans = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present' SubPlanName = 'String | Optional | The Defender sub plan name, for the list all of possible sub plans refer to Defender for Cloud documentation' PlanName = 'String | Required | The Defender plan name, for the list all of possible Defender plans refer to Defender for Cloud documentation' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SubscriptionName = 'String | Required | The display name of the subscription.' Extensions = 'String | Optional | The extensions offered under the plan, for more information refer to Defender for Cloud documentation' SubscriptionId = 'String | Optional | The unique identifier of the Azure subscription.' PricingTier = 'String | Optional | The pricing tier (''Standard'' or ''Free'')' } ) } Exchange = @{ AcceptedDomains = @( @{ DomainType = 'String | Optional | The type of AcceptedDomain. Currently the EXOAcceptedDomain DSC Resource accepts a value of ''Authoritative'' and ''InternalRelay''. | Authoritative / InternalRelay' OutboundOnly = 'Boolean | Optional | OutboundOnly can only be enabled if the DomainType parameter is set to Authoritative or InternalRelay. The default value is false.' Ensure = 'String | Optional | Specify if the AcceptedDomain should exist or not. | Present / Absent' MatchSubDomains = 'Boolean | Optional | The MatchSubDomains parameter must be false on Authoritative domains. The default value is false.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Specify the Fully Qualified Domain Name for the AcceptedDomain.' } ) ActiveSyncDeviceAccessRules = @( @{ AccessLevel = 'String | Optional | The AccessLevel parameter specifies whether the devices are allowed, blocked or quarantined. | Allow / Block / Quarantine' Ensure = 'String | Optional | Specify if the Active Sync Device Access Rule should exist or not. | Present / Absent' Characteristic = 'String | Optional | The Characteristic parameter specifies the device characteristic or category that''s used by the rule. | DeviceModel / DeviceType / DeviceOS / UserAgent / XMSWLHeader' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the identity of the device access rule.' QueryString = 'String | Optional | The QueryString parameter specifies the device identifier that''s used by the rule. This parameter uses a text value that''s used with Characteristic parameter value to define the device.' } ) ActiveSyncMailboxPolicies = @( @{ AllowPOPIMAPEmail = 'Boolean | Optional | Specifies whether the user can configure a POP3 or IMAP4 email account on the device.' RequireEncryptedSMIMEMessages = 'Boolean | Optional | Specifies whether you must encrypt S/MIME messages.' MaxAttachmentSize = 'String | Optional | Specifies the maximum size of attachments that can be downloaded to the mobile phone.' Identity = 'String | Required | Specifies the Mobile Device mailbox policy.' AllowDesktopSync = 'Boolean | Optional | Specifies whether the mobile phone can synchronize with a desktop computer through a cable.' RequireSignedSMIMEAlgorithm = 'String | Optional | Specifies what required algorithm must be used when signing a message.' RequireDeviceEncryption = 'Boolean | Optional | Specifies whether encryption is required on the device.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowExternalDeviceManagement = 'Boolean | Optional | Specifies whether an external device management program is allowed to manage the device.' DevicePasswordHistory = 'SInt32 | Optional | Specifies the number of previously used passwords to store.' AllowApplePushNotifications = 'Boolean | Optional | Specifies whether push notifications are allowed for Apple mobile devices.' RequireStorageCardEncryption = 'Boolean | Optional | Specifies whether encryption of a storage card is required.' AllowUnsignedInstallationPackages = 'Boolean | Optional | Specifies whether unsigned installation packages can be run on the device.' MaxEmailAgeFilter = 'String | Optional | Specifies the maximum number of days of email items to synchronize to the device. | All / OneDay / ThreeDays / OneWeek / TwoWeeks / OneMonth / ThreeMonths / SixMonths' AllowNonProvisionableDevices = 'Boolean | Optional | Enables all devices to synchronize with the computer running Exchange, regardless of whether the device can enforce all the specific settings established in the Mobile Device mailbox policy.' AllowIrDA = 'Boolean | Optional | Specifies whether infrared connections are allowed to the mobile phone.' WSSAccessEnabled = 'Boolean | Optional | Specifies whether access to Microsoft Windows SharePoint Services is enabled.' AllowBluetooth = 'String | Optional | Specifies whether the Bluetooth capabilities of the mobile phone are allowed. | Disable / HandsfreeOnly / Allow' AllowConsumerEmail = 'Boolean | Optional | Specifies whether the mobile phone user can configure a personal email account on the device.' DeviceEncryptionEnabled = 'Boolean | Optional | Enables device encryption on the mobile phone.' AttachmentsEnabled = 'Boolean | Optional | Specifies whether the user can download attachments.' AllowTextMessaging = 'Boolean | Optional | Specifies whether text messaging is allowed from the device.' MaxCalendarAgeFilter = 'String | Optional | Specifies the maximum range of calendar days that can be synchronized to the device. | All / TwoWeeks / OneMonth / ThreeMonths / SixMonths' MaxEmailHTMLBodyTruncationSize = 'String | Optional | Specifies the maximum size at which HTML-formatted email messages are synchronized to the device.' ApprovedApplicationList = @( 'String | Optional | Specifies a list of approved applications for the device.' ) AllowMobileOTAUpdate = 'Boolean | Optional | Specifies whether certain updates are seen by devices that implemented support for this restricting functionality.' UNCAccessEnabled = 'Boolean | Optional | Specifies whether access to Microsoft Windows file shares is enabled.' UnapprovedInROMApplicationList = @( 'String | Optional | Specifies a list of applications that can''t be run in ROM.' ) RequireEncryptionSMIMEAlgorithm = 'String | Optional | Specifies what required algorithm must be used when encrypting a message.' IsDefaultPolicy = 'Boolean | Optional | Specifies whether this policy is the default Mobile Device mailbox policy.' RequireManualSyncWhenRoaming = 'Boolean | Optional | Specifies whether the device must synchronize manually while roaming.' Ensure = 'String | Optional | Specifies if this AddressList should exist. | Present / Absent' PasswordRecoveryEnabled = 'Boolean | Optional | Specifies whether you can store the recovery password for the device on an Exchange server.' MaxInactivityTimeDeviceLock = 'String | Optional | Specifies the length of time that the device can be inactive before the password is required to reactivate the device.' MinDevicePasswordLength = 'SInt32 | Optional | Specifies the minimum number of characters in the device password.' AllowSMIMESoftCerts = 'Boolean | Optional | Specifies whether S/MIME software certificates are allowed.' DevicePasswordExpiration = 'String | Optional | Specifies the length of time, in days, that a password can be used.' AllowCamera = 'Boolean | Optional | Specifies whether the mobile phone''s camera is allowed.' AllowRemoteDesktop = 'Boolean | Optional | Specifies whether the mobile phone can initiate a remote desktop connection.' IrmEnabled = 'Boolean | Optional | Specifies whether Information Rights Management (IRM) is enabled for the mailbox policy.' RequireSignedSMIMEMessages = 'Boolean | Optional | Specifies whether the device must send signed S/MIME messages.' MaxEmailBodyTruncationSize = 'String | Optional | Specifies the maximum size at which email messages are truncated when synchronized to the device.' AllowUnsignedApplications = 'Boolean | Optional | Specifies whether unsigned applications can be installed on the device.' MaxDevicePasswordFailedAttempts = 'String | Optional | Specifies the number of attempts a user can make to enter the correct password for the device.' MinDevicePasswordComplexCharacters = 'SInt32 | Optional | Specifies the minimum number of complex characters required in a device password.' DevicePolicyRefreshInterval = 'String | Optional | Specifies how often the policy is sent from the server to the mobile phone' AllowInternetSharing = 'Boolean | Optional | Specifies whether the mobile phone can be used as a modem to connect a computer to the Internet.' AllowBrowser = 'Boolean | Optional | Specifies whether Microsoft Pocket Internet Explorer is allowed on the mobile phone.' AllowWiFi = 'Boolean | Optional | Specifies whether wireless Internet access is allowed on the device.' AllowStorageCard = 'Boolean | Optional | Specifies whether the device can access information stored on a storage card.' Name = 'String | Optional | Specifies the name of the policy.' AllowSMIMEEncryptionAlgorithmNegotiation = 'String | Optional | Specifies whether the messaging application on the device can negotiate the encryption algorithm in case a recipient''s certificate doesn''t support the specified encryption algorithm.' AlphanumericDevicePasswordRequired = 'Boolean | Optional | Specifies whether the device password must be alphanumeric.' AllowHTMLEmail = 'Boolean | Optional | Specifies whether HTML email is enabled on the device.' IsDefault = 'Boolean | Optional | Specifies whether this policy is the default Mobile Device mailbox policy.' AllowSimpleDevicePassword = 'Boolean | Optional | Specifies whether a simple device password is allowed.' DevicePasswordEnabled = 'Boolean | Optional | Specifies that the user set a password for the device.' } ) AddressBookPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if the Address Book Policy should exist or not. | Present / Absent' AddressLists = @( 'String | Optional | The AddressLists parameter specifies the address lists that will be used by mailbox users who are assigned this address book policy. This parameter accepts multiple values.' ) Name = 'String | Required | The Name parameter specifies the name that you want this address book policy to be called.' RoomList = 'String | Optional | The RoomList parameter specifies the name of the room address list.' GlobalAddressList = 'String | Optional | The GlobalAddressList parameter specifies the identity of the global address list (GAL) that will be used by mailbox users who are assigned this address book policy. You can specify only one GAL for each address book policy.' OfflineAddressBook = 'String | Optional | The OfflineAddressBook parameter specifies the identity of the offline address book (OAB) that will be used by mailbox users who are assigned this address book policy. You can specify only one OAB for each address book policy.' } ) AddressLists = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' ConditionalCustomAttribute3 = @( 'String | Optional | The ConditionalCustomAttribute3 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute3 property.' ) DisplayName = 'String | Optional | The DisplayName parameter specifies the display name of the address list.' ConditionalCustomAttribute4 = @( 'String | Optional | The ConditionalCustomAttribute4 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute4 property.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RecipientFilter = 'String | Optional | The RecipientFilter parameter specifies a custom OPath filter that''s based on the value of any available recipient property.' ConditionalCustomAttribute13 = @( 'String | Optional | The ConditionalCustomAttribute13 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute13 property.' ) ConditionalCustomAttribute5 = @( 'String | Optional | The ConditionalCustomAttribute5 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute5 property.' ) Name = 'String | Required | The Name parameter specifies a unique name for the address list.' ConditionalDepartment = @( 'String | Optional | The ConditionalDepartment parameter specifies a precanned filter that''s based on the value of the recipient''s Department property.' ) Ensure = 'String | Optional | Specifies if this AddressList should exist. | Present / Absent' ConditionalCustomAttribute6 = @( 'String | Optional | The ConditionalCustomAttribute6 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute6 property.' ) ConditionalCustomAttribute15 = @( 'String | Optional | The ConditionalCustomAttribute15 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute15 property.' ) IncludedRecipients = @( 'String | Optional | The IncludedRecipients parameter specifies a precanned filter that''s based on the recipient type. | AllRecipients / MailboxUsers / MailContacts / MailGroups / MailUsers / Resources' ) ConditionalCustomAttribute1 = @( 'String | Optional | The ConditionalCustomAttribute1 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute1 property.' ) ConditionalCustomAttribute10 = @( 'String | Optional | The ConditionalCustomAttribute10 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute10 property.' ) ConditionalCustomAttribute7 = @( 'String | Optional | The ConditionalCustomAttribute7 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute7 property.' ) ConditionalCustomAttribute9 = @( 'String | Optional | The ConditionalCustomAttribute9 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute9 property.' ) ConditionalStateOrProvince = @( 'String | Optional | The ConditionalStateOrProvince parameter specifies a precanned filter that''s based on the value of the recipient''s StateOrProvince property.' ) ConditionalCustomAttribute12 = @( 'String | Optional | The ConditionalCustomAttribute12 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute12 property.' ) ConditionalCustomAttribute14 = @( 'String | Optional | The ConditionalCustomAttribute14 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute14 property.' ) ConditionalCompany = @( 'String | Optional | The ConditionalCompany parameter specifies a precanned filter that''s based on the value of the recipient''s Company property.' ) ConditionalCustomAttribute8 = @( 'String | Optional | The ConditionalCustomAttribute8 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute8 property.' ) ConditionalCustomAttribute2 = @( 'String | Optional | The ConditionalCustomAttribute2 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute2 property.' ) ConditionalCustomAttribute11 = @( 'String | Optional | The ConditionalCustomAttribute11 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute11 property.' ) } ) AntiPhishPolicies = @( @{ EnableFirstContactSafetyTips = 'Boolean | Optional | The EnableFirstContactSafetyTips parameter specifies whether to enable or disable the safety tip that''s shown when recipients first receive an email from a sender or do not often receive email from a sender.' EnableMailboxIntelligenceProtection = 'Boolean | Optional | The EnableMailboxIntelligenceProtection specifies whether to enable or disable enhanced impersonation results based on each user''s individual sender map. This intelligence allows Microsoft 365 to customize user impersonation detection and better handle false positives.' PhishThresholdLevel = 'UInt32 | Optional | The PhishThresholdLevel parameter specifies the tolerance level that''s used by machine learning in the handling of phishing messages. | 1 / 2 / 3 / 4' EnableTargetedDomainsProtection = 'Boolean | Optional | The�?�EnableTargetedDomainsProtection parameter specifies whether to enable domain impersonation protection for a list of specified domains.' Identity = 'String | Required | The Identity parameter specifies the name of the antiphishing policy that you want to modify.' HonorDmarcPolicy = 'Boolean | Optional | The HonorDmarcPolicy enables or disables using the sender''s DMARC policy to determine what to do to messages that fail DMARC checks.' Enabled = 'Boolean | Optional | Specify if this policy should be enabled. Default is $true.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MailboxIntelligenceProtectionAction = 'String | Optional | The MailboxIntelligenceProtectionAction parameter specifies what to do with messages that fail mailbox intelligence protection.' TargetedDomainsToProtect = @( 'String | Optional | The TargetedDomainsToProtect parameter specifies the domains that are included in domain impersonation protection when the EnableTargetedDomainsProtection parameter is set to $true.' ) EnableOrganizationDomainsProtection = 'Boolean | Optional | The�?�EnableOrganizationDomainsProtection parameter specifies whether to enable domain impersonation protection for all registered domains in the Office 365 organization.' EnableSpoofIntelligence = 'Boolean | Optional | The EnableSpoofIntelligence parameter specifies whether to enable or disable antispoofing protection for the policy.' EnableSimilarUsersSafetyTips = 'Boolean | Optional | The�?�EnableSimilarUsersSafetyTips�?�parameter specifies whether to enable safety tips that are shown to recipients in messages for user impersonation detections.' ExcludedDomains = @( 'String | Optional | The�?�ExcludedDomains�?�parameter specifies trusted domains that are excluded from scanning by antiphishing protection. You can specify multiple domains separated by commas.' ) TargetedDomainActionRecipients = @( 'String | Optional | The�?�TargetedDomainActionRecipients parameter specifies the recipients to add to detected domain impersonation messages when the TargetedDomainProtectionAction parameter is set to the value�?�Redirect or BccMessage. A valid value for this parameter is an email address. You can specify multiple email addresses separated by commas.' ) DmarcQuarantineAction = 'String | Optional | The DmarcQuarantineAction parameter specifies the action to take when a message fails DMARC checks and the sender''s DMARC policy is p=quarantine | MoveToJmf / Quarantine' EnableMailboxIntelligence = 'Boolean | Optional | The EnableMailboxIntelligence parameter specifies whether to enable or disable mailbox intelligence (the first contact graph) in domain and user impersonation protection.' TargetedDomainQuarantineTag = 'String | Optional | The TargetedDomainQuarantineTag specifies the quarantine policy that''s used on messages that are quarantined by domain impersonation protection.' EnableSimilarDomainsSafetyTips = 'Boolean | Optional | The�?�EnableSimilarDomainsSafetyTips�?�parameter specifies whether to enable safety tips that are shown to recipients in messages for domain impersonation detections.' ImpersonationProtectionState = 'String | Optional | The ImpersonationProtectionState parameter specifies the configuration of impersonation protection.' TargetedDomainProtectionAction = 'String | Optional | The TargetedDomainProtectionAction parameter specifies the action to take on detected domain impersonation messages. | BccMessage / Delete / MoveToJmf / NoAction / Quarantine / Redirect' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' AuthenticationFailAction = 'String | Optional | The AuthenticationFailAction parameter specifies the action to take when the message fails composite authentication. | MoveToJmf / Quarantine' TargetedUserProtectionAction = 'String | Optional | The TargetedUserProtectionAction�?�parameter specifies the action to take on detected user impersonation messages for the users specified by the TargetedUsersToProtect parameter. | BccMessage / Delete / MoveToJmf / NoAction / Quarantine / Redirect' MailboxIntelligenceProtectionActionRecipients = @( 'String | Optional | The�?�MailboxIntelligenceProtectionActionRecipients parameter specifies the recipients to add to detected messages when the MailboxIntelligenceProtectionAction parameter is set to the value�?�Redirect or BccMessage.' ) MakeDefault = 'Boolean | Optional | Make this the default antiphishing policy' MailboxIntelligenceQuarantineTag = 'String | Optional | The MailboxIntelligenceQuarantineTag specifies the quarantine policy that''s used on messages that are quarantined by mailbox intelligence.' TargetedUsersToProtect = @( 'String | Optional | The TargetedUsersToProtect parameter specifies the users that are included in user impersonation protection when the EnableTargetedUserProtection parameter is set to $true.' ) SpoofQuarantineTag = 'String | Optional | The SpoofQuarantineTag specifies the quarantine policy that''s used on messages that are quarantined by spoof intelligence.' EnableUnauthenticatedSender = 'Boolean | Optional | The�?�EnableUnauthenticatedSender�?�parameter enables or disables unauthenticated sender identification in Outlook.' DmarcRejectAction = 'String | Optional | The DmarcRejectAction parameter specifies the action to take when a message fails DMARC checks and the sender''s DMARC policy is p=reject. | Quarantine / Reject' EnableViaTag = 'Boolean | Optional | This setting is part of spoof protection. The�?�EnableViaTag�?�parameter enables or disables adding the via tag to the From address in Outlook.' TargetedUserQuarantineTag = 'String | Optional | The TargetedUserQuarantineTag specifies the quarantine policy that''s used on messages that are quarantined by user impersonation protection.' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' EnableUnusualCharactersSafetyTips = 'Boolean | Optional | The�?�EnableUnusualCharactersSafetyTips�?�parameter specifies whether to enable safety tips that are shown to recipients in messages for unusual characters in domain and user impersonation detections.' EnableTargetedUserProtection = 'Boolean | Optional | The�?�EnableTargetedUserProtection parameter specifies whether to enable user impersonation protection for the users specified by the TargetedUsersToProtect parameter' TargetedUserActionRecipients = @( 'String | Optional | The�?�TargetedUserActionRecipients parameter specifies the replacement or additional recipients for detected user impersonation messages when the TargetedUserProtectionAction parameter is set to the value�?�Redirect or BccMessage. A valid value for this parameter is an email address. You can specify multiple email addresses separated by commas.' ) ExcludedSenders = @( 'String | Optional | The�?�ExcludedSenders�?�parameter specifies a list of trusted sender email addresses that are excluded from scanning by antiphishing protection. You can specify multiple email addresses separated by commas.' ) } ) AntiPhishRules = @( @{ Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) AntiPhishPolicy = 'String | Required | The AntiPhishPolicy parameter specifies the name of the antiphishing policy that''s associated with the antiphishing rule.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SentTo = @( 'String | Optional | The SentTo parameter specifies a condition that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) Identity = 'String | Required | The Identity parameter specifies the name of the antiphishing rule that you want to modify.' ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) Enabled = 'Boolean | Optional | Specify if this rule should be enabled. Default is $true.' } ) ApplicationAccessPolicies = @( @{ AppID = @( 'String | Optional | The AppID parameter specifies the GUID of the apps to include in the policy.' ) PolicyScopeGroupId = 'String | Optional | The PolicyScopeGroupID parameter specifies the recipient to define in the policy. You can use any value that uniquely identifies the recipient.' Ensure = 'String | Optional | Specify if the Application Access Policy should exist or not. | Present / Absent' Description = 'String | Optional | The Description parameter specifies a description for the policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the application access policy that you want to modify.' AccessRight = 'String | Optional | The AccessRight parameter specifies the permission that you want to assign in the application access policy. | RestrictAccess / DenyAccess' } ) ArcConfig = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | Identity which indicates the organization.' ArcTrustedSealers = @( 'String | Optional | The domain names of the ARC sealers.' ) } ATPBuiltInProtectionRules = @( @{ ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email addresses in the specified domains. You can specify multiple domains separated by commas.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the rule that you want to modify. You can use any value that uniquely identifies the rule. ' Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) } ) AtpPolicyForO365 = @{ EnableSafeDocs = 'Boolean | Optional | The EnableSafeDocs parameter specifies whether to enable the Safe Documents feature in the organization. Default is $false.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | The Identity parameter specifies the ATP policy that you want to modify. There''s only one policy named Default.' Ensure = 'String | Optional | Since there is only one policy, the default policy, this must be set to ''Present'' | Present' EnableATPForSPOTeamsODB = 'Boolean | Optional | The EnableATPForSPOTeamsODB parameter specifies whether ATP is enabled for SharePoint Online, OneDrive for Business and Microsoft Teams. Default is $false.' AllowSafeDocsOpen = 'Boolean | Optional | The AllowSafeDocsOpen parameter specifies whether users can click through and bypass the Protected View container even when Safe Documents identifies a file as malicious.' } AtpProtectionPoliciesRule = @( @{ Priority = 'UInt32 | Optional | Specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' Name = 'String | Optional | Unique name for the rule. The maximum length is 64 characters.' SentToMemberOf = @( 'String | Optional | Specifies a condition that looks for messages sent to members of distribution groups, dynamic distribution groups, or mail-enabled security groups. ' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SentTo = @( 'String | Optional | Specifies a condition that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Comments = 'String | Optional | Informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' RecipientDomainIs = @( 'String | Optional | Specifies a condition that looks for recipients with email addresses in the specified domains.' ) Identity = 'String | Required | Identifier for the rule' SafeAttachmentPolicy = 'String | Optional | Specifies the existing Safe Attachments policy that''s associated with the preset security policy.' SafeLinksPolicy = 'String | Optional | Specifies the existing Safe Links policy that''s associated with the preset security policy.' ExceptIfRecipientDomainIs = @( 'String | Optional | Specifies an exception that looks for recipients with email addresses in the specified domains.' ) ExceptIfSentTo = @( 'String | Optional | Specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient' ) ExceptIfSentToMemberOf = @( 'String | Optional | Specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) Enabled = 'Boolean | Optional | Specifies whether the rule is enabled' } ) AuthenticationPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowBasicAuthRpc = 'Boolean | Optional | The AllowBasicAuthRpc switch specifies whether to allow Basic authentication with RPC.' AllowBasicAuthPop = 'Boolean | Optional | The AllowBasicAuthPop switch specifies whether to allow Basic authentication with POP.' AllowBasicAuthSmtp = 'Boolean | Optional | The AllowBasicAuthSmtp switch specifies whether to allow Basic authentication with SMTP.' AllowBasicAuthMapi = 'Boolean | Optional | The AllowBasicAuthMapi switch specifies whether to allow Basic authentication with MAPI.' AllowBasicAuthImap = 'Boolean | Optional | The AllowBasicAuthImap switch specifies whether to allow Basic authentication with IMAP.' AllowBasicAuthAutodiscover = 'Boolean | Optional | The AllowBasicAuthAutodiscover switch specifies whether to allow Basic authentication with Autodiscover.' Ensure = 'String | Optional | Specify if the authentication Policy should exist or not. | Present / Absent' AllowBasicAuthPowershell = 'Boolean | Optional | The AllowBasicAuthPowerShell switch specifies whether to allow Basic authentication with PowerShell.' AllowBasicAuthActiveSync = 'Boolean | Optional | The AllowBasicAuthActiveSync switch specifies whether to allow Basic authentication with Exchange Active Sync.' AllowBasicAuthOfflineAddressBook = 'Boolean | Optional | The AllowBasicAuthOfflineAddressBook switch specifies whether to allow Basic authentication with Offline Address Books.' Identity = 'String | Required | The Identity parameter specifies the authentication policy you want to view or modify.' AllowBasicAuthReportingWebServices = 'Boolean | Optional | The AllowBasicAuthReporting Web Services switch specifies whether to allow Basic authentication with reporting web services.' AllowBasicAuthOutlookService = 'Boolean | Optional | The AllowBasicAuthOutlookService switch specifies whether to allow Basic authentication with the Outlook service.' AllowBasicAuthWebServices = 'Boolean | Optional | The AllowBasicAuthWebServices switch specifies whether to allow Basic authentication with Exchange Web Services (EWS).' } ) AuthenticationPoliciesAssignment = @( @{ UserName = 'String | Required | Name of the user assigned to the authentication policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AuthenticationPolicyName = 'String | Optional | Name of the authentication policy.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if the authentication Policy should exist or not. | Present / Absent' } ) AvailabilityAddressSpaces = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specifies if this AvailabilityAddressSpace should exist. | Present / Absent' ForestName = 'String | Optional | The ForestName parameter specifies the SMTP domain name of the target forest for users whose free/busy data must be retrieved. If your users are distributed among multiple SMTP domains in the target forest, run the Add-AvailabilityAddressSpace command once for each SMTP domain.' AccessMethod = 'String | Optional | The AccessMethod parameter specifies how the free/busy data is accessed. Valid values are:PerUserFB, OrgWideFB, OrgWideFBToken, OrgWideFBBasic,InternalProxy | PerUserFB / OrgWideFB / OrgWideFBToken / OrgWideFBBasic / InternalProxy' Identity = 'String | Required | The Identity parameter specifies the AvailabilityAddressSpace you want to modify.' TargetAutodiscoverEpr = 'String | Optional | The TargetAutodiscoverEpr parameter specifies the Autodiscover URL of Exchange Web Services for the external organization. Exchange uses Autodiscover to automatically detect the correct server endpoint for external requests.' TargetServiceEpr = 'String | Optional | The TargetServiceEpr parameter specifies the Exchange Online Calendar Service URL of the external Microsoft 365 organization that you''re trying to read free/busy information from.' TargetTenantId = 'String | Optional | The TargetTenantID parameter specifies the tenant ID of the external Microsoft 365 organization that you''re trying to read free/busy information from.' Credentials = 'String | Optional | The Credentials parameter specifies the username and password that''s used to access the Availability services in the target forest.' } ) AvailabilityConfigs = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OrgWideAccount = 'String | Required | Specify the OrgWideAccount for the AvailabilityConfig.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if the AvailabilityConfig should exist or not. | Present / Absent' } ) CalendarProcessings = @( @{ MaximumConflictInstances = 'UInt32 | Optional | The MaximumConflictInstances parameter specifies the maximum number of conflicts for new recurring meeting requests when the AllowRecurringMeetings parameter is set to $true. A valid value is an integer from 0 through INT32 (2147483647). The default value is 0.' BookingType = 'String | Optional | The BookingType parameter specifies how reservations work on the resource mailbox. | Standard / Reserved' ForwardRequestsToDelegates = 'Boolean | Optional | The ForwardRequestsToDelegates parameter specifies whether to forward incoming meeting requests to the delegates that are configured for the resource mailbox.' RemoveCanceledMeetings = 'Boolean | Optional | The RemoveCanceledMeetings parameter specifies whether to automatically delete meetings that were cancelled by the organizer from the resource mailbox''s calendar. ' Identity = 'String | Required | The Identity parameter specifies the resource mailbox that you want to view. You can use any value that uniquely identifies the mailbox.' AdditionalResponse = 'String | Optional | The AdditionalResponse parameter specifies the additional information to be included in responses to meeting requests when the value of the AddAdditionalResponse parameter is $true. If the value contains spaces, enclose the value in quotation marks.' ResourceDelegates = @( 'String | Optional | The ResourceDelegates parameter specifies users can approve or reject requests that are sent to the resource mailbox. You can use any value that uniquely identifies the user. ' ) DeleteNonCalendarItems = 'Boolean | Optional | The DeleteNonCalendarItems parameter specifies whether to remove or keep all non-calendar-related messages that are received by the resource mailbox.' RemovePrivateProperty = 'Boolean | Optional | The RemovePrivateProperty parameter specifies whether to clear the private flag for incoming meetings that were sent by the organizer in the original requests. ' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EnforceSchedulingHorizon = 'Boolean | Optional | The EnforceSchedulingHorizon parameter controls the behavior of recurring meetings that extend beyond the date specified by the BookingWindowInDays parameter.' EnableResponseDetails = 'Boolean | Optional | The EnableResponseDetails parameter specifies whether to include the reasons for accepting or declining a meeting in the response email message.' RequestInPolicy = @( 'String | Optional | The RemovePrivateProperty parameter specifies whether to clear the private flag for incoming meetings that were sent by the organizer in the original requests. ' ) EnforceCapacity = 'Boolean | Optional | The EnforceCapacity parameter specifies whether to restrict the number of attendees to the capacity of the workspace. For example, if capacity is set to 10, then only 10 people can book the workspace.' AllowConflicts = 'Boolean | Optional | The AllowConflicts parameter specifies whether to allow conflicting meeting requests.' AllRequestInPolicy = 'Boolean | Optional | The AllRequestInPolicy parameter specifies whether to allow all users to submit in-policy requests to the resource mailbox.' BookInPolicy = @( 'String | Optional | The BookInPolicy parameter specifies users or groups who are allowed to submit in-policy meeting requests to the resource mailbox that are automatically approved. You can use any value that uniquely identifies the user or group.' ) ConflictPercentageAllowed = 'UInt32 | Optional | The ConflictPercentageAllowed parameter specifies the maximum percentage of meeting conflicts for new recurring meeting requests. A valid value is an integer from 0 through 100. The default value is 0.' AutomateProcessing = 'String | Optional | The AutomateProcessing parameter enables or disables calendar processing on the mailbox. | None / AutoUpdate / AutoAccept' AllRequestOutOfPolicy = 'Boolean | Optional | The AllRequestOutOfPolicy parameter specifies whether to allow all users to submit out-of-policy requests to the resource mailbox.' AddNewRequestsTentatively = 'Boolean | Optional | The AddNewRequestsTentatively parameter specifies whether new meeting requests are added to the calendar as tentative' DeleteAttachments = 'Boolean | Optional | The DeleteAttachments parameter specifies whether to remove attachments from all incoming messages.' Ensure = 'String | Optional | Determines wether or not the instance exist. | Present' ProcessExternalMeetingMessages = 'Boolean | Optional | The ProcessExternalMeetingMessages parameter specifies whether to process meeting requests that originate outside the Exchange organization.' MinimumDurationInMinutes = 'UInt32 | Optional | The MinimumDurationInMinutes parameter specifies the minimum duration in minutes for meeting requests in workspace mailboxes. A valid value is an integer from 0 through INT32 (2147483647). The default value is 0, which means there is no minimum duration.' ScheduleOnlyDuringWorkHours = 'Boolean | Optional | The ScheduleOnlyDuringWorkHours parameter specifies whether to allow meetings to be scheduled outside of the working hours that are defined for the resource mailbox.' RequestOutOfPolicy = @( 'String | Optional | The RequestOutOfPolicy parameter specifies users who are allowed to submit out-of-policy requests that require approval by a resource mailbox delegate. You can use any value that uniquely identifies the user. ' ) RemoveOldMeetingMessages = 'Boolean | Optional | The RemoveOldMeetingMessages parameter specifies whether the Calendar Attendant removes old and redundant updates and responses.' TentativePendingApproval = 'Boolean | Optional | The TentativePendingApproval parameter specifies whether to mark pending requests as tentative on the calendar.' MaximumDurationInMinutes = 'UInt32 | Optional | The MaximumDurationInMinutes parameter specifies the maximum duration in minutes for meeting requests. A valid value is an integer from 0 through INT32 (2147483647). The default value is 1440 (24 hours).' OrganizerInfo = 'Boolean | Optional | The OrganizerInfo parameter specifies whether the resource mailbox sends organizer information when a meeting request is declined because of conflicts.' PostReservationMaxClaimTimeInMinutes = 'UInt32 | Optional | N/A' AddOrganizerToSubject = 'Boolean | Optional | The AddOrganizerToSubject parameter specifies whether the meeting organizer''s name is used as the subject of the meeting request.' AllBookInPolicy = 'Boolean | Optional | The AllBookInPolicy parameter specifies whether to automatically approve in-policy requests from all users to the resource mailbox.' AddAdditionalResponse = 'Boolean | Optional | The AddAdditionalResponse parameter specifies whether additional information (the value of the AdditionalResponse parameter) is added to meeting request responses' DeleteComments = 'Boolean | Optional | The DeleteComments parameter specifies whether to remove or keep any text in the message body of incoming meeting requests.' RemoveForwardedMeetingNotifications = 'Boolean | Optional | The RemoveForwardedMeetingNotifications parameter specifies whether forwarded meeting notifications are moved to the Deleted Items folder after they''re processed by the Calendar Attendant. ' EnableAutoRelease = 'Boolean | Optional | N/A' BookingWindowInDays = 'UInt32 | Optional | The BookingWindowInDays parameter specifies the maximum number of days in advance that the resource can be reserved. A valid value is an integer from 0 through 1080. The default value is 180 days. The value 0 means today.' AllowRecurringMeetings = 'Boolean | Optional | The AllowRecurringMeetings parameter specifies whether to allow recurring meetings in meeting requests.' DeleteSubject = 'Boolean | Optional | The DeleteSubject parameter specifies whether to remove or keep the subject of incoming meeting requests. ' } ) CASMailboxPlans = @( @{ OwaMailboxPolicy = 'String | Optional | The OwaMailboxPolicy parameter specifies the Outlook on the web (formerly known as Outlook Web App) mailbox policy for the mailbox plan. The default value is OwaMailboxPolicy-Default. You can use the Get-OwaMailboxPolicy cmdlet to view the available Outlook on the web mailbox policies.' Ensure = 'String | Optional | CASMailboxPlans cannot be created/removed in O365. This must be set to ''Present'' | Present' ActiveSyncEnabled = 'Boolean | Optional | The ActiveSyncEnabled parameter enables or disables access to the mailbox by using Exchange Active Sync. Default is $true.' PopEnabled = 'Boolean | Optional | The PopEnabled parameter enables or disables access to the mailbox by using POP3 clients. Default is $true.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the CAS Mailbox Plan that you want to modify.' ImapEnabled = 'Boolean | Optional | The ImapEnabled parameter enables or disables access to the mailbox by using IMAP4 clients. The default value is $true for all CAS mailbox plans except ExchangeOnlineDeskless which is $false by default.' DisplayName = 'String | Optional | The display name of the CAS Mailbox Plan.' } ) CASMailboxSettingsItems = @( @{ ImapEnabled = 'Boolean | Optional | The ImapEnabled parameter enables or disables access to the mailbox using IMAP4 clients.' ImapSuppressReadReceipt = 'Boolean | Optional | The ImapSuppressReadReceipt parameter controls the behavior of read receipts for IMAP4 clients that access the mailbox.' ActiveSyncSuppressReadReceipt = 'Boolean | Optional | The ActiveSyncSuppressReadReceipt parameter controls the behavior of read receipts for Exchange ActiveSync clients that access the mailbox.' Identity = 'String | Required | The Identity parameter specifies the mailbox that you want to configure.' EwsBlockList = @( 'String | Optional | The EwsBlockList parameter specifies the Exchange Web Services applications (user agent strings) that aren''t allowed to access the mailbox using Exchange Web Services.' ) EwsAllowEntourage = 'Boolean | Optional | The EwsAllowEntourage parameter enables or disables access to the mailbox by Microsoft Entourage clients that use Exchange Web Services.' OwaMailboxPolicy = 'String | Optional | The OwaMailboxPolicy parameter specifies the Outlook on the web mailbox policy for the mailbox.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SmtpClientAuthenticationDisabled = 'Boolean | Optional | The SmtpClientAuthenticationDisabled parameter specifies whether to disable authenticated SMTP (SMTP AUTH) for the mailbox.' PopForceICalForCalendarRetrievalOption = 'Boolean | Optional | The PopForceICalForCalendarRetrievalOption parameter specifies how meeting requests are presented to POP3 clients that access the mailbox.' ImapForceICalForCalendarRetrievalOption = 'Boolean | Optional | The ImapForceICalForCalendarRetrievalOption parameter specifies how meeting requests are presented to IMAP4 clients that access the mailbox.' ShowGalAsDefaultView = 'Boolean | Optional | The ShowGalAsDefaultView parameter specifies whether the global address list (GAL) is the default recipient picker for messages.' OneWinNativeOutlookEnabled = 'Boolean | Optional | The OneWinNativeOutlookEnabled parameter enables or disables access to the mailbox using the new Outlook for Windows.' ActiveSyncBlockedDeviceIDs = @( 'String | Optional | The ActiveSyncBlockedDeviceIDs parameter specifies one or more Exchange ActiveSync device IDs that aren''t allowed to synchronize with the mailbox.' ) MAPIEnabled = 'Boolean | Optional | The MAPIEnabled parameter enables or disables access to the mailbox using MAPI clients (for example, Outlook).' EwsAllowOutlook = 'Boolean | Optional | The EwsAllowOutlook parameter enables or disables access to the mailbox by Outlook clients that use Exchange Web Services.' PopEnabled = 'Boolean | Optional | The PopEnabled parameter enables or disables access to the mailbox using POP3 clients.' OWAforDevicesEnabled = 'Boolean | Optional | The OWAforDevicesEnabled parameter enables or disables access to the mailbox using the older Outlook Web App (OWA) app on iOS and Android devices.' ActiveSyncAllowedDeviceIDs = @( 'String | Optional | TheActiveSyncAllowedDeviceIDs parameter specifies one or more Exchange ActiveSync device IDs that are allowed to synchronize with the mailbox.' ) EwsEnabled = 'Boolean | Optional | The EwsEnabled parameter enables or disables access to the mailbox using Exchange Web Services clients.' OutlookMobileEnabled = 'Boolean | Optional | The OutlookMobileEnabled parameter enables or disables access to the mailbox using Outlook for iOS and Android.' EwsAllowMacOutlook = 'Boolean | Optional | The EwsAllowMacOutlook parameter enables or disables access to the mailbox by Outlook for Mac clients that use Exchange Web Services.' EwsApplicationAccessPolicy = 'String | Optional | The EwsApplicationAccessPolicy parameter controls access to the mailbox using Exchange Web Services applications.' Ensure = 'String | Optional | Present ensures the Mailbox CAS settings are applied. | Present' PublicFolderClientAccess = 'Boolean | Optional | The PublicFolderClientAccess parameter enables or disables access to public folders in Microsoft Outlook.' OWAEnabled = 'Boolean | Optional | The OWAEnabled parameter enables or disables access to the mailbox using Outlook on the web (formerly known as Outlook Web App or OWA).' UniversalOutlookEnabled = 'Boolean | Optional | The UniversalOutlookEnabled parameter enables or disables access to the mailbox using Windows 10 Mail and Calendar.' ActiveSyncMailboxPolicy = 'String | Optional | The ActiveSyncMailboxPolicy parameter specifies the Exchange ActiveSync mailbox policy for the mailbox.' ImapUseProtocolDefaults = 'Boolean | Optional | The ImapUseProtocolDefaults parameter specifies whether to use the IMAP4 protocol defaults for the mailbox.' ActiveSyncDebugLogging = 'Boolean | Optional | The ActiveSyncDebugLogging parameter enables or disables Exchange ActiveSync debug logging for the mailbox.' PopMessagesRetrievalMimeFormat = 'String | Optional | The PopMessagesRetrievalMimeFormat parameter specifies the message format for POP3 clients that access the mailbox.' ImapMessagesRetrievalMimeFormat = 'String | Optional | The ImapMessagesRetrievalMimeFormat parameter specifies the message format for IMAP4 clients that access the mailbox.' ActiveSyncEnabled = 'Boolean | Optional | The ActiveSyncEnabled parameter enables or disables access to the mailbox using Exchange ActiveSync.' MacOutlookEnabled = 'Boolean | Optional | The MacOutlookEnabled parameter enables or disables access to the mailbox using Outlook for Mac clients that use Microsoft Sync technology.' PopSuppressReadReceipt = 'Boolean | Optional | The PopSuppressReadReceipt parameter controls the behavior of read receipts for POP3 clients that access the mailbox.' EwsAllowList = @( 'String | Optional | The EwsAllowList parameter specifies the Exchange Web Services applications (user agent strings) that are allowed to access the mailbox.' ) PopUseProtocolDefaults = 'Boolean | Optional | The PopUseProtocolDefaults parameter specifies whether to use the POP3 protocol defaults for the mailbox.' } ) ClientAccessRules = @( @{ Action = 'String | Required | The Action parameter specifies the action for the client access rule. Valid values for this parameter are AllowAccess and DenyAccess. | AllowAccess / DenyAccess' AnyOfAuthenticationTypes = @( 'String | Optional | The AnyOfAuthenticationTypes parameter specifies a condition for the client access rule that is based on the client''s authentication type. Valid values for this parameter are AdfsAuthentication, BasicAuthentication, CertificateBasedAuthentication, NonBasicAuthentication, OAuthAuthentication. | AdfsAuthentication / BasicAuthentication / CertificateBasedAuthentication / NonBasicAuthentication / OAuthAuthentication' ) Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the client access rule. A lower integer value indicates a higher priority, and a higher priority rule is evaluated before a lower priority rule. The default value is 1.' ExceptAnyOfProtocols = @( 'String | Optional | The ExceptAnyOfProtocols parameter specifies an exception for the client access rule that is based on the client''s protocol. Valid values for this parameter are ExchangeActiveSync,ExchangeAdminCenter,ExchangeWebServices,IMAP4,OfflineAddressBook,OutlookAnywhere,OutlookWebApp,POP3,PowerShellWebServices,RemotePowerShell,REST,UniversalOutlook. | ExchangeActiveSync / ExchangeAdminCenter / ExchangeWebServices / IMAP4 / OfflineAddressBook / OutlookAnywhere / OutlookWebApp / POP3 / PowerShellWebServices / RemotePowerShell / REST / UniversalOutlook' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AnyOfClientIPAddressesOrRanges = @( 'String | Optional | The AnyOfClientIPAddressesOrRanges parameter specifies a condition for the client access rule that is based on the client''s IP address. Valid values for this parameter are: A single IP address, an IP address range, a CIDR IP.' ) Ensure = 'String | Optional | Specifies if this Client Access Rule should exist. | Present / Absent' ExceptUsernameMatchesAnyOfPatterns = @( 'String | Optional | The ExceptUsernameMatchesAnyOfPatterns parameter specifies an exception for the client access rule that is based on the user''s account name.' ) ExceptAnyOfAuthenticationTypes = @( 'String | Optional | The ExceptAnyOfAuthenticationTypes parameter specifies an exception for the client access rule that is based on the client''s authentication type. Valid values for this parameter are AdfsAuthentication, BasicAuthentication, CertificateBasedAuthentication, NonBasicAuthentication, OAuthAuthentication. | AdfsAuthentication / BasicAuthentication / CertificateBasedAuthentication / NonBasicAuthentication / OAuthAuthentication' ) Identity = 'String | Required | The Identity parameter specifies the client access rule that you want to modify.' ExceptAnyOfClientIPAddressesOrRanges = @( 'String | Optional | The ExceptAnyOfClientIPAddressesOrRanges parameter specifies an exception for the client access rule that is based on the client''s IP address. Valid values for this parameter are: A single IP address, an IP address range, a CIDR IP.' ) UserRecipientFilter = 'String | Optional | The UserRecipientFilter parameter specifies a condition for the client access rule that uses OPath filter syntax to identify the user.' AnyOfProtocols = @( 'String | Optional | The AnyOfProtocols parameter specifies a condition for the client access rule that is based on the client''s protocol. Valid values for this parameter are ExchangeActiveSync,ExchangeAdminCenter,ExchangeWebServices,IMAP4,OfflineAddressBook,OutlookAnywhere,OutlookWebApp,POP3,PowerShellWebServices,RemotePowerShell,REST,UniversalOutlook. | ExchangeActiveSync / ExchangeAdminCenter / ExchangeWebServices / IMAP4 / OfflineAddressBook / OutlookAnywhere / OutlookWebApp / POP3 / PowerShellWebServices / RemotePowerShell / REST / UniversalOutlook' ) RuleScope = 'String | Optional | The RuleScope parameter specifies the scope of the client access rule. Valid values are All and Users | All / Users' UsernameMatchesAnyOfPatterns = @( 'String | Optional | The UsernameMatchesAnyOfPatterns parameter specifies a condition for the client access rule that is based on the user''s account name.' ) Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the client access rule is enabled or disabled. Default is $true.' } ) DataAtRestEncryptionPolicies = @( @{ Description = 'String | Optional | The Description parameter specifies an optional description for the policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Name = 'String | Optional | The Name parameter specifies a unique name for the Microsoft 365 data-at-rest encryption policy.' Identity = 'String | Required | The Identity parameter specifies the data-at-rest encryption policy that you want to modify.' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the policy is enabled or disabled. ' AzureKeyIDs = @( 'String | Optional | The AzureKeyIDs parameter specifies the URL of the encryption key in the Azure Key Vault that''s used for encryption.' ) } ) DataAtRestEncryptionPolicyAssignment = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DataEncryptionPolicy = 'String | Optional | The DataEncryptionPolicy parameter specifies the Microsoft 365 data-at-rest encryption policy.' } DataClassifications = @( @{ Description = 'String | Optional | The Description parameter specifies a description for the data classification rule. You use the Description parameter with the Locale and Name parameters to specify descriptions for the data classification rule in different languages. ' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsDefault = 'Boolean | Optional | IsDefault is used with the Locale parameter to specify the default language for the data classification rule.' Ensure = 'String | Optional | Specifies if this policy should exist. | Present / Absent' Fingerprints = @( 'String | Optional | The Fingerprints parameter specifies the byte-encoded document files that are used as fingerprints by the data classification rule.' ) Name = 'String | Optional | The Name parameter specifies a name for the data classification rule. The value must be less than 256 characters.' Identity = 'String | Required | The Identity parameter specifies the data classification rule that you want to modify.' Locale = 'String | Optional | The Locale parameter adds or removes languages that are associated with the data classification rule.' } ) DataEncryptionPolicies = @( @{ Name = 'String | Optional | The Name parameter specifies the unique name for the data encryption policy.' PermanentDataPurgeContact = 'String | Optional | The PermanentDataPurgeContact parameter specifies a contact for the purge of all data that''s encrypted by the data encryption policy.' AzureKeyIDs = @( 'String | Optional | The AzureKeyIDs parameter specifies the URI values of the Azure Key Vault keys to associate with the data encryption policy.' ) Enabled = 'Boolean | Optional | The Enabled parameter enables or disable the data encryption policy.' Ensure = 'String | Optional | Specifies if this policy should exist. | Present / Absent' Description = 'String | Optional | The Description parameter specifies an optional description for the data encryption policy' PermanentDataPurgeReason = 'String | Optional | The PermanentDataPurgeReason parameter specifies a descriptive reason for the purge of all data that''s encrypted by the data encryption policy' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the data encryption policy that you want to modify.' } ) DistributionGroups = @( @{ CustomAttribute12 = 'String | Optional | This parameter specifies a value for the CustomAttribute12 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' CustomAttribute10 = 'String | Optional | This parameter specifies a value for the CustomAttribute10 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' RequireSenderAuthenticationEnabled = 'Boolean | Optional | The RequireSenderAuthenticationEnabled parameter specifies whether to accept messages only from authenticated (internal) senders.' Description = 'String | Optional | Description of the distribution group.' Identity = 'String | Required | The Identity parameter specifies the distribution group or mail-enabled security group that you want to modify. You can use any value that uniquely identifies the group.' CustomAttribute8 = 'String | Optional | This parameter specifies a value for the CustomAttribute8 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' DisplayName = 'String | Optional | The DisplayName parameter specifies the display name of the group. The display name is visible in the Exchange admin center and in address lists. The maximum length is 256 characters.' BccBlocked = 'Boolean | Optional | Is Bcc blocked for the distribution group.' CustomAttribute3 = 'String | Optional | This parameter specifies a value for the CustomAttribute3 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' Name = 'String | Required | The Name parameter specifies a unique name for the address list.' CustomAttribute7 = 'String | Optional | This parameter specifies a value for the CustomAttribute7 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' CustomAttribute1 = 'String | Optional | This parameter specifies a value for the CustomAttribute1 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' AcceptMessagesOnlyFromDLMembers = @( 'String | Optional | The AcceptMessagesOnlyFromDLMembers parameter specifies who is allowed to send messages to this recipient. Messages from other senders are rejected.' ) RoomList = 'Boolean | Optional | The RoomList switch specifies that all members of this distribution group are room mailboxes. You don''t need to specify a value with this switch.' HiddenFromAddressListsEnabled = 'Boolean | Optional | The HiddenFromAddressListsEnabled parameter specifies whether this recipient is visible in address lists.' MemberDepartRestriction = 'String | Optional | The MemberDepartRestriction parameter specifies the restrictions that you put on requests to leave the group. Valid values are: Open & Closed | Open / Closed' CustomAttribute6 = 'String | Optional | This parameter specifies a value for the CustomAttribute6 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' HiddenGroupMembershipEnabled = 'Boolean | Optional | The HiddenGroupMembershipEnabled switch specifies whether to hide the members of the distribution group from members of the group and users who aren''t members of the group.' BypassNestedModerationEnabled = 'Boolean | Optional | The ByPassNestedModerationEnabled parameter specifies how to handle message approval when a moderated group contains other moderated groups as members.' CustomAttribute13 = 'String | Optional | This parameter specifies a value for the CustomAttribute13 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' ModeratedBy = @( 'String | Optional | The ModeratedBy parameter specifies one or more moderators for this group. A moderator approves messages sent to the group before the messages are delivered. A moderator must be a mailbox, mail user, or mail contact in your organization. You can use any value that uniquely identifies the moderator.' ) CustomAttribute14 = 'String | Optional | This parameter specifies a value for the CustomAttribute14 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' ModerationEnabled = 'Boolean | Optional | The ModerationEnabled parameter specifies whether moderation is enabled for this recipient.' Members = @( 'String | Optional | The Members parameter specifies the recipients (mail-enabled objects) that are members of the group. You can use any value that uniquely identifies the recipient.' ) CustomAttribute4 = 'String | Optional | This parameter specifies a value for the CustomAttribute4 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' Ensure = 'String | Optional | Specifies if this AddressList should exist. | Present / Absent' SendOofMessageToOriginatorEnabled = 'Boolean | Optional | The SendOofMessageToOriginatorEnabled parameter specifies how to handle out of office (OOF) messages for members of the group.' CustomAttribute5 = 'String | Optional | This parameter specifies a value for the CustomAttribute5 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' CustomAttribute15 = 'String | Optional | This parameter specifies a value for the CustomAttribute15 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' PrimarySmtpAddress = 'String | Optional | The PrimarySmtpAddress parameter specifies the primary return email address that''s used for the recipient.' MemberJoinRestriction = 'String | Optional | The MemberJoinRestriction parameter specifies the restrictions that you put on requests to join the group. Valid values are: Open, Closed & ApprovalRequired | Open / Closed / ApprovalRequired' CustomAttribute9 = 'String | Optional | This parameter specifies a value for the CustomAttribute9 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' Type = 'String | Optional | The Type parameter specifies the type of group that you want to create. Valid values are: Distribution, Security | Distribution / Security' Alias = 'String | Optional | Exchange alias (also known as the mail nickname) for the recipient' ManagedBy = @( 'String | Optional | The ManagedBy parameter specifies an owner for the group. A group must have at least one owner.' ) GrantSendOnBehalfTo = @( 'String | Optional | The GrantSendOnBehalfTo parameter specifies who can send on behalf of this group. Although messages send on behalf of the group clearly show the sender in the From field (<Sender> on behalf of <Group>), replies to these messages are delivered to the group, not the sender.' ) CustomAttribute2 = 'String | Optional | This parameter specifies a value for the CustomAttribute2 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' AcceptMessagesOnlyFromSendersOrMembers = @( 'String | Optional | The AcceptMessagesOnlyFromSendersOrMembers parameter specifies who is allowed to send messages to this recipient. Messages from other senders are rejected.' ) SendModerationNotifications = 'String | Optional | The SendModerationNotifications parameter specifies when moderation notification messages are sent. Valid values are: Always, Internal, Never. | Always / Internal / Never' Notes = 'String | Optional | The Notes parameters specifies additional information about the object.' OrganizationalUnit = 'String | Optional | The OrganizationalUnit parameter specifies the location in Active Directory where the group is created.' CustomAttribute11 = 'String | Optional | This parameter specifies a value for the CustomAttribute11 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters. If the value contains spaces, enclose the value in quotation marks.' EmailAddresses = @( 'String | Optional | The EmailAddresses parameter specifies all email addresses (proxy addresses) for the recipient, including the primary SMTP address. In on-premises Exchange organizations, the primary SMTP address and other proxy addresses are typically set by email address policies. However, you can use this parameter to configure other proxy addresses for the recipient.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AcceptMessagesOnlyFrom = @( 'String | Optional | The AcceptMessagesOnlyFrom parameter specifies who is allowed to send messages to this recipient. Messages from other senders are rejected.' ) } ) DkimSigningConfigs = @( @{ Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the DKIM Signing Configuration is enabled or disabled. Default is $true.' KeySize = 'UInt16 | Optional | The KeySize parameter specifies the size in bits of the public key that''s used in the DKIM signing policy. Valid values are 1024 and 2048 | 1024 / 2048' Ensure = 'String | Optional | Specifies if this Client Access Rule should exist. | Present / Absent' BodyCanonicalization = 'String | Optional | The BodyCanonicalization parameter specifies the canonicalization algorithm that''s used to create and verify the message body part of the DKIM signature. This value effectively controls the sensitivity of DKIM to changes to the message body in transit. Valid values are ''Simple'' or ''Relaxed''. ''Relaxed'' is the default. | Simple / Relaxed' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the DKIM signing policy that you want to modify. This should be the FQDN. ' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' HeaderCanonicalization = 'String | Optional | The HeaderCanonicalization parameter specifies the canonicalization algorithm that''s used to create and verify the message header part of the DKIM signature. This value effectively controls the sensitivity of DKIM to changes to the message headers in transit. Valid values are ''Simple'' or ''Relaxed''. ''Relaxed'' is the default. | Simple / Relaxed' } ) DnssecForVerifiedDomains = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DnssecFeatureStatus = 'String | Optional | Status of the DnsSec for the given Domain Name. | Enabled / Disabled / Unknown' UniqueId = 'String | Required | Unique ID to identify this specific object' DomainName = 'String | Required | DomainName parameter specifies the accepted domain in the Exchange Online organization where you want to view information about DNSSEC' } ) EmailAddressPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' ManagedByFilter = 'String | Optional | The ManagedByFilter parameter specifies the email address policies to apply to Office 365 groups based on the properties of the users who create the Office 365 groups.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EnabledPrimarySMTPAddressTemplate = @( 'String | Optional | The EnabledPrimarySMTPAddressTemplate parameter specifies the specifies the rule in the email address policy that''s used to generate the primary SMTP email addresses for recipients. You can use this parameter instead of the EnabledEmailAddressTemplates if the policy only applies the primary email address and no additional proxy addresses.' ) Ensure = 'String | Optional | Specify if the Email Address Policy should exist or not. | Present / Absent' Name = 'String | Required | The Name parameter specifies the unique name of the email address policy. The maximum length is 64 characters.' Priority = 'String | Optional | The Priority parameter specifies the order that the email address policies are evaluated. By default, every time that you add a new email address policy, the policy is assigned a priority of N+1, where N is the number of email address policies that you''ve created.' EnabledEmailAddressTemplates = @( 'String | Optional | The EnabledEmailAddressTemplates parameter specifies the rules in the email address policy that are used to generate email addresses for recipients.' ) } ) EmailTenantSettings = @{ Name = 'String | Optional | Specifies the name of the object.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | Identity which indicates the organization name.' EnablePriorityAccountProtection = 'Boolean | Optional | Specifies whether priority account protection is enabled.' ObjectState = 'String | Optional | Specifies the state of the object.' IsValid = 'Boolean | Optional | Specifies whether the migration configuration is valid.' } EOPProtectionPoliciesRule = @( @{ Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' Name = 'String | Optional | The Name parameter specifies a unique name for the rule. The maximum length is 64 characters.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter specifies a condition that looks for messages sent to members of distribution groups, dynamic distribution groups, or mail-enabled security groups. You can use any value that uniquely identifies the group.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SentTo = @( 'String | Optional | The SentTo parameter specifies a condition that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition that looks for recipients with email addresses in the specified domains. You can specify multiple domains separated by commas.' ) Identity = 'String | Required | The Identity parameter specifies the rule that you want to view. You can use any value that uniquely identifies the rule. ' ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email addresses in the specified domains. You can specify multiple domains separated by commas.' ) State = 'String | Optional | This parameter defin if the rule is enabled or disabled' ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) } ) ExternalInOutlooks = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowList = @( 'String | Optional | The AllowList parameter specifies exceptions to external sender identification in supported versions of Outlook. Messages received from the specified senders or senders in the specified domains don''t receive native External sender identification. The allow list uses the 5322.From address (also known as the From address or P2 sender). Valid values are an individual domain (contoso.com), a domain and all subdomains (*.contoso.com) or email addresses (admin@contoso.com).' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | OrganisationIDParameter, not needed for cmdlet Functionality, use ''ExternalinOutlook'' to use the same configuration for multiple Tenants' Enabled = 'Boolean | Optional | The Enabled parameter enables or disables external sender identification in supported versions of Outlook. Valid values are:$true: External sender identification in Outlook is enabled. An External icon is added in the area of the subject line of messages from external senders. To exempt specific senders or sender domains from this identification, use the AllowList parameter.$false: External sender identification in Outlook is disabled.' } ) FocusedInboxs = @( @{ FocusedInboxOnLastUpdateTime = 'DateTime | Optional | Gets the last updated time on focused inbox' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) FocusedInboxOn = 'Boolean | Optional | The FocusedInboxOn parameter enables or disables Focused Inbox for the mailbox.' Ensure = 'String | Optional | Specify if the AcceptedDomain should exist or not. | Present' Identity = 'String | Required | The Identity parameter specifies the mailbox that you want to modify.' } ) GlobalAddressLists = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' ConditionalCustomAttribute3 = @( 'String | Optional | The ConditionalCustomAttribute3 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute3 property.' ) ConditionalStateOrProvince = @( 'String | Optional | The ConditionalStateOrProvince parameter specifies a precanned filter that''s based on the value of the recipient''s StateOrProvince property.' ) ConditionalCustomAttribute4 = @( 'String | Optional | The ConditionalCustomAttribute4 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute4 property.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RecipientFilter = 'String | Optional | The RecipientFilter parameter specifies an OPath filter that''s based on the value of any available recipient property.' ConditionalCustomAttribute13 = @( 'String | Optional | The ConditionalCustomAttribute13 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute13 property.' ) ConditionalCustomAttribute5 = @( 'String | Optional | The ConditionalCustomAttribute5 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute5 property.' ) Name = 'String | Required | The Name parameter specifies the unique name of the GAL. The maximum length is 64 characters.' ConditionalDepartment = @( 'String | Optional | The ConditionalDepartment parameter specifies a precanned filter that''s based on the value of the recipient''s Department property.' ) Ensure = 'String | Optional | Specify if the Global Address List should exist or not. | Present / Absent' ConditionalCustomAttribute6 = @( 'String | Optional | The ConditionalCustomAttribute6 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute6 property.' ) ConditionalCustomAttribute15 = @( 'String | Optional | The ConditionalCustomAttribute15 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute15 property.' ) IncludedRecipients = @( 'String | Optional | The IncludedRecipients parameter specifies a precanned filter that''s based on the recipient type. | / AllRecipients / MailboxUsers / MailContacts / MailGroups / MailUsers / Resources' ) ConditionalCustomAttribute1 = @( 'String | Optional | The ConditionalCustomAttribute1 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute1 property.' ) ConditionalCustomAttribute10 = @( 'String | Optional | The ConditionalCustomAttribute10 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute10 property.' ) ConditionalCustomAttribute7 = @( 'String | Optional | The ConditionalCustomAttribute7 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute7 property.' ) ConditionalCustomAttribute9 = @( 'String | Optional | The ConditionalCustomAttribute9 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute9 property.' ) ConditionalCustomAttribute12 = @( 'String | Optional | The ConditionalCustomAttribute12 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute12 property.' ) ConditionalCustomAttribute14 = @( 'String | Optional | The ConditionalCustomAttribute14 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute14 property.' ) ConditionalCompany = @( 'String | Optional | The ConditionalCompany parameter specifies a precanned filter that''s based on the value of the recipient''s Company property.' ) ConditionalCustomAttribute8 = @( 'String | Optional | The ConditionalCustomAttribute8 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute8 property.' ) ConditionalCustomAttribute2 = @( 'String | Optional | The ConditionalCustomAttribute2 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute2 property.' ) ConditionalCustomAttribute11 = @( 'String | Optional | The ConditionalCustomAttribute11 parameter specifies a precanned filter that''s based on the value of the recipient''s CustomAttribute11 property.' ) } ) GroupSettingsItems = @( @{ MailboxRegion = 'String | Optional | The MailboxRegion parameter specifies the preferred data location (PDL) for the Microsoft 365 Group in multi-geo environments.' ModeratedBy = @( 'String | Optional | The ModeratedBy parameter specifies one or more moderators for this recipient. A moderator approves messages sent to the recipient before the messages are delivered. A moderator must be a mailbox, mail user, or mail contact in your organization. You can use any value that uniquely identifies the moderator. ' ) CustomAttribute10 = 'String | Optional | This parameter specifies a value for the CustomAttribute10 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' RequireSenderAuthenticationEnabled = 'Boolean | Optional | The RequireSenderAuthenticationEnabled parameter specifies whether to accept messages only from authenticated (internal) senders. ' ModerationEnabled = 'Boolean | Optional | The ModerationEnabled parameter specifies whether moderation is enabled for this recipient.' ExtensionCustomAttribute4 = 'String | Optional | This parameter specifies a value for the ExtensionCustomAttribute4 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. You can specify up to 1300 values separated by commas.' CalendarMemberReadOnly = 'Boolean | Optional | The CalendarMemberReadOnly parameter specifies whether to set read-only Calendar permissions to the Microsoft 365 Group for members of the group.' CustomAttribute8 = 'String | Optional | This parameter specifies a value for the CustomAttribute8 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' DisplayName = 'String | Required | The DisplayName parameter specifies the name of the Microsoft 365 Group. The display name is visible in the Exchange admin center, address lists, and Outlook. The maximum length is 64 characters.' CustomAttribute1 = 'String | Optional | This parameter specifies a value for the CustomAttribute1 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) InformationBarrierMode = 'String | Optional | The InformationBarrierMode parameter specifies the information barrier mode for the Microsoft 365 Group. | Explicit / Implicit / Open / OwnerModerated' DataEncryptionPolicy = 'String | Optional | The DataEncryptionPolicy parameter specifies the data encryption policy that''s applied to the Microsoft 365 Group. ' MailTipTranslations = 'String | Optional | The MailTipTranslations parameter specifies additional languages for the custom MailTip text that''s defined by the MailTip parameter.' UnifiedGroupWelcomeMessageEnabled = 'Boolean | Optional | The UnifiedGroupWelcomeMessageEnabled switch specifies whether to enable or disable sending system-generated welcome messages to users who are added as members to the Microsoft 365 Group.' MaxReceiveSize = 'String | Optional | The MaxReceiveSize parameter specifies the maximum size of an email message that can be sent to this group. Messages that exceed the maximum size are rejected by the group.' Classification = 'String | Optional | The CalendarMemberReadOnly switch specifies whether to set read-only Calendar permissions to the Microsoft 365 Group for members of the group.' CustomAttribute2 = 'String | Optional | This parameter specifies a value for the CustomAttribute2 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' CustomAttribute13 = 'String | Optional | This parameter specifies a value for the CustomAttribute13 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' HiddenFromAddressListsEnabled = 'Boolean | Optional | The GrantSendOnBehalfTo parameter specifies who can send on behalf of this Microsoft 365 Group.' MaxSendSize = 'String | Optional | The MaxSendSize parameter specifies the maximum size of an email message that can be sent by this group.' ExtensionCustomAttribute2 = 'String | Optional | This parameter specifies a value for the ExtensionCustomAttribute2 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. You can specify up to 1300 values separated by commas.' CustomAttribute6 = 'String | Optional | This parameter specifies a value for the CustomAttribute6 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' RejectMessagesFromSendersOrMembers = @( 'String | Optional | The RejectMessagesFromSendersOrMembers parameter specifies who isn''t allowed to send messages to this recipient. Messages from these senders are rejected.' ) AuditLogAgeLimit = 'String | Optional | The AlwaysSubscribeMembersToCalendarEvents switch controls the default subscription settings of new members that are added to the Microsoft 365 Group. Changing this setting doesn''t affect existing group members.' ExtensionCustomAttribute3 = 'String | Optional | This parameter specifies a value for the ExtensionCustomAttribute3 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. You can specify up to 1300 values separated by commas.' SubscriptionEnabled = 'Boolean | Optional | The SubscriptionEnabled switch specifies whether the group owners can enable subscription to conversations and calendar events on the groups they own. ' AccessType = 'String | Optional | Private | Public / Private' CustomAttribute3 = 'String | Optional | This parameter specifies a value for the CustomAttribute3 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' CustomAttribute14 = 'String | Optional | This parameter specifies a value for the CustomAttribute14 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' MailTip = 'String | Optional | The MailTip parameter specifies the custom MailTip text for this recipient. The MailTip is shown to senders when they start drafting an email message to this recipient. ' AlwaysSubscribeMembersToCalendarEvents = 'Boolean | Optional | The AlwaysSubscribeMembersToCalendarEvents switch controls the default subscription settings of new members that are added to the Microsoft 365 Group. Changing this setting doesn''t affect existing group members.' CustomAttribute15 = 'String | Optional | This parameter specifies a value for the CustomAttribute15 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' CustomAttribute7 = 'String | Optional | This parameter specifies a value for the CustomAttribute7 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' Id = 'String | Optional | The unique Id of the group' AcceptMessagesOnlyFromSendersOrMembers = @( 'String | Optional | The AcceptMessagesOnlyFromSendersOrMembers parameter specifies who is allowed to send messages to this recipient. Messages from other senders are rejected.' ) ExtensionCustomAttribute1 = 'String | Optional | This parameter specifies a value for the ExtensionCustomAttribute1 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. You can specify up to 1300 values separated by commas.' Notes = 'String | Optional | The Notes parameter specifies the description of the Microsoft 365 Group. If the value contains spaces, enclose the value in quotation marks.' ExtensionCustomAttribute5 = 'String | Optional | This parameter specifies a value for the ExtensionCustomAttribute5 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. You can specify up to 1300 values separated by commas.' CustomAttribute4 = 'String | Optional | This parameter specifies a value for the CustomAttribute4 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' CustomAttribute5 = 'String | Optional | This parameter specifies a value for the CustomAttribute5 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' ConnectorsEnabled = 'Boolean | Optional | The CalendarMemberReadOnly switch specifies whether to set read-only Calendar permissions to the Microsoft 365 Group for members of the group.' CustomAttribute9 = 'String | Optional | This parameter specifies a value for the CustomAttribute9 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' GrantSendOnBehalfTo = @( 'String | Optional | The GrantSendOnBehalfTo parameter specifies who can send on behalf of this Microsoft 365 Group.' ) AutoSubscribeNewMembers = 'Boolean | Optional | The AutoSubscribeNewMembers switch specifies whether to automatically subscribe new members that are added to the Microsoft 365 Group to conversations and calendar events. Only users that are added to the group after you enable this setting are automatically subscribed to the group.' PrimarySmtpAddress = 'String | Optional | The PrimarySmtpAddress parameter specifies the primary return email address that''s used for the recipient. You can''t use the EmailAddresses and PrimarySmtpAddress parameters in the same command.' IsMemberAllowedToEditContent = 'Boolean | Optional | This parameter specifies whether or not members are allow to edit content.' Language = 'String | Optional | The Language parameter specifies language preference for the Microsoft 365 Group.' CustomAttribute11 = 'String | Optional | This parameter specifies a value for the CustomAttribute11 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' EmailAddresses = @( 'String | Optional | The EmailAddresses parameter specifies all the email addresses (proxy addresses) for the recipient, including the primary SMTP address.' ) SensitivityLabelId = 'String | Optional | The SensitivityLabelId parameter specifies the GUID value of the sensitivity label that''s assigned to the Microsoft 365 Group.' HiddenFromExchangeClientsEnabled = 'Boolean | Optional | The HiddenFromExchangeClientsEnabled switch specifies whether the Microsoft 365 Group is hidden from Outlook clients connected to Microsoft 365.' CustomAttribute12 = 'String | Optional | This parameter specifies a value for the CustomAttribute12 property on the recipient. You can use this property to store custom information about the recipient, and to identify the recipient in filters. The maximum length is 1024 characters.' } ) HostedConnectionFilterPolicies = @( @{ IPAllowList = @( 'String | Optional | The IPAllowList parameter specifies IP addresses from which messages are always allowed. Messages from the IP addresses you specify won''t be identified as spam, despite any other spam characteristics of the messages. Valid values for this parameter are: A single IP address, an IP address range, a CIDR IP.' ) EnableSafeList = 'Boolean | Optional | The EnableSafeList parameter enables or disables use of the safe list. The safe list is a dynamic allow list in the Microsoft datacenter that requires no customer configuration. Valid input for this parameter is $true or $false. The default value is $false.' Ensure = 'String | Optional | Specifies if this Hosted Connection Filter Policy should exist. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MakeDefault = 'Boolean | Optional | The MakeDefault parameter makes the specified policy the default connection filter policy. Default is $false.' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' Identity = 'String | Required | The Identity parameter specifies the Hosted Connection Filter Policy that you want to modify.' IPBlockList = @( 'String | Optional | The IPBlockList parameter specifies IP addresses from which messages are never allowed. Messages from the IP addresses you specify are blocked without any further spam scanning. Valid values for this parameter are: A single IP address, an IP address range, a CIDR IP.' ) } ) HostedContentFilterPolicies = @( @{ HighConfidenceSpamAction = 'String | Optional | The HighConfidenceSpamAction parameter specifies the action to take on messages that are classified as high confidence spam. | MoveToJmf / AddXHeader / ModifySubject / Redirect / Delete / Quarantine / NoAction' MakeDefault = 'Boolean | Optional | The MakeDefault parameter makes the specified content filter policy the default content filter policy. The default value is $false' TestModeBccToRecipients = @( 'String | Optional | The TestModeBccToRecipients parameter specifies the blind carbon copy recipients to add to spam messages when the TestModeAction action parameter is set to the value BccMessage.' ) MarkAsSpamWebBugsInHtml = 'String | Optional | The MarkAsSpamWebBugsInHtml parameter classifies the message as spam when the message contains web bugs. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' MarkAsSpamFramesInHtml = 'String | Optional | The MarkAsSpamFramesInHtml parameter classifies the message as spam when the message contains HTML <frame> or <iframe> tags. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' Identity = 'String | Required | The Identity parameter specifies the name of the Hosted Content Filter Policy that you want to modify.' EndUserSpamNotificationLanguage = 'String | Optional | The EndUserSpamNotificationLanguage parameter specifies the language of end-user spam notification messages. The default value is Default. This means the default language of end-user spam notification messages is the default language of the cloud-based organization. | Default / English / French / German / Italian / Japanese / Spanish / Korean / Portuguese / Russian / ChineseSimplified / ChineseTraditional / Amharic / Arabic / Bulgarian / BengaliIndia / Catalan / Czech / Cyrillic / Danish / Greek / Estonian / Basque / Farsi / Finnish / Filipino / Galician / Gujarati / Hebrew / Hindi / Croatian / Hungarian / Indonesian / Icelandic / Kazakh / Kannada / Lithuanian / Latvian / Malayalam / Marathi / Malay / Dutch / NorwegianNynorsk / Norwegian / Oriya / Polish / PortuguesePortugal / Romanian / Slovak / Slovenian / SerbianCyrillic / Serbian / Swedish / Swahili / Tamil / Telugu / Thai / Turkish / Ukrainian / Urdu / Vietnamese' MarkAsSpamEmbedTagsInHtml = 'String | Optional | The MarkAsSpamEmbedTagsInHtml parameter classifies the message as spam when the message contains HTML <embed> tags. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' BulkThreshold = 'UInt32 | Optional | The BulkThreshold parameter specifies the Bulk Complaint Level (BCL) threshold setting. Valid values are from 1 - 9, where 1 marks most bulk email as spam, and 9 allows the most bulk email to be delivered. The default value is 7.' EnableLanguageBlockList = 'Boolean | Optional | The EnableLanguageBlockList parameter enables or disables blocking email messages that are written in specific languages, regardless of the message contents. Valid input for this parameter is $true or $false. The default value is $false.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) HighConfidenceSpamQuarantineTag = 'String | Optional | The HighConfidenceSpamQuarantineTag parameter specifies the quarantine policy that''s used on messages that are quarantined as high confidence spam.' PhishZapEnabled = 'Boolean | Optional | The PhishZapEnabled parameter enables or disables zero-hour auto purge (ZAP) to detect phishing messages in delivered messages in Exchange Online mailboxes.' EndUserSpamNotificationCustomSubject = 'String | Optional | The EndUserSpamNotificationCustomSubject parameter specifies a custom subject for end-user spam notification messages.' MarkAsSpamSensitiveWordList = 'String | Optional | The MarkAsSpamSensitiveWordList parameter classifies the message as spam when the message contains words from the sensitive words list. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' MarkAsSpamFormTagsInHtml = 'String | Optional | The MarkAsSpamFormTagsInHtml parameter classifies the message as spam when the message contains HTML <form> tags. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' SpamZapEnabled = 'Boolean | Optional | The SpamZapEnabled parameter enables or disables zero-hour auto purge (ZAP) to detect spam in delivered messages in Exchange Online mailboxes.' MarkAsSpamJavaScriptInHtml = 'String | Optional | The MarkAsSpamJavaScriptInHtml parameter classifies the message as spam when the message contains JavaScript or VBScript. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' BulkSpamAction = 'String | Optional | The BulkSpamAction parameter specifies the action to take on messages that are classified as bulk email. | MoveToJmf / AddXHeader / ModifySubject / Redirect / Delete / Quarantine / NoAction' BlockedSenders = @( 'String | Optional | The BlockedSenders parameter specifies senders that are always marked as spam sources.' ) IncreaseScoreWithImageLinks = 'String | Optional | The IncreaseScoreWithImageLinks parameter increases the spam score of messages that contain image links to remote websites. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' AddXHeaderValue = 'String | Optional | The AddXHeaderValue parameter specifies the X-header value to add to spam messages when an action parameter is set to the value AddXHeader.' MarkAsSpamNdrBackscatter = 'String | Optional | The MarkAsSpamNdrBackscatter parameter classifies the message as spam when the message is a non-delivery report (NDR) to a forged sender. Valid values for this parameter are Off or On. The default value is Off. | Off / On / Test' QuarantineRetentionPeriod = 'UInt32 | Optional | The QuarantineRetentionPeriod parameter specifies the length of time in days that spam messages remain in the quarantine. Valid input for this parameter is an integer between 1 and 30. The default value is 15.' InlineSafetyTipsEnabled = 'Boolean | Optional | The InlineSafetyTipsEnabled parameter specifies whether to enable or disable safety tips that are shown to recipients in messages. The default is $true' PhishSpamAction = 'String | Optional | The PhishSpamAction parameter specifies the action to take on messages that are classified as phishing | MoveToJmf / AddXHeader / ModifySubject / Redirect / Delete / Quarantine / NoAction' HighConfidencePhishAction = 'String | Optional | The HighConfidencePhishAction parameter specifies the action to take on messages that are marked as high confidence phishing | MoveToJmf / Redirect / Quarantine' EnableRegionBlockList = 'Boolean | Optional | The EnableRegionBlockList parameter enables or disables blocking email messages that are sent from specific countries or regions, regardless of the message contents. Valid input for this parameter is $true or $false. The default value is $false.' MarkAsSpamObjectTagsInHtml = 'String | Optional | The MarkAsSpamObjectTagsInHtml parameter classifies the message as spam when the message contains HTML <object> tags. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' IncreaseScoreWithRedirectToOtherPort = 'String | Optional | The IncreaseScoreWithRedirectToOtherPort parameter increases the spam score of messages that contain links that redirect to other TCP ports. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' AllowedSenderDomains = @( 'String | Optional | The AllowedSenderDomains parameter specifies trusted domains that aren''t processed by the spam filter.' ) TestModeAction = 'String | Optional | The TestModeAction parameter specifies the additional action to take on messages that match any of the IncreaseScoreWith or MarkAsSpam parameters that are set to the value Test. | None / AddXHeader / BccMessage' MarkAsSpamSpfRecordHardFail = 'String | Optional | The MarkAsSpamSpfRecordHardFail parameter classifies the message as spam when Sender Policy Framework (SPF) record checking encounters a hard fail. Valid values for this parameter are Off or On. The default value is Off. | Off / On / Test' ModifySubjectValue = 'String | Optional | The ModifySubjectValue parameter specifies the text to prepend to the existing subject of spam messages when an action parameter is set to the value ModifySubject.' EnableEndUserSpamNotifications = 'Boolean | Optional | The EnableEndUserSpamNotification parameter enables for disables sending end-user spam quarantine notification messages. Valid input for this parameter is $true or $false. The default value is $false.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' MarkAsSpamEmptyMessages = 'String | Optional | The MarkAsSpamEmptyMessages parameter classifies the message as spam when the message is empty. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' PhishQuarantineTag = 'String | Optional | The PhishQuarantineTag parameter specifies the quarantine policy that''s used on messages that are quarantined as phishing.' SpamAction = 'String | Optional | The SpamAction parameter specifies the action to take on messages that are classified as spam (not high confidence spam, bulk email, or phishing). | MoveToJmf / AddXHeader / ModifySubject / Redirect / Delete / Quarantine / NoAction' MarkAsSpamBulkMail = 'String | Optional | The MarkAsSpamBulkMail parameter classifies the message as spam when the message is identified as a bulk email message. Valid values for this parameter are Off, On or Test. The default value is On. | Off / On / Test' LanguageBlockList = @( 'String | Optional | The LanguageBlockList parameter specifies the languages to block when messages are blocked based on their language. Valid input for this parameter is a supported ISO 639-1 lowercase two-letter language code. You can specify multiple values separated by commas. This parameter is only use when the EnableRegionBlockList parameter is set to $true.' ) BulkQuarantineTag = 'String | Optional | The BulkQuarantineTag parameter specifies the quarantine policy that''s used on messages that are quarantined as bulk email.' RedirectToRecipients = @( 'String | Optional | The RedirectToRecipients parameter specifies the replacement recipients in spam messages when an action parameter is set to the value Redirect. The action parameters that use the value of RedirectToRecipients are BulkSpamAction, HighConfidencePhishAction, HighConfidenceSpamAction, PhishSpamAction and SpamAction.' ) AllowedSenders = @( 'String | Optional | The AllowedSenders parameter specifies a list of trusted senders that aren''t processed by the spam filter.' ) IncreaseScoreWithNumericIps = 'String | Optional | The IncreaseScoreWithNumericIps parameter increases the spam score of messages that contain links to IP addresses. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' RegionBlockList = @( 'String | Optional | The RegionBlockList parameter specifies the region to block when messages are blocked based on their source region. Valid input for this parameter is a supported ISO 3166-1 uppercase two-letter country code. You can specify multiple values separated by commas. This parameter is only used when the EnableRegionBlockList parameter is set to $true.' ) HighConfidencePhishQuarantineTag = 'String | Optional | The HighConfidencePhishQuarantineTag parameter specifies the quarantine policy that''s used on messages that are quarantined as high confidence phishing.' SpamQuarantineTag = 'String | Optional | The SpamQuarantineTag parameter specifies the quarantine policy that''s used on messages that are quarantined as spam.' IntraOrgFilterState = 'String | Optional | The IntraOrgFilterState parameter specifies whether to enable anti-spam filtering for messages sent between internal users (users in the same organization). | Default / HighConfidencePhish / Phish / HighConfidenceSpam / Spam / Disabled' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' IncreaseScoreWithBizOrInfoUrls = 'String | Optional | The IncreaseScoreWithBizOrInfoUrls parameter increases the spam score of messages that contain links to .biz or .info domains. Valid values for this parameter are Off, On or Test. The default value is Off. | Off / On / Test' EndUserSpamNotificationFrequency = 'UInt32 | Optional | The EndUserSpamNotificationFrequency parameter specifies the repeat interval in days that end-user spam notification messages are sent. Valid input for this parameter is an integer between 1 and 15. The default value is 3.' MarkAsSpamFromAddressAuthFail = 'String | Optional | The MarkAsSpamFromAddressAuthFail parameter classifies the message as spam when Sender ID filtering encounters a hard fail. Valid values for this parameter are Off or On. The default value is Off. | Off / On / Test' BlockedSenderDomains = @( 'String | Optional | The BlockedSenderDomains parameter specifies domains that are always marked as spam sources.' ) DownloadLink = 'Boolean | Optional | The DownloadLink parameter shows or hides a link in end-user spam notification messages to download the Junk Email Reporting Tool plugin for Outlook. Valid input for this parameter is $true or $false. The default value is $false.' } ) HostedContentFilterRules = @( @{ Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) HostedContentFilterPolicy = 'String | Required | The HostedContentFilterPolicy parameter specifies the name of the HostedContentFilter policy that''s associated with the HostedContentFilter rule.' SentTo = @( 'String | Optional | The SentTo parameter specifies a condition that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) Identity = 'String | Required | The Identity parameter specifies the name of the HostedContentFilter rule that you want to modify.' ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) Enabled = 'Boolean | Optional | Specify if this rule should be enabled. Default is $true.' } ) HostedOutboundSpamFilterPolicies = @( @{ AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) BccSuspiciousOutboundAdditionalRecipients = @( 'String | Optional | The BccSuspiciousOutboundAdditionalRecipients parameter specifies the recipients to add to the Bcc field of outgoing spam messages. Valid input for this parameter is an email address. Separate multiple email addresses with commas.' ) NotifyOutboundSpamRecipients = @( 'String | Optional | The NotifyOutboundSpamRecipients parameter specifies the administrators to notify when an outgoing message is determined to be spam. Valid input for this parameter is an email address. Separate multiple email addresses with commas.' ) RecipientLimitInternalPerHour = 'UInt32 | Optional | The RecipientLimitInternalPerHour parameter specifies the maximum number of internal recipients that a user can send to within an hour. A valid value is 0 to 10000. The default value is 0, which means the service defaults are used.' RecipientLimitPerDay = 'UInt32 | Optional | The RecipientLimitPerDay parameter specifies the maximum number of recipients that a user can send to within a day. A valid value is 0 to 10000. The default value is 0, which means the service defaults are used.' ActionWhenThresholdReached = 'String | Optional | The ActionWhenThresholdReached parameter specifies the action to take when any of the limits specified in the policy are reached. Valid values are: Alert, BlockUser, BlockUserForToday. BlockUserForToday is the default value.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' Identity = 'String | Required | The Identity parameter specifies the name of the policy that you want to modify. There is only one policy named ''Default''' RecipientLimitExternalPerHour = 'UInt32 | Optional | The RecipientLimitExternalPerHour parameter specifies the maximum number of external recipients that a user can send to within an hour. A valid value is 0 to 10000. The default value is 0, which means the service defaults are used.' AutoForwardingMode = 'String | Optional | The AutoForwardingMode specifies how the policy controls automatic email forwarding to outbound recipients. Valid values are: Automatic, On, Off.' NotifyOutboundSpam = 'Boolean | Optional | The NotifyOutboundSpam parameter enables or disables sending notification messages to administrators when an outgoing message is determined to be spam. Valid input for this parameter is $true or $false. The default value is $false. You specify the administrators to notify by using the NotifyOutboundSpamRecipients parameter.' BccSuspiciousOutboundMail = 'Boolean | Optional | The BccSuspiciousOutboundMail parameter enables or disables adding recipients to the Bcc field of outgoing spam messages. Valid input for this parameter is $true or $false. The default value is $false. You specify the additional recipients using the BccSuspiciousOutboundAdditionalRecipients parameter.' } ) HostedOutboundSpamFilterRules = @( @{ ExceptIfFrom = @( 'String | Optional | The ExceptIfFrom parameter specifies an exception that looks for messages from specific senders. You can use any value that uniquely identifies the sender.' ) Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ExceptIfSenderDomainIs = @( 'String | Optional | The ExceptIfSenderDomainIs parameter specifies an exception that looks for senders with email address in the specified domains. You can specify multiple domains separated by commas.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' FromMemberOf = @( 'String | Optional | The FromMemberOf parameter specifies a condition that looks for messages sent by group members. You can use any value that uniquely identifies the group.' ) Identity = 'String | Required | The Identity parameter specifies the name of the HostedOutboundSpamFilter rule that you want to modify.' SenderDomainIs = @( 'String | Optional | The SenderDomainIs parameter specifies a condition that looks for senders with email address in the specified domains. You can specify multiple domains separated by commas.' ) HostedOutboundSpamFilterPolicy = 'String | Required | The HostedOutboundSpamFilterPolicy parameter specifies the name of the HostedOutboundSpamFilter policy that''s associated with the HostedOutboundSpamFilter rule.' ExceptIfFromMemberOf = @( 'String | Optional | The ExceptIfFromMemberOf parameter specifies an exception that looks for messages sent by group members. You can use any value that uniquely identifies the group.' ) From = @( 'String | Optional | The From parameter specifies a condition that looks for messages from specific senders. You can use any value that uniquely identifies the sender.' ) Enabled = 'Boolean | Optional | Specify if this rule should be enabled. Default is $true.' } ) InboundConnectors = @( @{ RestrictDomainsToCertificate = 'Boolean | Optional | The RestrictDomainsToCertificate parameter specifies that Office 365 should identify incoming messages that are eligible for this connector by verifying that the remote server authenticates using a TLS certificate that has the TlsSenderCertificateName in the Subject.' ConnectorSource = 'String | Optional | The ConnectorSource parameter specifies how the connector is created. DO NOT CHANGE THIS! | Default / Migrated / HybridWizard' TreatMessagesAsInternal = 'Boolean | Optional | The TreatMessagesAsInternal parameter specifies an alternative method to identify messages sent from an on-premises organization as internal messages. You should only consider using this parameter when your on-premises organization doesn''t use Exchange.' Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TlsSenderCertificateName = 'String | Optional | The TlsSenderCertificateName parameter specifies the certificate used by the sender''s domain when the RequireTls parameter is set to $true. Valid input for the TlsSenderCertificateName parameter is an SMTP domain. ' ConnectorType = 'String | Optional | The ConnectorType parameter specifies a category for the domains that are serviced by the connector. Valid values are Partner and OnPremises | Partner / OnPremises' CloudServicesMailEnabled = 'Boolean | Optional | The CloudServicesMailEnabled parameter specifies whether the connector is used for hybrid mail flow between an on-premises Exchange environment and Microsoft Office 365. Specifically, this parameter controls how certain internal X-MS-Exchange-Organization-* message headers are handled in messages that are sent between accepted domains in the on-premises and cloud organizations. These headers are collectively known as cross-premises headers. DO NOT USE MANUALLY!' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' RestrictDomainsToIPAddresses = 'Boolean | Optional | The RestrictDomainsToIPAddresses parameter, when set to $true, automatically rejects mail from the domains specified by the SenderDomains parameter if the mail originates from an IP address that isn''t specified by the SenderIPAddresses parameter.' SenderDomains = @( 'String | Optional | The SenderDomains parameter specifies the remote domains from which this connector accepts messages, thereby limiting its scope. You can use a wildcard character to specify all subdomains of a specified domain, as shown in the following example: *.contoso.com. However, you can''t embed a wildcard character, as shown in the following example: domain.*.contoso.com.' ) EFSkipLastIP = 'Boolean | Optional | The EFSkipLastIP parameter specifies the behavior of Enhanced Filtering for Connectors.' EFUsers = @( 'String | Optional | The EFUsers parameter specifies the recipients that Enhanced Filtering for Connectors applies to.' ) Identity = 'String | Required | The Identity parameter specifies the outbound connector that you want to modify.' AssociatedAcceptedDomains = @( 'String | Optional | The AssociatedAcceptedDomains parameter specifies the accepted domains that the connector applies to, thereby limiting its scope. For example, you can apply the connector to a specific accepted domain in your organization, such as contoso.com.' ) EFSkipIPs = @( 'String | Optional | The EFSkipIPs parameter specifies the source IP addresses to skip in Enhanced Filtering for Connectors when the EFSkipLastIP parameter value is $false.' ) RequireTls = 'Boolean | Optional | The RequireTLS parameter specifies that all messages received by this connector require TLS transmission. Valid values for this parameter are $true or $false. The default value is $false. When the RequireTLS parameter is set to $true, all messages received by this connector require TLS transmission.' SenderIPAddresses = @( 'String | Optional | The SenderIPAddresses parameter specifies the remote IP addresses from which this connector accepts messages.' ) Enabled = 'Boolean | Optional | Specifies whether connector is enabled.' } ) IntraOrganizationConnectors = @( @{ TargetSharingEpr = 'String | Optional | The TargetSharingEpr parameter specifies the URL of the target Exchange Web Services that will be used in the Intra-Organization connector.' Enabled = 'Boolean | Optional | Specifies whether connector is enabled.' DiscoveryEndpoint = 'String | Optional | The DiscoveryEndpoint parameter specifies the externally-accessible URL that''s used for the Autodiscover service for the domain that''s configured in the Intra-Organization connector.' Ensure = 'String | Optional | Specifies if this Intra-Organization connector should exist. | Present / Absent' TargetAddressDomains = @( 'String | Optional | The TargetAddressDomains parameter specifies the domain namespaces that will be used in the Intra-organization connector. These domains must have valid Autodiscover endpoints defined in their organizations. The domains and their associated Autodiscover endpoints are used by the Intra-Organization connector for feature and service connectivity. You can specify multiple domains separated by commas.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the intraorg connector that you want to modify.' } ) IRMConfiguration = @{ SimplifiedClientAccessEncryptOnlyDisabled = 'Boolean | Optional | The SimplifiedClientAccessEncryptOnlyDisabled parameter specifies whether to disable Encrypt only in Outlook on the web. ' TransportDecryptionSetting = 'String | Optional | The TransportDecryptionSetting parameter specifies the transport decryption configuration. | Disabled / Mandatory / Optional' SimplifiedClientAccessEnabled = 'Boolean | Optional | The SimplifiedClientAccessEnabled parameter specifies whether to enable the Protect button in Outlook on the web.' SearchEnabled = 'Boolean | Optional | The SearchEnabled parameter specifies whether to enable searching of IRM-encrypted messages in Outlook on the web (formerly known as Outlook Web App).' SimplifiedClientAccessDoNotForwardDisabled = 'Boolean | Optional | The SimplifiedClientAccessDoNotForwardDisabled parameter specifies whether to disable Do not forward in Outlook on the web.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' RMSOnlineKeySharingLocation = 'String | Optional | The RMSOnlineKeySharingLocation parameter specifies the Azure Rights Management URL that''s used to get the trusted publishing domain (TPD) for the Exchange Online organization.' DecryptAttachmentForEncryptOnly = 'Boolean | Optional | The DecryptAttachmentForEncryptOnly parameter specifies whether mail recipients have unrestricted rights on the attachment or not for Encrypt-only mails sent using Microsoft Purview Message Encryption.' EDiscoverySuperUserEnabled = 'Boolean | Optional | The EDiscoverySuperUserEnabled parameter specifies whether members of the Discovery Management role group can access IRM-protected messages in a discovery mailbox that were returned by a discovery search.' AzureRMSLicensingEnabled = 'Boolean | Optional | The AzureRMSLicensingEnabled parameter specifies whether the Exchange Online organization can to connect directly to Azure Rights Management.' AutomaticServiceUpdateEnabled = 'Boolean | Optional | The AutomaticServiceUpdateEnabled parameter specifies whether to allow the automatic addition of new features within Azure Information Protection for your cloud-based organization.' LicensingLocation = @( 'String | Optional | The LicensingLocation parameter specifies the RMS licensing URLs. You can specify multiple URL values separated by commas.' ) RejectIfRecipientHasNoRights = 'Boolean | Optional | This parameter is available only in the cloud-based service.' JournalReportDecryptionEnabled = 'Boolean | Optional | The JournalReportDecryptionEnabled parameter specifies whether to enable journal report decryption.' EnablePdfEncryption = 'Boolean | Optional | The EnablePdfEncryption parameter specifies whether to enable the encryption of PDF attachments using Microsoft Purview Message Encryption. ' InternalLicensingEnabled = 'Boolean | Optional | The InternalLicensingEnabled parameter specifies whether to enable IRM features for messages that are sent to internal and external recipients.' } JournalRules = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' JournalEmailAddress = 'String | Required | The JournalEmailAddress parameter specifies a recipient object to which journal reports are sent. You can use any value that uniquely identifies the recipient.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Recipient = 'String | Optional | The Recipient parameter specifies the SMTP address of a mailbox, contact, or distribution group to journal. If you specify a distribution group, all recipients in that distribution group are journaled. All messages sent to or from a recipient are journaled.' Ensure = 'String | Optional | Present ensures the rule exists, Absent that it does not. | Present / Absent' Name = 'String | Required | Name of the Journal Rule' RuleScope = 'String | Optional | The Scope parameter specifies the scope of email messages to which the journal rule is applied | Global / Internal / External' Enabled = 'Boolean | Optional | Specifies whether the Journal Rule is enabled or not.' } ) MailboxAuditBypassAssociations = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AuditBypassEnabled = 'Boolean | Optional | The AuditBypassEnabled parameter specifies whether audit bypass is enabled for the user or computer.' Identity = 'String | Required | The Identity parameter specifies the user account or computer account where you want to view the value of the AuditBypassEnabled property.' } ) MailboxAutoReplyConfigurations = @( @{ ExternalMessage = 'String | Optional | The ExternalMessage parameter specifies the Automatic Replies message that''s sent to external senders or senders outside the organization. If the value contains spaces, enclose the value in quotation marks.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AutoDeclineFutureRequestsWhenOOF = 'Boolean | Optional | The AutoDeclineFutureRequestsWhenOOF parameter specifies whether to automatically decline new meeting requests that are sent to the mailbox during the scheduled time period when Automatic Replies are being sent. ' ExternalAudience = 'String | Optional | The ExternalAudience parameter specifies whether Automatic Replies are sent to external senders. Valid values are: None, Known, All | None / Known / All' OOFEventSubject = 'String | Optional | The OOFEventSubject parameter specifies the subject for the calendar event that''s automatically created when the CreateOOFEvent parameter is set to $true.' StartTime = 'String | Optional | The StartTime parameter specifies the start date and time that Automatic Replies are sent for the specified mailbox. You use this parameter only when the AutoReplyState parameter is set to Scheduled, and the value of this parameter is meaningful only when AutoReplyState is Scheduled.' CreateOOFEvent = 'Boolean | Optional | The CreateOOFEvent parameter specifies whether to create a calendar event that corresponds to the scheduled time period when Automatic Replies are being sent for the mailbox.' Ensure = 'String | Optional | Represents the existance of the instance. This must be set to ''Present'' | Present' Owner = 'String | Optional | User Principal Name of the mailbox owner' Identity = 'String | Required | The Identity parameter specifies the mailbox that you want to modify. You can use any value that uniquely identifies the mailbox.' EventsToDeleteIDs = @( 'String | Optional | The EventsToDeleteIDs parameter specifies the calendar events to delete from the mailbox when the DeclineEventsForScheduledOOF parameter is set to $true.' ) DeclineAllEventsForScheduledOOF = 'Boolean | Optional | The DeclineAllEventsForScheduledOOF parameter specifies whether to decline all existing calendar events in the mailbox during the scheduled time period when Automatic Replies are being sent.' DeclineMeetingMessage = 'String | Optional | The DeclineMeetingMessage parameter specifies the text in the message when meetings requests that are sent to the mailbox are automatically declined.' AutoReplyState = 'String | Optional | The AutoReplyState parameter specifies whether the mailbox is enabled for Automatic Replies. Valid values are: Enabled, Disabled, Scheduled | Enabled / Disabled / Scheduled' InternalMessage = 'String | Optional | The InternalMessage parameter specifies the Automatic Replies message that''s sent to internal senders or senders within the organization. If the value contains spaces, enclose the value in quotation marks.' EndTime = 'String | Optional | The EndTime parameter specifies the end date and time that Automatic Replies are sent for the mailbox. You use this parameter only when the AutoReplyState parameter is set to Scheduled, and the value of this parameter is meaningful only when AutoReplyState is Scheduled.' DeclineEventsForScheduledOOF = 'Boolean | Optional | The DeclineEventsForScheduledOOF parameter specifies whether it''s possible to decline existing calendar events in the mailbox during the scheduled time period when Automatic Replies are being sent. ' } ) MailboxCalendarConfigurations = @( @{ WeatherLocationBookmark = 'UInt32 | Optional | Specifies the weather location bookmark.' WorkspaceUserEnabled = 'Boolean | Optional | Enables or disables workspace user.' ConversationalSchedulingEnabled = 'Boolean | Optional | Enables or disables conversational scheduling.' HotelEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables hotel events from email.' DeleteMeetingRequestOnRespond = 'Boolean | Optional | Deletes meeting request on respond.' DiningEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables dining events from email.' Identity = 'String | Required | Specifies the mailbox identity.' MailboxLocation = 'String | Optional | Specifies the mailbox location.' CalendarFeedsPreferredLanguage = 'String | Optional | Preferred language for calendar feeds.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PackageDeliveryEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables package delivery events from email.' RentalCarEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables rental car events from email.' ReminderSoundEnabled = 'Boolean | Optional | Enables or disables reminder sound.' WorkingHoursEndTime = 'String | Optional | Specifies the end time of working hours.' ShortenEventScopeDefault = 'String | Optional | Specifies the default scope for shortening events.' AgendaMailIntroductionEnabled = 'Boolean | Optional | Enables or disables agenda mail introduction.' InvoiceEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables invoice events from email.' UseBrightCalendarColorThemeInOwa = 'Boolean | Optional | Uses a bright calendar color theme in Outlook on the web.' OnlineMeetingsByDefaultEnabled = 'Boolean | Optional | Enables or disables online meetings by default.' LocationDetailsInFreeBusy = 'String | Optional | Specifies location details in free/busy information.' CalendarFeedsPreferredRegion = 'String | Optional | Preferred region for calendar feeds.' ServiceAppointmentEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables service appointment events from email.' ShowWeekNumbers = 'Boolean | Optional | Shows or hides week numbers.' RemindersEnabled = 'Boolean | Optional | Enables or disables reminders.' WeekStartDay = 'String | Optional | Specifies the start day of the week.' FirstWeekOfYear = 'String | Optional | Specifies the first week of the year.' DefaultReminderTime = 'String | Optional | Default reminder time.' DefaultOnlineMeetingProvider = 'String | Optional | Default online meeting provider.' WorkingHoursStartTime = 'String | Optional | Specifies the start time of working hours.' CalendarFeedsRootPageId = 'String | Optional | Root page ID for calendar feeds.' CreateEventsFromEmailAsPrivate = 'Boolean | Optional | Creates events from email as private.' Ensure = 'String | Optional | Ensures the presence or absence of the configuration.' DefaultMinutesToReduceLongEventsBy = 'UInt32 | Optional | Default minutes to reduce long events by.' TimeIncrement = 'String | Optional | Specifies the time increment for calendar events.' WeatherLocations = @( 'String | Optional | Specifies the weather locations.' ) DefaultMinutesToReduceShortEventsBy = 'UInt32 | Optional | Default minutes to reduce short events by.' AutoDeclineWhenBusy = 'Boolean | Optional | Automatically declines meeting requests when the user is busy.' WeatherUnit = 'String | Optional | Specifies the weather unit.' WorkingHoursTimeZone = 'String | Optional | Specifies the time zone for working hours.' FlightEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables flight events from email.' EntertainmentEventsFromEmailEnabled = 'Boolean | Optional | Enables or disables entertainment events from email.' PreserveDeclinedMeetings = 'Boolean | Optional | Preserves declined meetings.' EventsFromEmailEnabled = 'Boolean | Optional | Enables or disables events from email.' WorkDays = 'String | Optional | Specifies the work days.' WeatherEnabled = 'String | Optional | Enables or disables weather information.' } ) MailboxCalendarFolders = @( @{ DetailLevel = 'String | Optional | The DetailLevel parameter specifies the level of calendar detail that''s published and available to anonymous users. | AvailabilityOnly / LimitedDetails / FullDetails' Ensure = 'String | Optional | Determines wether or not the instance exist. | Present' PublishDateRangeTo = 'String | Optional | The PublishDateRangeTo parameter specifies the end date of calendar information to publish (future information). | OneDay / ThreeDays / OneWeek / OneMonth / ThreeMonths / SixMonths / OneYear' SharedCalendarSyncStartDate = 'String | Optional | The SharedCalendarSyncStartDate parameter specifies the limit for past events in the shared calendar that are visible to delegates. A copy of the shared calendar within the specified date range is stored in the delegate''s mailbox.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the calendar folder that you want to modify.' SearchableUrlEnabled = 'Boolean | Optional | The SearchableUrlEnabled parameter specifies whether the published calendar URL is discoverable on the web.' PublishDateRangeFrom = 'String | Optional | The PublishDateRangeFrom parameter specifies the start date of calendar information to publish (past information). | OneDay / ThreeDays / OneWeek / OneMonth / ThreeMonths / SixMonths / OneYear' PublishEnabled = 'Boolean | Optional | The PublishEnabled parameter specifies whether to publish the specified calendar information.' } ) MailboxFolderPermissions = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Determines wheter or not the permission should exist on the mailbox. | Present' UserPermissions = @( @{ AccessRights = @( 'String | Optional | The AccessRights parameter specifies the permissions that you want to add for the user on the mailbox folder.' ) User = 'String | Optional | The User parameter specifies who gets the permissions on the mailbox folder.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SharingPermissionFlags = 'String | Optional | The SharingPermissionFlags parameter assigns calendar delegate permissions. This parameter only applies to calendar folders and can only be used when the AccessRights parameter value is Editor. Valid values are: None, Delegate, CanViewPrivateItems' } ) Identity = 'String | Required | The Identity parameter specifies the target mailbox and folder. The syntax is MailboxID:\ParentFolder[\SubFolder]. For the MailboxID you can use any value that uniquely identifies the mailbox.' } ) MailboxIRMAccesss = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AccessLevel = 'String | Optional | The AccessLevel parameter specifies what delegates can do to IRM-protected messages in the mailbox that''s specified by the Identity parameter. | Block' User = 'String | Required | The User parameter specifies the delegate who is blocked from reading IRM-protected messages in the mailbox.' Ensure = 'String | Optional | Present ensures the resource exists, absent ensures it is removed | Present / Absent' Identity = 'String | Required | The Identity parameter specifies the mailbox that you want to modify' } ) MailboxPermissions = @( @{ Deny = 'Boolean | Optional | The Deny switch specifies that the permissions you''re adding are Deny permissions.' Ensure = 'String | Optional | Determines wheter or not the permission should exist on the mailbox. | Present' AccessRights = @( 'String | Required | The AccessRights parameter specifies the permission that you want to add for the user on the mailbox. Valid values are: ChangeOwner, ChangePermission, DeleteItem, ExternalAccount, FullAccess and ReadPermission.' ) Owner = 'String | Optional | The Owner parameter specifies the owner of the mailbox object.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the mailbox where you want to assign permissions to the user. You can use any value that uniquely identifies the mailbox.' InheritanceType = 'String | Required | The InheritanceType parameter specifies how permissions are inherited by folders in the mailbox. Valid values are: None, All, Children, Descendents, SelfAndChildren. | None / All / Children / Descendents / SelfAndChildren' User = 'String | Required | The User parameter specifies who gets the permissions on the mailbox.' } ) MailboxPlans = @( @{ RoleAssignmentPolicy = 'String | Optional | The RoleAssignmentPolicy parameter specifies the role assignment policy that''s applied to the mailbox.' ProhibitSendReceiveQuota = 'String | Optional | The ProhibitSendReceiveQuota parameter specifies a size limit for the mailbox.' DisplayName = 'String | Optional | The display name of the mailbox plan.' MaxSendSize = 'String | Optional | The MaxSendSize parameter specifies the maximum size of a message that can be sent by the mailbox.' Ensure = 'String | Optional | MailboxPlans cannot be created/removed in O365. This must be set to ''Present'' | Present' IssueWarningQuota = 'String | Optional | The IssueWarningQuota parameter specifies the warning threshold for the size of the mailboxes that are created or enabled using the mailbox plan.' MaxReceiveSize = 'String | Optional | The MaxReceiveSize parameter specifies the maximum size of a message that can be sent to the mailbox.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the Mailbox Plan that you want to modify.' ProhibitSendQuota = 'String | Optional | The ProhibitSendQuota parameter specifies a size limit for the mailbox.' RetentionPolicy = 'String | Optional | The RetentionPolicy parameter specifies the retention policy that''s applied to the mailbox.' RetainDeletedItemsFor = 'String | Optional | The RetainDeletedItemsFor parameter specifies the length of time to keep soft-deleted items for the mailbox.' } ) MailboxSettingsItems = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' DisplayName = 'String | Required | The display name of the Shared Mailbox' SharingPolicy = 'String | Optional | Associated sharing policy.' Ensure = 'String | Optional | Present ensures the Mailbox Settings are applied | Present' TimeZone = 'String | Optional | The name of the Time Zone to assign to the mailbox' Locale = 'String | Optional | The code of the Locale to assign to the mailbox' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RoleAssignmentPolicy = 'String | Optional | Associated role assignment policy.' RetentionPolicy = 'String | Optional | Associated retention policy.' AddressBookPolicy = 'String | Optional | Associated address book policy.' } ) MailContacts = @( @{ ModeratedBy = @( 'String | Optional | The ModeratedBy parameter specifies one or more moderators for this mail contact. A moderator approves messages sent to the mail contact before the messages are delivered. A moderator must be a mailbox, mail user, or mail contact in your organization.' ) CustomAttribute10 = 'String | Optional | The CustomAttribute10 parameter specifies the value of the CustomAttribute10' ModerationEnabled = 'Boolean | Optional | The ModerationEnabled parameter specifies whether moderation is enabled for this recipient.' ExtensionCustomAttribute4 = @( 'String | Optional | The ExtensionCustomAttribute4 parameter specifies the value of the ExtensionCustomAttribute4' ) MacAttachmentFormat = 'String | Optional | The MacAttachmentFormat parameter specifies the Apple Macintosh operating system attachment format to use for messages sent to the mail contact or mail user. Valid values are: BinHex, UuEncode, AppleSingle, AppleDouble | BinHex / UuEncode / AppleSingle / AppleDouble' CustomAttribute8 = 'String | Optional | The CustomAttribute8 parameter specifies the value of the CustomAttribute8' DisplayName = 'String | Optional | The DisplayName parameter specifies the display name of the mail contact. The display name is visible in the Exchange admin center and in address lists. ' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The Name parameter specifies a unique name for the mail contact.' CustomAttribute5 = 'String | Optional | The CustomAttribute5 parameter specifies the value of the CustomAttribute5' CustomAttribute7 = 'String | Optional | The CustomAttribute7 parameter specifies the value of the CustomAttribute7' CustomAttribute4 = 'String | Optional | The CustomAttribute4 parameter specifies the value of the CustomAttribute4' CustomAttribute1 = 'String | Optional | The CustomAttribute1 parameter specifies the value of the CustomAttribute1' LastName = 'String | Optional | The LastName parameter specifies the user''s last name.' ExtensionCustomAttribute2 = @( 'String | Optional | The ExtensionCustomAttribute2 parameter specifies the value of the ExtensionCustomAttribute2' ) CustomAttribute6 = 'String | Optional | The CustomAttribute6 parameter specifies the value of the CustomAttribute6' UsePreferMessageFormat = 'Boolean | Optional | The UsePreferMessageFormat specifies whether the message format settings configured for the mail user or mail contact override the global settings configured for the remote domain or configured by the message sender' CustomAttribute12 = 'String | Optional | The CustomAttribute12 parameter specifies the value of the CustomAttribute12' CustomAttribute3 = 'String | Optional | The CustomAttribute3 parameter specifies the value of the CustomAttribute3' ExtensionCustomAttribute3 = @( 'String | Optional | The ExtensionCustomAttribute3 parameter specifies the value of the ExtensionCustomAttribute3' ) CustomAttribute13 = 'String | Optional | The CustomAttribute13 parameter specifies the value of the CustomAttribute13' CustomAttribute14 = 'String | Optional | The CustomAttribute14 parameter specifies the value of the CustomAttribute14' MessageBodyFormat = 'String | Optional | The MessageBodyFormat parameter specifies the message body format for messages sent to the mail contact or mail user. Valid values are: Text, Html, TextAndHtml | Text / Html / TextAndHtml' Initials = 'String | Optional | The Initials parameter specifies the user''s middle initials.' Ensure = 'String | Optional | Specifies if this Contact should exist. | Present / Absent' CustomAttribute15 = 'String | Optional | The CustomAttribute15 parameter specifies the value of the CustomAttribute15' ExtensionCustomAttribute1 = @( 'String | Optional | The ExtensionCustomAttribute1 parameter specifies the value of the ExtensionCustomAttribute1' ) ExtensionCustomAttribute5 = @( 'String | Optional | The ExtensionCustomAttribute5 parameter specifies the value of the ExtensionCustomAttribute5' ) ExternalEmailAddress = 'String | Required | The ExternalEmailAddress parameter specifies the target email address of the mail contact or mail user. By default, this value is used as the primary email address of the mail contact or mail user.' CustomAttribute9 = 'String | Optional | The CustomAttribute9 parameter specifies the value of the CustomAttribute9' UniqueId = 'String | Required | Unique ID to identify this specific object' Alias = 'String | Optional | The Alias parameter specifies the Exchange alias (also known as the mail nickname) for the recipient. This value identifies the recipient as a mail-enabled object, and shouldn''t be confused with multiple email addresses for the same recipient (also known as proxy addresses). A recipient can have only one Alias value. The maximum length is 64 characters.' MessageFormat = 'String | Optional | The MessageFormat parameter specifies the message format for messages sent to the mail contact or mail user. Valid values are: Mime, Text | Mime / Text' FirstName = 'String | Optional | The FirstName parameter specifies the user''s first name.' CustomAttribute2 = 'String | Optional | The CustomAttribute2 parameter specifies the value of the CustomAttribute2' SendModerationNotifications = 'String | Optional | The SendModerationNotifications parameter specifies when moderation notification messages are sent. Valid values are: ALways, Internal, Never | Always / Internal / Never' OrganizationalUnit = 'String | Optional | The OrganizationalUnit parameter specifies the location in Active Directory where the new contact is created.' CustomAttribute11 = 'String | Optional | The CustomAttribute11 parameter specifies the value of the CustomAttribute11' } ) MailTips = @{ MailTipsExternalRecipientsTipsEnabled = 'Boolean | Optional | Specifies whether MailTips for external recipients are enabled.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MailTipsAllTipsEnabled = 'Boolean | Optional | Specifies whether MailTips are enabled.' MailTipsGroupMetricsEnabled = 'Boolean | Optional | Specifies whether MailTips that rely on group metrics data are enabled.' MailTipsMailboxSourcedTipsEnabled = 'Boolean | Optional | Specifies whether MailTips that rely on mailbox data (out-of-office or full mailbox) are enabled.' MailTipsLargeAudienceThreshold = 'UInt32 | Optional | Specifies what a large audience is.' } MalwareFilterPolicies = @( @{ CustomFromAddress = 'String | Optional | The CustomFromAddress parameter specifies the From address of the custom notification message for malware detections in messages from internal or external senders.' CustomInternalSubject = 'String | Optional | The CustomInternalSubject parameter specifies the subject of the custom notification message for malware detections in messages from internal senders. If the value contains spaces, enclose the value in quotation marks.' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy. If the value contains spaces, enclose the value in quotation marks.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CustomFromName = 'String | Optional | The CustomFromName parameter specifies the From name of the custom notification message for malware detections in messages from internal or external senders. If the value contains spaces, enclose the value in quotation marks.' ZapEnabled = 'Boolean | Optional | The ZapEnabled parameter enables or disables zero-hour auto purge (ZAP) for malware. ZAP detects malware in unread messages that have already been delivered to the user''s Inbox. Valid values are: $true, $false.' CustomExternalSubject = 'String | Optional | The CustomExternalSubject parameter specifies the subject of the custom notification message for malware detections in messages from external senders. If the value contains spaces, enclose the value in quotation marks.' CustomNotifications = 'Boolean | Optional | The CustomNotifications parameter enables or disables custom notification messages for malware detections in messages from internal or external senders. Valid values are: $true, $false.' FileTypeAction = 'String | Optional | The FileTypeAction parameter specifies what''s done to messages that contain one or more attachments where the file extension is included in the FileTypes parameter (common attachment blocking). Valid values are Quarantine and Reject. The default value is Reject. | Quarantine / Reject' Ensure = 'String | Optional | Specifies if this MalwareFilterPolicy should exist. | Present / Absent' CustomInternalBody = 'String | Optional | The CustomInternalBody parameter specifies the body of the custom notification message for malware detections in messages from internal senders. If the value contains spaces, enclose the value in quotation marks.' CustomExternalBody = 'String | Optional | The CustomExternalBody parameter specifies the body of the custom notification message for malware detections in messages from external senders. If the value contains spaces, enclose the value in quotation marks.' FileTypes = @( 'String | Optional | The FileTypes parameter specifies the file types that are automatically blocked by common attachment blocking (also known as the Common Attachment Types Filter), regardless of content.' ) EnableExternalSenderAdminNotifications = 'Boolean | Optional | The EnableExternalSenderAdminNotifications parameter enables or disables sending malware detection notification messages to an administrator for messages from external senders. Valid values are: $true, $false.' QuarantineTag = 'String | Optional | The QuarantineTag specifies the quarantine policy that''s used on messages that are quarantined as malware.' InternalSenderAdminAddress = 'String | Optional | The InternalSenderAdminAddress parameter specifies the email address of the administrator who will receive notification messages for malware detections in messages from internal senders.' Identity = 'String | Required | The Identity parameter specifies the MalwareFilterPolicy you want to modify.' ExternalSenderAdminAddress = 'String | Optional | The ExternalSenderAdminAddress parameter specifies the email address of the administrator who will receive notification messages for malware detections in messages from external senders.' EnableInternalSenderAdminNotifications = 'Boolean | Optional | The EnableInternalSenderAdminNotifications parameter enables or disables sending malware detection notification messages to an administrator for messages from internal senders. Valid values are: $true, $false.' MakeDefault = 'Boolean | Optional | MakeDefault makes this malware filter policy the default policy. Valid values are: $true, $false.' EnableFileFilter = 'Boolean | Optional | The EnableFileFilter parameter enables or disables common attachment blocking - also known as the Common Attachment Types Filter.Valid values are: $true, $false.' } ) MalwareFilterRules = @( @{ Priority = 'String | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter specifies a condition that looks for messages sent to members of distribution groups, dynamic distribution groups, or mail-enabled security groups. You can use any value that uniquely identifies the group.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SentTo = @( 'String | Optional | The SentTo parameter specifies a condition that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Specifies if the Malware Filter Rule should exist. | Present / Absent' RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) Identity = 'String | Required | The Identity parameter specifies the EXO resource you want to modify.' ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) MalwareFilterPolicy = 'String | Optional | The MalwareFilterPolicy parameter specifies the malware filter policy to apply to messages that match the conditions defined by this malware filter rule.' ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) Enabled = 'Boolean | Optional | The Enabled parameter enables or disables the malware filter rule. Valid input for this parameter is $true or $false. The default value is $true.' } ) ManagementRoles = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | The Description parameter specifies the description that''s displayed when the management role is viewed using the Get-ManagementRole cmdlet.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Parent = 'String | Required | The Parent parameter specifies the identity of the role to copy. Mandatory for management role creation/update or when Ensure=Present. Non-mandatory for Ensure=Absent' Ensure = 'String | Optional | Specify if the Management Role should exist or not. | Present / Absent' Name = 'String | Required | The Name parameter specifies the name of the role. The maximum length of the name is 64 characters.' } ) ManagementRoleAssignments = @( @{ CustomRecipientWriteScope = 'String | Optional | The CustomRecipientWriteScope parameter specifies the existing recipient-based management scope to associate with this management role assignment.' Name = 'String | Required | The Name parameter specifies a name for the new management role assignment. The maximum length of the name is 64 characters.' SecurityGroup = 'String | Optional | The SecurityGroup parameter specifies the name of the management role group or mail-enabled universal security group to assign the management role to.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) App = 'String | Optional | The App parameter specifies the service principal to assign the management role to. Specifically, the ServiceId GUID value from the output of the Get-ServicePrincipal cmdlet (for example, 6233fba6-0198-4277-892f-9275bf728bcc).' User = 'String | Optional | The User parameter specifies the name or alias of the user to assign the management role to.' RecipientAdministrativeUnitScope = 'String | Optional | The RecipientAdministrativeUnitScope parameter specifies the administrative unit to scope the new role assignment to.' ExclusiveRecipientWriteScope = 'String | Optional | The ExclusiveConfigWriteScope parameter specifies the exclusive configuration-based management scope to associate with the new role assignment.' Ensure = 'String | Optional | Specify if the Management Role Assignment should exist or not. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' CustomResourceScope = 'String | Optional | The CustomResourceScope parameter specifies the custom management scope to associate with this management role assignment. You can use any value that uniquely identifies the management scope.' Policy = 'String | Optional | The Policy parameter specifies the name of the management role assignment policy to assign the management role to.' RecipientOrganizationalUnitScope = 'String | Optional | The RecipientOrganizationalUnitScope parameter specifies the OU to scope the new role assignment to. If you use the RecipientOrganizationalUnitScope parameter, you can''t use the CustomRecipientWriteScope or ExclusiveRecipientWriteScope parameters.' RecipientRelativeWriteScope = 'String | Optional | The RecipientRelativeWriteScope parameter specifies the type of restriction to apply to a recipient scope. The available types are None, Organization, MyGAL, Self, and MyDistributionGroups. The RecipientRelativeWriteScope parameter is automatically set when the CustomRecipientWriteScope or RecipientOrganizationalUnitScope parameters are used.' Role = 'String | Required | The Role parameter specifies the existing role to assign. You can use any value that uniquely identifies the role.' } ) ManagementRoleEntries = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Parameters = @( 'String | Optional | The Parameters parameter specifies the parameters to be added to or removed from the role entry.' ) Type = 'String | Optional | The Type parameter specifies the type of role entry to return. | Cmdlet / Script / ApplicationPermission / WebService' Identity = 'String | Required | The Identity parameter specifies the role entry that you want to modify.' } ) ManagementScopes = @( @{ RecipientRoot = 'String | Optional | The RecipientRoot parameter specifies the organizational unit (OU) under which the filter specified with the RecipientRestrictionFilter parameter should be applied.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RecipientRestrictionFilter = 'String | Optional | The RecipientRestrictionFilter parameter uses OPATH filter syntax to specify the recipients that are included in the scope.' Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' Exclusive = 'Boolean | Optional | The Exclusive switch specifies that the role should be an exclusive scope.' Name = 'String | Optional | The Name parameter specifies the name of the management scope.' Identity = 'String | Required | The Identity parameter specifies the name of the management scope to modify.' } ) MessageClassifications = @( @{ SenderDescription = 'String | Optional | The SenderDescription parameter specifies the detailed text that''s shown to Outlook senders when they select a message classification to apply to a message before they send the message. ' Name = 'String | Optional | The Name parameter specifies the unique name for the message classification.' RetainClassificationEnabled = 'Boolean | Optional | The RetainClassificationEnabled parameter specifies whether the message classification should persist with the message if the message is forwarded or replied to.' Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' RecipientDescription = 'String | Optional | The RecipientDescription parameter specifies the detailed text that''s shown to Outlook recipient when they receive a message that has the message classification applied.' DisplayPrecedence = 'String | Optional | The DisplayPrecedence parameter specifies the relative precedence of the message classification to other message classifications that may be applied to a specified message. | Highest / Higher / High / MediumHigh / Medium / MediumLow / Low / Lower / Lowest' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the OME Configuration policy that you want to modify.' PermissionMenuVisible = 'Boolean | Optional | The PermissionMenuVisible parameter specifies whether the values that you entered for the DisplayName and RecipientDescription parameters are displayed in Outlook as the user composes a message. ' ClassificationID = 'String | Optional | The ClassificationID parameter specifies the classification ID (GUID) of an existing message classification that you want to import and use in your Exchange organization.' DisplayName = 'String | Optional | The DisplayName parameter specifies the title of the message classification that''s displayed in Outlook and selected by users.' } ) Migrations = @( @{ LargeItemLimit = 'String | Optional | The LargeItemLimit parameter specifies the maximum number of large items that are allowed before the migration request fails.' CompleteAfter = 'String | Optional | The CompleteAfter parameter specifies a delay before the batch is completed.' BadItemLimit = 'String | Optional | The BadItemLimit parameter specifies the maximum number of bad items that are allowed before the migration request fails.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MoveOptions = @( 'String | Optional | The MoveOptions parameter specifies the stages of the migration that you want to skip for debugging purposes.' ) StartAfter = 'String | Optional | The StartAfter parameter specifies a delay before the data migration for the users within the batch is started.' MigrationUsers = @( 'String | Optional | Migration Users states the list of the users/mailboxes that are part of a migration batch that are to be migrated.' ) SourceEndpoint = 'String | Optional | The SourceEndpoint parameter specifies the migration endpoint to use for the source of the migration batch.' SkipMerging = @( 'String | Optional | The SkipMerging parameter specifies the stages of the migration that you want to skip for debugging purposes.' ) Ensure = 'String | Optional | Specifies if the migration endpoint should exist or not. | Present / Absent' TargetDeliveryDomain = 'String | Optional | The TargetDeliveryDomain parameter specifies the FQDN of the external email address created in the source forest for the mail-enabled user when the migration batch is complete.' Identity = 'String | Required | The Identity parameter identifies the name of the current migration batch.' Update = 'Boolean | Optional | The Update switch sets the Update flag on the migration batch.' Status = 'String | Optional | The Status parameter returns information about migration users that have the specified status state.' NotificationEmails = @( 'String | Optional | The NotificationEmails parameter specifies one or more email addresses that migration status reports are sent to.' ) AddUsers = 'Boolean | Optional | The AddUsers parameter controls whether additional users can be dynamically added to an existing migration batch after it has been created.' } ) MigrationEndpoints = @( @{ RpcProxyServer = 'String | Optional | The RPC proxy server for the migration endpoint.' AppSecretKeyVaultUrl = 'String | Optional | The URL of the Key Vault that stores the application secret.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RemoteTenant = 'String | Optional | The remote tenant for the migration endpoint.' AcceptUntrustedCertificates = 'Boolean | Optional | Specifies whether to accept untrusted certificates.' AppID = 'String | Optional | The Application ID used for authentication.' Security = 'String | Optional | The security level for the migration endpoint. | None / Tls / Ssl' NspiServer = 'String | Optional | The NSPI server for the migration endpoint.' Ensure = 'String | Optional | Specifies if the migration endpoint should exist or not. | Present / Absent' EndpointType = 'String | Optional | The type of migration endpoint. | IMAP' SourceMailboxLegacyDN = 'String | Optional | The legacy distinguished name of the source mailbox.' Identity = 'String | Required | Identity of the migration endpoint.' ExchangeServer = 'String | Optional | The Exchange Server address for the migration endpoint.' RemoteServer = 'String | Optional | The remote server for the migration endpoint.' Authentication = 'String | Optional | The authentication method for the migration endpoint.' MaxConcurrentIncrementalSyncs = 'String | Optional | The maximum number of concurrent incremental syncs.' UseAutoDiscover = 'Boolean | Optional | Specifies whether to use AutoDiscover.' MailboxPermission = 'String | Optional | The mailbox permission for the migration endpoint.' MaxConcurrentMigrations = 'String | Optional | The maximum number of concurrent migrations.' Port = 'String | Optional | The port number for the migration endpoint.' } ) MobileDeviceMailboxPolicies = @( @{ AllowSimplePassword = 'Boolean | Optional | The AllowSimplePassword parameter specifies whether a simple device password is allowed. A simple device password is a password that has a specific pattern, such as 1111 or 1234.' AllowGooglePushNotifications = 'Boolean | Optional | The AllowGooglePushNotifications parameter controls whether the user can receive push notifications from Google for Outlook on the web for devices.' AllowBluetooth = 'String | Optional | The AllowBluetooth parameter specifies whether the Bluetooth capabilities are allowed on the mobile phone. The available options are Disable, HandsfreeOnly, and Allow. The default value is Allow. | Disable / HandsfreeOnly / Allow' RequireEncryptedSMIMEMessages = 'Boolean | Optional | The RequireEncryptedSMIMEMessages parameter specifies whether the mobile device must send encrypted S/MIME messages.' MaxAttachmentSize = 'String | Optional | The MaxAttachmentSize parameter specifies the maximum size of attachments that can be downloaded to the mobile phone.' AllowDesktopSync = 'Boolean | Optional | The AllowDesktopSync parameter specifies whether the mobile phone can synchronize with a desktop computer through a cable.' RequireSignedSMIMEAlgorithm = 'String | Optional | The RequireSignedSMIMEAlgorithm parameter specifies the algorithm that''s used to sign S/MIME messages on the mobile device. | SHA1 / MD5' MinPasswordLength = 'String | Optional | The MinPasswordLength parameter specifies the minimum number of characters in the mobile device password.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PasswordExpiration = 'String | Optional | The PasswordExpiration parameter specifies how long a password can be used on a mobile device before the user is forced to change the password.' AllowTextMessaging = 'Boolean | Optional | The AllowTextMessaging parameter specifies whether text messaging is allowed from the mobile phone.' AllowWiFi = 'Boolean | Optional | The AllowWiFi parameter specifies whether wireless Internet access is allowed on the mobile phone. ' AllowApplePushNotifications = 'Boolean | Optional | The AllowApplePushNotifications parameter specifies whether push notifications are allowed to Apple mobile devices.' AllowExternalDeviceManagement = 'Boolean | Optional | The AllowExternalDeviceManagement parameter specifies whether an external device management program is allowed to manage the mobile phone.' RequireStorageCardEncryption = 'Boolean | Optional | The RequireStorageCardEncryption parameter specifies whether storage card encryption is required on the mobile device.' AllowUnsignedInstallationPackages = 'Boolean | Optional | The AllowUnsignedInstallationPackages parameter specifies whether unsigned installation packages can be executed on the mobile phone.' MaxEmailAgeFilter = 'String | Optional | The MaxEmailAgeFilter parameter specifies the maximum number of days of email items to synchronize to the mobile phone. | All / OneDay / ThreeDays / OneWeek / TwoWeeks / OneMonth' AllowNonProvisionableDevices = 'Boolean | Optional | The AllowNonProvisionableDevices parameter specifies whether all mobile phones can synchronize with the server running Exchange.' AllowIrDA = 'Boolean | Optional | The AllowIrDA parameter specifies whether infrared connections are allowed to the mobile phone.' WSSAccessEnabled = 'Boolean | Optional | The WSSAccessEnabled parameter specifies whether access to Microsoft Windows SharePoint Services is enabled from the mobile device.' MinPasswordComplexCharacters = 'String | Optional | The MinPasswordComplexCharacters parameter specifies the character sets that are required in the password of the mobile device.' PasswordHistory = 'String | Optional | The PasswordHistory parameter specifies the number of unique new passwords that need to be created on the mobile device before an old password can be reused.' DeviceEncryptionEnabled = 'Boolean | Optional | The DeviceEncryptionEnabled parameter specifies whether encryption is enabled.' PasswordEnabled = 'Boolean | Optional | The PasswordEnabled parameter specifies whether a password is required on the mobile device.' AllowPOPIMAPEmail = 'Boolean | Optional | The AllowPOPIMAPEmail parameter specifies whether the user can configure a POP3 or IMAP4 email account on the mobile phone.' MaxCalendarAgeFilter = 'String | Optional | The MaxCalendarAgeFilter parameter specifies the maximum range of calendar days that can be synchronized to the device. | All / TwoWeeks / OneMonth / ThreeMonths / SixMonths' MaxEmailHTMLBodyTruncationSize = 'String | Optional | The MaxEmailHTMLBodyTruncationSize parameter specifies the maximum size at which HTML-formatted email messages are synchronized to the mobile phone. The value is specified in KB.' ApprovedApplicationList = @( 'String | Optional | The ApprovedApplicationList parameter specifies a list of approved applications for the mobile phone.' ) AllowUnsignedApplications = 'Boolean | Optional | The AllowUnsignedApplications parameter specifies whether unsigned applications can be installed on the mobile phone.' AllowMobileOTAUpdate = 'Boolean | Optional | The AllowMobileOTAUpdate parameter specifies whether the Exchange ActiveSync mailbox policy can be sent to the mobile phone over a cellular data connection.' UNCAccessEnabled = 'Boolean | Optional | The UNCAccessEnabled parameter specifies whether access to Microsoft Windows file shares is enabled from the mobile device.' UnapprovedInROMApplicationList = @( 'String | Optional | The UnapprovedInROMApplicationList parameter specifies a list of applications that can''t be run in ROM on the mobile device.' ) RequireEncryptionSMIMEAlgorithm = 'String | Optional | The RequireEncryptionSMIMEAlgorithm parameter specifies the algorithm that''s required to encrypt S/MIME messages on a mobile device. | DES / TripleDES / RC240bit / RC264bit / RC2128bit' RequireDeviceEncryption = 'Boolean | Optional | The RequireDeviceEncryption parameter specifies whether encryption is required on the mobile device.' RequireManualSyncWhenRoaming = 'Boolean | Optional | The RequireSignedSMIMEAlgorithm parameter specifies the algorithm that''s used to sign S/MIME messages on the mobile device.' Ensure = 'String | Optional | Specify if the Mobile Device Mailbox Policy should exist or not. | Present / Absent' PasswordRecoveryEnabled = 'Boolean | Optional | The PasswordRecoveryEnabled parameter specifies whether the recovery password for the mobile device is stored in Exchange.' MaxPasswordFailedAttempts = 'String | Optional | The MaxPasswordFailedAttempts parameter specifies the number of attempts a user can make to enter the correct password for the mobile phone. You can enter any number from 4 through 16 or the value Unlimited.' AllowSMIMESoftCerts = 'Boolean | Optional | The AllowSMIMESoftCerts parameter specifies whether S/MIME software certificates are allowed.' AlphanumericPasswordRequired = 'Boolean | Optional | The AlphanumericPasswordRequired parameter specifies whether the password for the mobile phone must be alphanumeric.' AllowCamera = 'Boolean | Optional | The AllowCamera parameter specifies whether the mobile phone''s camera is allowed.' AllowRemoteDesktop = 'Boolean | Optional | The AllowRemoteDesktop parameter specifies whether the mobile phone can initiate a remote desktop connection.' IrmEnabled = 'Boolean | Optional | The IrmEnabled parameter specifies whether Information Rights Management (IRM) is enabled for the mailbox policy.' RequireSignedSMIMEMessages = 'Boolean | Optional | The RequireSignedSMIMEMessages parameter specifies whether the mobile device must send signed S/MIME messages.' MaxInactivityTimeLock = 'String | Optional | The MaxInactivityTimeDeviceLock parameter specifies the length of time that the mobile phone can be inactive before the password is required to reactivate it.' MaxEmailBodyTruncationSize = 'String | Optional | The MaxEmailBodyTruncationSize parameter specifies the maximum size at which email messages are truncated when synchronized to the mobile phone. The value is specified in kilobytes (KB).' UniqueId = 'String | Required | Unique ID to identify this specific object' AllowConsumerEmail = 'Boolean | Optional | The AllowConsumerEmail parameter specifies whether the mobile phone user can configure a personal email account on the mobile phone.' AttachmentsEnabled = 'Boolean | Optional | The AttachmentsEnabled parameter specifies whether attachments can be downloaded.' DevicePolicyRefreshInterval = 'String | Optional | The DevicePolicyRefreshInterval parameter specifies how often the policy is sent from the server to the mobile phone.' AllowInternetSharing = 'Boolean | Optional | The AllowInternetSharing parameter specifies whether the mobile phone can be used as a modem to connect a computer to the Internet.' AllowBrowser = 'Boolean | Optional | The AllowBrowser parameter indicates whether Microsoft Pocket Internet Explorer is allowed on the mobile phone. This parameter doesn''t affect third-party browsers.' AllowStorageCard = 'Boolean | Optional | The AllowStorageCard parameter specifies whether the mobile phone can access information stored on a storage card.' AllowMicrosoftPushNotifications = 'Boolean | Optional | The AllowMicrosoftPushNotifications parameter specifies whether push notifications are enabled on the mobile device.' Name = 'String | Required | The Name parameter specifies the friendly name of the mobile device mailbox policy.' AllowSMIMEEncryptionAlgorithmNegotiation = 'String | Optional | The AllowSMIMEEncryptionAlgorithmNegotiation parameter specifies whether the messaging application on the mobile device can negotiate the encryption algorithm if a recipient''s certificate doesn''t support the specified encryption algorithm. | AllowAnyAlgorithmNegotiation / BlockNegotiation / OnlyStrongAlgorithmNegotiation' AllowHTMLEmail = 'Boolean | Optional | The AllowHTMLEmail parameter specifies whether HTML email is enabled on the mobile phone.' IsDefault = 'Boolean | Optional | The IsDefault parameter specifies whether this policy is the default Mobile Device mailbox policy.' } ) OfflineAddressBooks = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsDefault = 'Boolean | Optional | The IsDefault parameter specifies whether the OAB is used by all mailboxes and mailbox databases that don''t have an OAB specified.' Ensure = 'String | Optional | Specify if the Offline Address Book should exist or not. | Present / Absent' AddressLists = @( 'String | Optional | The AddressLists parameter specifies the address lists or global address lists that are included in the OAB. You can use any value that uniquely identifies the address list.' ) Name = 'String | Required | The Name parameter specifies the unique name of the Offline Address Book. The maximum length is 64 characters.' DiffRetentionPeriod = 'String | Optional | The DiffRetentionPeriod parameter specifies the number of days that the OAB difference files are stored on the server.' ConfiguredAttributes = @( 'String | Optional | The ConfiguredAttributes parameter specifies the recipient MAPI properties that are available in the OAB.' ) } ) OMEConfigurations = @( @{ IntroductionText = 'String | Optional | The IntroductionText parameter specifies the default text that accompanies encrypted email messages.' ExternalMailExpiryInDays = 'UInt32 | Optional | The ExternalMailExpiryInDays parameter specifies the number of days that the encrypted message is available to external recipients in the Microsoft 365 portal. A valid value is an integer from 0 to 730.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ReadButtonText = 'String | Optional | The ReadButtonText parameter specifies the text that appears on the ''Read the message'' button. ' PortalText = 'String | Optional | The PortalText parameter specifies the text that appears at the top of the encrypted email viewing portal.' OTPEnabled = 'Boolean | Optional | The OTPEnabled parameter specifies whether to allow recipients to use a one-time passcode to view encrypted messages.' BackgroundColor = 'String | Optional | The BackgroundColor parameter specifies the background color' DisclaimerText = 'String | Optional | The DisclaimerText parameter specifies the disclaimer text in the email that contains the encrypted message' PrivacyStatementUrl = 'String | Optional | The PrivacyStatementUrl parameter specifies the Privacy Statement link in the encrypted email notification message.' SocialIdSignIn = 'Boolean | Optional | The SocialIdSignIn parameter specifies whether a user is allowed to view an encrypted message in the Microsoft 365 admin center using their own social network id (Google, Yahoo, and Microsoft account).' EmailText = 'String | Optional | The EmailText parameter specifies the default text that accompanies encrypted email messages.' Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' Identity = 'String | Required | The Identity parameter specifies the OME Configuration policy that you want to modify.' } ) OnPremisesOrganizations = @( @{ Comment = 'String | Optional | The Comment parameter specifies an optional comment.' OrganizationGuid = 'String | Optional | The OrganizationGuid parameter specifies the globally unique identifier (GUID) of the on-premises Exchange organization object in the Office 365 tenant.' Ensure = 'String | Optional | Specify if the On-Premises Organization should exist or not. | Present / Absent' Identity = 'String | Required | The Identity parameter specifies the identity of the on-premises organization object.' HybridDomains = @( 'String | Optional | The HybridDomains parameter specifies the domains that are configured in the hybrid deployment between an Office 365 tenant and an on-premises Exchange organization. The domains specified in this parameter must match the domains listed in the HybridConfiguration Active Directory object for the on-premises Exchange organization configured by the Hybrid Configuration wizard. ' ) OrganizationName = 'String | Optional | The OrganizationName parameter specifies the Active Directory object name of the on-premises Exchange organization.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) InboundConnector = 'String | Optional | The InboundConnector parameter specifies the name of the inbound connector configured on the Microsoft Exchange Online Protection (EOP) service for a hybrid deployment configured with an on-premises Exchange organization.' OrganizationRelationship = 'String | Optional | The OrganizationRelationship parameter specifies the organization relationship configured by the Hybrid Configuration wizard on the Office 365 tenant as part of a hybrid deployment with an on-premises Exchange organization. This organization relationship defines the federated sharing features enabled on the Office 365 tenant.' OutboundConnector = 'String | Optional | The OutboundConnector parameter specifies the name of the outbound connector configured on the EOP service for a hybrid deployment configured with an on-premises Exchange organization.' } ) OrganizationConfig = @{ LeanPopoutEnabled = 'Boolean | Optional | The LeanPopoutEnabled parameter specifies whether to enable faster loading of pop-out messages in Outlook on the web for Internet Explorer and Microsoft Edge.' LinkPreviewEnabled = 'Boolean | Optional | The LinkPreviewEnabled parameter specifies whether link preview of URLs in email messages is allowed for the organization.' MailTipsAllTipsEnabled = 'Boolean | Optional | The MailTipsAllTipsEnabled parameter specifies whether MailTips are enabled. The default value is $true.' IPListBlocked = @( 'String | Optional | The IPListBlocked parameter specifies the blocked IP addresses that aren''t allowed to connect to Exchange Online organization. These settings affect client connections that use Basic authentication where on-premises Active Directory Federation Services (ADFS) servers federate authentication with Azure Active Directory. Note that the new settings might take up to 4 hours to fully propagate across the service.' ) IsGroupFoldersAndRulesEnabled = 'Boolean | Optional | No description available for IsGroupFoldersAndRulesEnabled' IsGroupMemberAllowedToEditContent = 'Boolean | Optional | No description available for IsGroupMemberAllowedToEditContent' MailTipsExternalRecipientsTipsEnabled = 'Boolean | Optional | The MailTipsExternalRecipientsTipsEnabled parameter specifies whether MailTips for external recipients are enabled. The default value is $false.' MaskClientIpInReceivedHeadersEnabled = 'Boolean | Optional | No description available for MaskClientIpInReceivedHeadersEnabled.' MatchSenderOrganizerProperties = 'Boolean | Optional | No description available for MatchSenderOrganizerProperties.' MessageHighlightsEnabled = 'Boolean | Optional | No description available for MessageHighlightsEnabled.' MailTipsGroupMetricsEnabled = 'Boolean | Optional | The MailTipsGroupMetricsEnabled parameter specifies whether MailTips that rely on group metrics data are enabled. The default value is $true.' MailTipsLargeAudienceThreshold = 'UInt32 | Optional | The MailTipsLargeAudienceThreshold parameter specifies what a large audience is. The default value is 25.' MailTipsMailboxSourcedTipsEnabled = 'Boolean | Optional | The MailTipsMailboxSourcedTipsEnabled parameter specifies whether MailTips that rely on mailbox data (out-of-office or full mailbox) are enabled.' HierarchicalAddressBookRoot = 'String | Optional | The HierarchicalAddressBookRoot parameter specifies the user, contact, or group to be used as the root organization for a hierarchical address book in the Exchange organization. You can use any value that uniquely identifies the recipient.' EwsApplicationAccessPolicy = 'String | Optional | The EwsApplicationAccessPolicy parameter specifies the client applications that have access to EWS and REST. | EnforceAllowList / EnforceBlockList' EwsBlockList = @( 'String | Optional | The EwsBlockList parameter specifies the applications that aren''t allowed to access EWS or REST when the EwsApplicationAccessPolicy parameter is set to EnforceBlockList. All other applications that aren''t specified by this parameter are allowed to access EWS or REST. You identify the application by its user agent string value. Wildcard characters (*) are supported.' ) EwsEnabled = 'Boolean | Optional | The EwsEnabled parameter specifies whether to globally enable or disable EWS access for the entire organization, regardless of what application is making the request.' EwsAllowList = @( 'String | Optional | The EwsAllowList parameter specifies the applications that are allowed to access EWS or REST when the EwsApplicationAccessPolicy parameter is set to EwsAllowList. Other applications that aren''t specified by this parameter aren''t allowed to access EWS or REST. You identify the application by its user agent string value. Wildcard characters (*) are supported.' ) EwsAllowMacOutlook = 'Boolean | Optional | The EwsAllowMacOutlook parameter enables or disables access to mailboxes by Outlook for Mac clients that use Exchange Web Services (for example, Outlook for Mac 2011 or later).' EwsAllowOutlook = 'Boolean | Optional | The EwsAllowOutlook parameter enables or disables access to mailboxes by Outlook clients that use Exchange Web Services. Outlook uses Exchange Web Services for free/busy, out-of-office settings, and calendar sharing.' ExchangeNotificationEnabled = 'Boolean | Optional | The ExchangeNotificationEnabled parameter enables or disables Exchange notifications sent to administrators regarding their organizations. Valid input for this parameter is $true or $false.' FindTimeLockPollForAttendeesEnabled = 'Boolean | Optional | The FindTimeLockPollForAttendeesEnabled controls whether the Lock poll for attendees setting is managed by the organization.' FindTimeOnlineMeetingOptionDisabled = 'Boolean | Optional | The FindTimeOnlineMeetingOptionDisabled parameter controls the availability of the Online meeting checkbox for Teams in meeting polls using the FindTime Outlook add-in.' FocusedInboxOn = 'Boolean | Optional | The FocusedInboxOn parameter enables or disables Focused Inbox for the organization.' ExchangeNotificationRecipients = @( 'String | Optional | The ExchangeNotificationRecipients parameter specifies the recipients for Exchange notifications sent to administrators regarding their organizations. If the ExchangeNotificationEnabled parameter is set to $false, no notification messages are sent. Be sure to enclose values that contain spaces in quotation marks and separate multiple values with commas. If this parameter isn''t set, Exchange notifications are sent to all administrators.' ) FindTimeAttendeeAuthenticationEnabled = 'Boolean | Optional | The FindTimeAttendeeAuthenticationEnabled parameter controls whether attendees are required to verify their identity in meeting polls using the FindTime Outlook add-in.' FindTimeAutoScheduleDisabled = 'Boolean | Optional | The FindTimeAutoScheduleDisabled parameter controls automatically scheduling the meeting once a consensus is reached in meeting polls using the FindTime Outlook add-in.' MessageRecallEnabled = 'Boolean | Optional | The MessageRecallEnabled parameter enables or disables the message recall feature in the organization.' SiteMailboxCreationURL = 'String | Optional | The SiteMailboxCreationURL parameter specifies the URL that''s used to create site mailboxes. Site mailboxes improve collaboration and user productivity by allowing access to both SharePoint documents and Exchange email in Outlook 2013 or later.' SmtpActionableMessagesEnabled = 'Boolean | Optional | The SmtpActionableMessagesEnabled parameter specifies whether to enable or disable action buttons in email messages in Outlook on the web.' VisibleMeetingUpdateProperties = 'String | Optional | The VisibleMeetingUpdateProperties parameter specifies whether meeting message updates will be auto-processed on behalf of attendees. Auto-processed updates are applied to the attendee''s calendar item, and then the meeting message is moved to the deleted items. The attendee never sees the update in their inbox, but their calendar is updated.' SendFromAliasEnabled = 'Boolean | Optional | The SendFromAliasEnabled parameter allows mailbox users to send messages using aliases (proxy addresses). It does this by disabling the rewriting of aliases to their primary SMTP address. This change is implemented in the Exchange Online service' SharedDomainEmailAddressFlowEnabled = 'Boolean | Optional | No description available for SharedDomainEmailAddressFlowEnabled.' ShortenEventScopeDefault = 'String | Optional | The ShortenEventScopeDefault parameter specifies whether calendar events start late or end early in the organization.' WebPushNotificationsDisabled = 'Boolean | Optional | The WebPushNotificationsDisabled parameter specifies whether to enable or disable Web Push Notifications in Outlook on the Web. This feature provides web push notifications which appear on a user''s desktop while the user is not using Outlook on the Web. This brings awareness of incoming messages while they are working elsewhere on their computer.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) WebSuggestedRepliesDisabled = 'Boolean | Optional | The WebSuggestedRepliesDisabled parameter specifies whether to enable or disable Suggested Replies in Outlook on the web. This feature provides suggested replies to emails so users can easily and quickly respond to messages.' WorkspaceTenantEnabled = 'Boolean | Optional | The WorkspaceTenantEnabled parameter enables or disables workspace booking in the organization.' RemotePublicFolderMailboxes = @( 'String | Optional | The RemotePublicFolderMailboxes parameter specifies the identities of the public folder objects (represented as mail user objects locally) corresponding to the public folder mailboxes created in the remote forest. The public folder values set here are used only if the public folder deployment is a remote deployment.' ) OnlineMeetingsByDefaultEnabled = 'Boolean | Optional | The OnlineMeetingsByDefaultEnabled parameter specifies whether to set all meetings as Teams by default during meeting creation.' OutlookGifPickerDisabled = 'Boolean | Optional | The OutlookGifPickerDisabled parameter disables the GIF Search (powered by Bing) feature that''s built into the Compose page in Outlook on the web.' OutlookMobileGCCRestrictionsEnabled = 'Boolean | Optional | The OutlookMobileGCCRestrictionsEnabled parameter specifies whether to enable or disable features within Outlook for iOS and Android that are not FedRAMP compliant for Office 365 US Government Community Cloud (GCC) customers.' MessageRemindersEnabled = 'Boolean | Optional | The MessageRemindersEnabled parameter enables or disables the message reminders feature in the organization.' MobileAppEducationEnabled = 'Boolean | Optional | The MobileAppEducationEnabled specifies whether to show or hide the Outlook for iOS and Android education reminder in Outlook on the web.' OAuth2ClientProfileEnabled = 'Boolean | Optional | The OAuth2ClientProfileEnabled parameter enables or disables modern authentication in the Exchange organization.' OutlookPayEnabled = 'Boolean | Optional | The OutlookPayEnabled parameter enables or disables Payments in Outlook in the Office 365 organization.' PublicFolderShowClientControl = 'Boolean | Optional | The PublicFolderShowClientControl parameter enables or disables access to public folders in Microsoft Outlook.' ReadTrackingEnabled = 'Boolean | Optional | The ReadTrackingEnabled parameter specifies whether the tracking for read status for messages in an organization is enabled. The default value is $false.' RecallReadMessagesEnabled = 'Boolean | Optional | No description available for RecallReadMessagesEnabled.' OutlookTextPredictionDisabled = 'Boolean | Optional | No description available for OutlookTextPredictionDisabled.' PublicComputersDetectionEnabled = 'Boolean | Optional | The PublicComputersDetectionEnabled parameter specifies whether Outlook on the web will detect when a user signs from a public or private computer or network, and then enforces the attachment handling settings from public networks. The default is $false. However, if you set this parameter to $true, Outlook on the web will determine if the user is signing in from a public computer, and all public attachment handling rules will be applied and enforced.' PublicFoldersEnabled = 'String | Optional | The PublicFoldersEnabled parameter specifies how public folders are deployed in your organization. | None / Local / Remote' EwsAllowEntourage = 'Boolean | Optional | The EwsAllowEntourage parameter specifies whether to enable or disable Entourage 2008 to access Exchange Web Services (EWS) for the entire organization.' BookingsNamingPolicyEnabled = 'Boolean | Optional | No description available for BookingsNamingPolicyEnabled' BookingsNamingPolicyPrefix = 'String | Optional | No description available for BookingsNamingPolicyPrefix' BookingsNamingPolicyPrefixEnabled = 'Boolean | Optional | No description available for BookingsNamingPolicyPrefixEnabled' BookingsEnabled = 'Boolean | Optional | The BookingsEnabled parameter specifies whether to enable Microsoft Bookings in an organization.' BookingsExposureOfStaffDetailsRestricted = 'Boolean | Optional | The BookingsExposureOfStaffDetailsRestricted parameter specifies whether the attributes of internal Bookings staff members are visible to external Bookings customers.' BookingsMembershipApprovalRequired = 'Boolean | Optional | The BookingsMembershipApprovalRequired parameter enables a membership approval requirement when new staff members are added to Bookings calendars.' BookingsNamingPolicySuffix = 'String | Optional | No description available for BookingsNamingPolicySuffix' BookingsPhoneNumberEntryRestricted = 'Boolean | Optional | The BookingsPhoneNumberEntryRestricted parameter specifies whether phone numbers can be collected from Bookings customers.' BookingsSearchEngineIndexDisabled = 'Boolean | Optional | No description available for BookingsSearchEngineIndexDisabled' BookingsSmsMicrosoftEnabled = 'Boolean | Optional | No description available for BookingsSmsMicrosoftEnabled' BookingsNamingPolicySuffixEnabled = 'Boolean | Optional | No description available for BookingsNamingPolicySuffixEnabled' BookingsNotesEntryRestricted = 'Boolean | Optional | The BookingsNotesEntryRestricted parameter specifies whether appointment notes can be collected from Bookings customers.' BookingsPaymentsEnabled = 'Boolean | Optional | The BookingsPaymentsEnabled parameter specifies whether to enable online payment node inside Bookings.' BookingsCreationOfCustomQuestionsRestricted = 'Boolean | Optional | The BookingsCreationOfCustomQuestionsRestricted parameter specifies whether Bookings admins can add custom questions.' ActivityBasedAuthenticationTimeoutWithSingleSignOnEnabled = 'Boolean | Optional | The ActivityBasedAuthenticationTimeoutWithSingleSignOnEnabled parameter specifies whether to keep single sign-on enabled. The default value is $true.' AppsForOfficeEnabled = 'Boolean | Optional | The AppsForOfficeEnabled parameter specifies whether to enable apps for Outlook features. By default, the parameter is set to $true. If the flag is set to $false, no new apps can be activated for any user in the organization.' AsyncSendEnabled = 'Boolean | Optional | The AsyncSendEnabled parameter specifies whether to enable or disable async send in Outlook on the web.' ActivityBasedAuthenticationTimeoutEnabled = 'Boolean | Optional | The ActivityBasedAuthenticationTimeoutEnabled parameter specifies whether the timed logoff feature is enabled. The default value is $true' ActivityBasedAuthenticationTimeoutInterval = 'String | Optional | The ActivityBasedAuthenticationTimeoutInterval parameter specifies the time span for logoff. You enter this value as a time span: hh:mm:ss where hh = hours, mm = minutes and ss = seconds. Valid values for this parameter are from 00:05:00 to 08:00:00 (5 minutes to 8 hours). The default value is 06:00:00 (6 hours).' AuditDisabled = 'Boolean | Optional | The AuditDisabled parameter specifies whether to disable or enable mailbox auditing for the organization.' BookingsAddressEntryRestricted = 'Boolean | Optional | The BookingsAddressEntryRestricted parameter specifies whether addresses can be collected from Bookings customers.' BookingsAuthEnabled = 'Boolean | Optional | The BookingsAuthEnabled parameter specifies whether to enforce authentication to access all published Bookings pages.' BookingsBlockedWordsEnabled = 'Boolean | Optional | No description available for BookingsBlockedWordsEnabled' AutodiscoverPartialDirSync = 'Boolean | Optional | Setting this parameter to $true will cause unknown users to be redirected to the on-premises endpoint and will allow on-premises users to discover their mailbox automatically.' AutoExpandingArchive = 'Boolean | Optional | The AutoExpandingArchive switch enables the unlimited archiving feature (called auto-expanding archiving) in an Exchange Online organization. You don''t need to specify a value with this switch.' BlockMoveMessagesForGroupFolders = 'Boolean | Optional | No description available for BlockMoveMessagesForGroupFolders' BookingsSocialSharingRestricted = 'Boolean | Optional | The BookingsSocialSharingRestricted parameter allows you to control whether, or not, your users can see social sharing options inside Bookings.' DefaultPublicFolderMovedItemRetention = 'String | Optional | The DefaultPublicFolderMovedItemRetention parameter specifies how long items that have been moved between mailboxes are kept in the source mailbox for recovery purposes before being removed by the Public Folder Assistant.' DefaultPublicFolderProhibitPostQuota = 'String | Optional | The DefaultPublicFolderProhibitPostQuota parameter specifies the size of a public folder at which users are notified that the public folder is full. Users can''t post to a folder whose size is larger than the DefaultPublicFolderProhibitPostQuota parameter value. The default value of this attribute is unlimited.' DirectReportsGroupAutoCreationEnabled = 'Boolean | Optional | The DirectReportsGroupAutoCreationEnabled parameter specifies whether to enable or disable the automatic creation of direct report Office 365 groups.' DefaultPublicFolderDeletedItemRetention = 'String | Optional | The DefaultPublicFolderDeletedItemRetention parameter specifies the default value of the length of time to retain deleted items for public folders across the entire organization. This attribute applies to all public folders in the organization that don''t have their own RetainDeletedItemsFor attribute set.' DefaultPublicFolderIssueWarningQuota = 'String | Optional | The DefaultPublicFolderIssueWarningQuota parameter specifies the default value across the entire organization for the public folder size at which a warning message is sent to this folder''s owners, warning that the public folder is almost full. This attribute applies to all public folders within the organization that don''t have their own warning quota attribute set. The default value of this attribute is unlimited. The valid input range for this parameter is from 0 through 2199023254529 bytes(2 TB). If you enter a value of unlimited, no size limit is imposed on the public folder.' DefaultPublicFolderMaxItemSize = 'String | Optional | The DefaultPublicFolderMaxItemSize parameter specifies the default maximum size for posted items within public folders across the entire organization. Items larger than the value of the DefaultPublicFolderMaxItemSize parameter are rejected. This attribute applies to all public folders within the organization that don''t have their own MaxItemSize attribute set. The default value of this attribute is unlimited.' DisablePlusAddressInRecipients = 'Boolean | Optional | The DisablePlusAddressInRecipients parameter specifies whether to enable or disable plus addressing (also known as subaddressing) for Exchange Online mailboxes.' ElcProcessingDisabled = 'Boolean | Optional | The ElcProcessingDisabled parameter specifies whether to enable or disable the processing of mailboxes by the Managed Folder Assistant.' EnableOutlookEvents = 'Boolean | Optional | The EnableOutlookEvents parameter specifies whether Outlook or Outlook on the web automatically discovers events from email messages and adds them to user calendars.' EndUserDLUpgradeFlowsDisabled = 'Boolean | Optional | The EndUserDLUpgradeFlowsDisabled parameter specifies whether to prevent users from upgrading their own distribution groups to Office 365 groups in an Exchange Online organization.' DistributionGroupDefaultOU = 'String | Optional | The DistributionGroupDefaultOU parameter specifies the container where distribution groups are created by default.' DistributionGroupNameBlockedWordsList = @( 'String | Optional | The DistributionGroupNameBlockedWordsList parameter specifies words that can''t be included in the names of distribution groups. Separate multiple values with commas.' ) DistributionGroupNamingPolicy = 'String | Optional | The DistributionGroupNamingPolicy parameter specifies the template applied to the name of distribution groups that are created in the organization. You can enforce that a prefix or suffix be applied to all distribution groups. Prefixes and suffixes can be either a string or an attribute, and you can combine strings and attributes.' DefaultPublicFolderAgeLimit = 'String | Optional | The DefaultPublicFolderAgeLimit parameter specifies the default age limit for the contents of public folders across the entire organization. Content in a public folder is automatically deleted when this age limit is exceeded. This attribute applies to all public folders in the organization that don''t have their own AgeLimit setting. To specify a value, enter it as a time span: dd.hh:mm:ss where d = days, h = hours, m = minutes, and s = seconds. Or, enter the value $null. The default value is blank ($null).' ConnectorsEnabled = 'Boolean | Optional | The ConnectorsEnabled parameter specifies whether to enable or disable all connected apps in organization.' ConnectorsEnabledForOutlook = 'Boolean | Optional | The ConnectorsEnabledForOutlook parameter specifies whether to enable or disable connected apps in Outlook on the web. ' ConnectorsEnabledForSharepoint = 'Boolean | Optional | The ConnectorsEnabledForSharepoint parameter specifies whether to enable or disable connected apps on Sharepoint.' ByteEncoderTypeFor7BitCharsets = 'UInt32 | Optional | The ByteEncoderTypeFor7BitCharsets parameter specifies the 7-bit transfer encoding method for MIME format for messages sent to this remote domain.' ComplianceMLBgdCrawlEnabled = 'Boolean | Optional | No description available for ComplianceMLBgdCrawlEnabled' ConnectorsActionableMessagesEnabled = 'Boolean | Optional | The ConnectorsActionableMessagesEnabled parameter specifies whether to enable or disable actionable buttons in messages (connector cards) from connected apps on Outlook on the web.' ConnectorsEnabledForTeams = 'Boolean | Optional | The ConnectorsEnabledForTeams parameter specifies whether to enable or disable connected apps on Teams.' DefaultGroupAccessType = 'String | Optional | The DefaultGroupAccessType parameter specifies the default access type for Office 365 groups. | Private / Public' DefaultMinutesToReduceLongEventsBy = 'UInt32 | Optional | The DefaultMinutesToReduceLongEventsBy parameter specifies the number of minutes to reduce calendar events by if the events are 60 minutes or longer.' DefaultMinutesToReduceShortEventsBy = 'UInt32 | Optional | The DefaultMinutesToReduceShortEventsBy parameter specifies the number of minutes to reduce calendar events by if the events are less than 60 minutes long.' ConnectorsEnabledForYammer = 'Boolean | Optional | The ConnectorsEnabledForYammer parameter specifies whether to enable or disable connected apps on Yammer.' CustomerLockboxEnabled = 'Boolean | Optional | Enable Customer Lockbox.' DefaultAuthenticationPolicy = 'String | Optional | The DefaultAuthenticationPolicy parameter specifies the authentication policy that''s used for the whole organization. You can use any value that uniquely identifies the policy.' } OrganizationRelationships = @( @{ MailboxMovePublishedScopes = @( 'String | Optional | The MailboxMovePublishedScopes parameter is used in cross-tenant mailbox migrations to specify the mail-enabled security groups whose members are allowed to migrate.' ) FreeBusyAccessLevel = 'String | Optional | The FreeBusyAccessLevel parameter specifies the maximum amount of detail returned to the requesting organization. Valid values are: None, AvailabilityOnly or LimitedDetails | None / AvailabilityOnly / LimitedDetails' TargetAutodiscoverEpr = 'String | Optional | The TargetAutodiscoverEpr parameter specifies the Autodiscover URL of Exchange Web Services for the external organization. Exchange uses Autodiscover to automatically detect the correct Exchangeserver endpoint to use for external requests.' DomainNames = @( 'String | Optional | The DomainNames parameter specifies the SMTP domains of the external organization. You can specify multiple domains separated by commas.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MailboxMoveCapability = 'String | Optional | The MailboxMoveCapability parameter is used in cross-tenant mailbox migrations. | Inbound / Outbound / RemoteInbound / RemoteOutbound / None' MailTipsAccessLevel = 'String | Optional | The MailTipsAccessLevel parameter specifies the level of MailTips data externally shared over this organization relationship. This parameter can have the following values: All, Limited, None | None / All / Limited' OrganizationContact = 'String | Optional | The OrganizationContact parameter specifies the email address that can be used to contact the external organization (for example, administrator@fourthcoffee.com).' Name = 'String | Required | The Name parameter specifies the unique name of the organization relationship. The maximum length is 64 characters.' ArchiveAccessEnabled = 'Boolean | Optional | The ArchiveAccessEnabled parameter specifies whether the organization relationship has been configured to provide remote archive access.' MailTipsAccessScope = 'String | Optional | The MailTipsAccessScope parameter specifies a mail-enabled security group in the internal organization that contains users whose free/busy information is accessible by an external organization. You can use any value that uniquely identifies the group.' MailboxMoveEnabled = 'Boolean | Optional | The MailboxMoveEnabled parameter specifies whether the organization relationship enables moving mailboxes to or from the external organization.' Ensure = 'String | Optional | Specify if the OrganizationRelationship should exist or not. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' OauthApplicationId = 'String | Optional | The OAuthApplicationId is used in cross-tenant mailbox migrations to specify the application ID of the mailbox migration app that you consented to.' TargetOwaURL = 'String | Optional | The TargetOwaURL parameter specifies the Outlook on the web (formerly Outlook Web App) URL of the external organization that''s defined in the organization relationship. It is used for Outlook on the web redirection in a cross-premise Exchange scenario. Configuring this attribute enables users in the organization to use their current Outlook on the web URL to access Outlook on the web in the external organization.' DeliveryReportEnabled = 'Boolean | Optional | The DeliveryReportEnabled parameter specifies whether Delivery Reports should be shared over the organization relationship.' MailTipsAccessEnabled = 'Boolean | Optional | The MailTipsAccessEnabled parameter specifies whether MailTips for users in this organization are returned over this organization relationship.' PhotosEnabled = 'Boolean | Optional | The PhotosEnabled parameter specifies whether photos for users in the internal organization are returned over the organization relationship.' TargetSharingEpr = 'String | Optional | The TargetSharingEpr parameter specifies the URL of the target Exchange Web Services for the external organization.' TargetApplicationUri = 'String | Optional | The TargetApplicationUri parameter specifies the target Uniform Resource Identifier (URI) of the external organization. The TargetApplicationUri parameter is specified by Exchange when requesting a delegated token to retrieve free and busy information, for example, mail.contoso.com.' FreeBusyAccessEnabled = 'Boolean | Optional | The FreeBusyAccessEnabled parameter specifies whether the organization relationship should be used to retrieve free/busy information from the external organization.' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether to enable the organization relationship.' FreeBusyAccessScope = 'String | Optional | The FreeBusyAccessScope parameter specifies a mail-enabled security group in the internal organization that contains users whose free/busy information is accessible by an external organization. You can use any value that uniquely identifies the group.' } ) OutboundConnectors = @( @{ TlsSettings = 'String | Optional | The TlsSettings parameter specifies the TLS authentication level that''s used for outbound TLS connections established by this Outbound connector. | EncryptionOnly / CertificateValidation / DomainValidation' RecipientDomains = @( 'String | Optional | The RecipientDomains parameter specifies the domain that the Outbound connector routes mail to. You can specify multiple domains separated by commas.' ) ConnectorSource = 'String | Optional | The ConnectorSource parameter specifies how the connector is created. DO NOT CHANGE THIS! | Default / Migrated / HybridWizard' Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ValidationRecipients = @( 'String | Optional | The ValidationRecipients parameter specifies the email addresses of the validation recipients for the Outbound connector. You can specify multiple email addresses separated by commas.' ) ConnectorType = 'String | Optional | The ConnectorType parameter specifies a category for the domains that are serviced by the connector. | Partner / OnPremises' TlsDomain = 'String | Optional | The TlsDomain parameter specifies the domain name that the Outbound connector uses to verify the FQDN of the target certificate when establishing a TLS secured connection. This parameter is only used if the TlsSettings parameter is set to DomainValidation. Valid input for the TlsDomain parameter is an SMTP domain. You can use a wildcard character to specify all subdomains of a specified domain, as shown in the following example: *.contoso.com. However, you can''t embed a wildcard character, as shown in the following example: domain.*.contoso.com' CloudServicesMailEnabled = 'Boolean | Optional | The CloudServicesMailEnabled parameter specifies whether the connector is used for hybrid mail flow between an on-premises Exchange environment and Microsoft Office 365. Specifically, this parameter controls how certain internal X-MS-Exchange-Organization-* message headers are handled in messages that are sent between accepted domains in the on-premises and cloud organizations. These headers are collectively known as cross-premises headers. DO NOT USE MANUALLY!' IsTransportRuleScoped = 'Boolean | Optional | The IsTransportRuleScoped parameter specifies whether the Outbound connector is associated with a transport rule (also known as a mail flow rule).' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' SenderRewritingEnabled = 'Boolean | Optional | The SenderRewritingEnabled parameter specifies that all messages that normally qualify for SRS rewriting are rewritten for routing through the on-premises email system.' RouteAllMessagesViaOnPremises = 'Boolean | Optional | The RouteAllMessagesViaOnPremises parameter specifies that all messages serviced by this connector are first routed through the on-premises messaging system (Centralized mailrouting).' AllAcceptedDomains = 'Boolean | Optional | The AllAcceptedDomains parameter specifies whether the Outbound connector is used in hybrid organizations where message recipients are in accepted domains of the cloud-based organization.' Identity = 'String | Required | The Identity parameter specifies the outbound connector that you want to modify.' TestMode = 'Boolean | Optional | The TestMode parameter specifies whether you want to enabled or disable test mode for the Outbound connector.' SmartHosts = @( 'String | Optional | The SmartHosts parameter specifies the smart hosts the Outbound connector uses to route mail. This parameter is required if you set the UseMxRecord parameter to $false and must be specified on the same command line.' ) UseMXRecord = 'Boolean | Optional | Specifies whether connector should use MXRecords for target resolution.' Enabled = 'Boolean | Optional | Specifies whether connector is enabled.' } ) OwaMailboxPolicies = @( @{ MessagePreviewsDisabled = 'Boolean | Optional | No description available.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PersonalAccountCalendarsEnabled = 'Boolean | Optional | The PersonalAccountCalendarsEnabled parameter specifies whether to allow users to connect to their personal Outlook.com or Google Calendar in Outlook on the web.' ExplicitLogonEnabled = 'Boolean | Optional | The ExplicitLogonEnabled parameter specifies whether to allow a user to open someone else''s mailbox in Outlook on the web (provided that user has permissions to the mailbox).' ShowOnlineArchiveEnabled = 'Boolean | Optional | No description available.' BlockedFileTypes = @( 'String | Optional | The BlockedFileTypes parameter specifies a list of attachment file types (file extensions) that can''t be saved locally or viewed from Outlook on the web.' ) AllowedMimeTypes = @( 'String | Optional | The AllowedMimeTypes parameter specifies the MIME extensions of attachments that allow the attachments to be saved locally or viewed from Outlook on the web.' ) ConditionalAccessPolicy = 'String | Optional | The ConditionalAccessPolicy parameter specifies the Outlook on the Web Policy for limited access. For this feature to work properly, you also need to configure a Conditional Access policy in the Azure Active Directory Portal. | Off / ReadOnly / ReadOnlyPlusAttachmentsBlocked' TeamSnapCalendarsEnabled = 'Boolean | Optional | The TeamSnapCalendarsEnabled parameter specifies whether to allow users to connect to their personal TeamSnap calendars in Outlook on the web.' LocalEventsEnabled = 'Boolean | Optional | The LocalEventsEnabled parameter specifies whether local events calendars are available in Outlook on the web.' WacViewingOnPublicComputersEnabled = 'Boolean | Optional | The WacViewingOnPublicComputersEnabled parameter specifies whether to enable or disable web viewing of supported Office documents in public computer sessions in Office Online Server. ' OutlookBetaToggleEnabled = 'Boolean | Optional | The OutlookBetaToggleEnabled parameter specifies whether to enable or disable the Outlook on the web Preview toggle. The Preview toggle allows users to try the new Outlook on the web experience.' ExternalSPMySiteHostURL = 'String | Optional | The ExternalSPMySiteHostURL specifies the My Site Host URL for external users.' OnSendAddinsEnabled = 'Boolean | Optional | The OnSendAddinsEnabled parameter specifies whether to enable or disable on send add-ins in Outlook on the web (add-ins that support events when a user clicks Send).' ForceSaveMimeTypes = @( 'String | Optional | The ForceSaveMimeTypes parameter specifies the MIME extensions in attachments that only allow the attachments to be saved locally (not opened).' ) JournalEnabled = 'Boolean | Optional | The JournalEnabled parameter specifies whether the Journal folder is available in Outlook on the web.' DisplayPhotosEnabled = 'Boolean | Optional | The DisplayPhotosEnabled parameter specifies whether users see sender photos in Outlook on the web.' GroupCreationEnabled = 'Boolean | Optional | The GroupCreationEnabled parameter specifies whether Office 365 group creation is available in Outlook on the web.' ForceSaveFileTypes = @( 'String | Optional | The ForceSaveFileTypes parameter specifies the attachment file types (file extensions) that can only be saved from Outlook on the web (not opened).' ) ChangeSettingsAccountEnabled = 'Boolean | Optional | No description available.' NpsSurveysEnabled = 'Boolean | Optional | The NpsSurveysEnabled parameter specifies whether to enable or disable the Net Promoter Score (NPS) survey in Outlook on the web. The survey allows uses to rate Outlook on the web on a scale of 1 to 5, and to provide feedback and suggested improvements in free text.' AdditionalAccountsEnabled = 'Boolean | Optional | No description available.' TextMessagingEnabled = 'Boolean | Optional | The TextMessagingEnabled parameter specifies whether users can send and receive text messages in Outlook on the web.' SearchFoldersEnabled = 'Boolean | Optional | The SearchFoldersEnabled parameter specifies whether Search Folders are available in Outlook on the web.' UserVoiceEnabled = 'Boolean | Optional | The UserVoiceEnabled parameter specifies whether to enable or disable Outlook UserVoice in Outlook on the web. Outlook UserVoice is a customer feedback area that''s available in Office 365.' ForceWacViewingFirstOnPublicComputers = 'Boolean | Optional | The ForceWacViewingFirstOnPublicComputers parameter specifies whether public computers must first preview an Office file as a web page in Office Online Server before opening the file in the local application.' InterestingCalendarsEnabled = 'Boolean | Optional | The InterestingCalendarsEnabled parameter specifies whether interesting calendars are available in Outlook on the web.' GlobalAddressListEnabled = 'Boolean | Optional | The GlobalAddressListEnabled parameter specifies whether the global address list is available in Outlook on the web.' IRMEnabled = 'Boolean | Optional | The IRMEnabled parameter specifies whether Information Rights Management (IRM) features are available in Outlook on the web.' Ensure = 'String | Optional | Specify if the OWA Mailbox Policy should exist or not. | Present / Absent' DirectFileAccessOnPublicComputersEnabled = 'Boolean | Optional | The DirectFileAccessOnPrivateComputersEnabled parameter specifies the left-click options for attachments in Outlook on the web for public computer sessions.' DirectFileAccessOnPrivateComputersEnabled = 'Boolean | Optional | The DirectFileAccessOnPrivateComputersEnabled parameter specifies the left-click options for attachments in Outlook on the web for private computer sessions. ' SetPhotoURL = 'String | Optional | The SetPhotoURL parameter controls where users go to select their photo. Note that you can''t specify a URL that contains one or more picture files, as there is no mechanism to copy a URL photo to the properties of the users'' Exchange Online mailboxes.' ItemsToOtherAccountsEnabled = 'Boolean | Optional | No description available.' SignaturesEnabled = 'Boolean | Optional | The SignaturesEnabled parameter specifies whether to enable or disable the use of signatures in Outlook on the web.' WacOMEXEnabled = 'Boolean | Optional | The WacOMEXEnabled parameter specifies whether to enable or disable apps for Outlook in Outlook on the web in Office Online Server.' WacExternalServicesEnabled = 'Boolean | Optional | The WacExternalServicesEnabled parameter specifies whether to enable or disable external services when viewing documents in Outlook on the web (for example, machine translation) by using Office Online Server.' InternalSPMySiteHostURL = 'String | Optional | The InternalSPMySiteHostURL specifies the My Site Host URL for internal users.' RemindersAndNotificationsEnabled = 'Boolean | Optional | The RemindersAndNotificationsEnabled parameter specifies whether notifications and reminders are enabled in Outlook on the web.' SatisfactionEnabled = 'Boolean | Optional | The SatisfactionEnabled parameter specifies whether to enable or disable the satisfaction survey.' InstantMessagingType = 'String | Optional | The InstantMessagingType parameter specifies the type of instant messaging provider in Outlook on the web. | None / Ocs' ActiveSyncIntegrationEnabled = 'Boolean | Optional | The ActiveSyncIntegrationEnabled parameter specifies whether to enable or disable Exchange ActiveSync settings in Outlook on the web. ' AccountTransferEnabled = 'Boolean | Optional | The AccountTransferEnabled parameter specifies whether to enable or disable QR code sign-in. By default, QR code sign-in is enabled.' PersonalAccountsEnabled = 'Boolean | Optional | No description available.' DefaultTheme = 'String | Optional | The DefaultTheme parameter specifies the default theme that''s used in Outlook on the web when the user hasn''t selected a theme. The default value is blank ($null).' SetPhotoEnabled = 'Boolean | Optional | The SetPhotoEnabled parameter specifies whether users can add, change, and remove their sender photo in Outlook on the web.' ClassicAttachmentsEnabled = 'Boolean | Optional | The ClassicAttachmentsEnabled parameter specifies whether users can attach local files as regular email attachments in Outlook on the web.' AllowCopyContactsToDeviceAddressBook = 'Boolean | Optional | The AllowCopyContactsToDeviceAddressBook parameter specifies whether users can copy the contents of their Contacts folder to a mobile device''s native address book when using Outlook on the web for devices.' UseISO885915 = 'Boolean | Optional | The UseISO885915 parameter specifies whether to use the character set ISO8859-15 instead of ISO8859-1 in Outlook on the web.' OutboundCharset = 'String | Optional | The OutboundCharset parameter specifies the character set that''s used for outgoing messages in Outlook on the web. | AutoDetect / AlwaysUTF8 / UserLanguageChoice' PlacesEnabled = 'Boolean | Optional | The PlacesEnabled parameter specifies whether to enable or disable Places in Outlook on the web. Places lets users search, share, and map location details by using Bing.' ReportJunkEmailEnabled = 'Boolean | Optional | The ReportJunkEmailEnabled parameter specifies whether users can report messages to Microsoft or unsubscribe from messages in Outlook on the web. ' ForceWacViewingFirstOnPrivateComputers = 'Boolean | Optional | The ForceWacViewingFirstOnPrivateComputers parameter specifies whether private computers must first preview an Office file as a web page in Office Online Server (formerly known as Office Web Apps Server and Web Access Companion Server) before opening the file in the local application.' RecoverDeletedItemsEnabled = 'Boolean | Optional | The RecoverDeletedItemsEnabled parameter specifies whether a user can use Outlook Web App to view, recover, or delete permanently items that have been deleted from the Deleted Items folder.' NotesEnabled = 'Boolean | Optional | The NotesEnabled parameter specifies whether the Notes folder is available in Outlook on the web.' OrganizationEnabled = 'Boolean | Optional | When the OrganizationEnabled parameter is set to $false, the Automatic Reply option doesn''t include external and internal options, the address book doesn''t show the organization hierarchy, and the Resources tab in Calendar forms is disabled.' WebPartsFrameOptionsType = 'String | Optional | The WebPartsFrameOptionsType parameter specifies what sources can access web parts in IFRAME or FRAME elements in Outlook on the web. | None / SameOrigin / Deny' ActionForUnknownFileAndMIMETypes = 'String | Optional | The ActionForUnknownFileAndMIMETypes parameter specifies how to handle file types that aren''t specified in the Allow, Block, and Force Save lists for file types and MIME types | Allow / ForceSave / Block' WacEditingEnabled = 'Boolean | Optional | The WacEditingEnabled parameter specifies whether to enable or disable editing documents in Outlook on the web by using Office Online Server (formerly known as Office Web Apps Server and Web Access Companion Server). ' PublicFoldersEnabled = 'Boolean | Optional | The PublicFoldersEnabled parameter specifies whether a user can browse or read items in public folders in Outlook Web App.' BookingsMailboxCreationEnabled = 'Boolean | Optional | No description available.' ForceSaveAttachmentFilteringEnabled = 'Boolean | Optional | The ForceSaveAttachmentFilteringEnabled parameter specifies whether files are filtered before they can be saved from Outlook on the web.' LogonAndErrorLanguage = 'SInt32 | Optional | The LogonAndErrorLanguage parameter specifies the language that used in Outlook on the web for forms-based authentication and for error messages when a user''s current language setting can''t be read. A valid value is a supported Microsoft Windows Language Code Identifier (LCID). For example, 1033 is US English.' SkipCreateUnifiedGroupCustomSharepointClassification = 'Boolean | Optional | The SkipCreateUnifiedGroupCustomSharepointClassification parameter specifies whether to skip a custom SharePoint page during the creation of Office 365 Groups in Outlook web app.' AllAddressListsEnabled = 'Boolean | Optional | The AllAddressListsEnabled parameter specifies which address lists are available in Outlook on the web.' ExternalImageProxyEnabled = 'Boolean | Optional | The ExternalImageProxyEnabled parameter specifies whether to load all external images through the Outlook external image proxy.' ProjectMocaEnabled = 'Boolean | Optional | The ProjectMocaEnabled parameter enables or disables access to Project Moca in Outlook on the web.' PremiumClientEnabled = 'Boolean | Optional | The PremiumClientEnabled parameter controls the availability of the full version of Outlook Web App.' BlockedMimeTypes = @( 'String | Optional | The BlockedMimeTypes parameter specifies MIME extensions in attachments that prevent the attachments from being saved locally or viewed from Outlook on the web.' ) UMIntegrationEnabled = 'Boolean | Optional | The UMIntegrationEnabled parameter specifies whether Unified Messaging (UM) integration is enabled in Outlook on the web.' FeedbackEnabled = 'Boolean | Optional | The FeedbackEnabled parameter specifies whether to enable or disable inline feedback surveys in Outlook on the web.' ThemeSelectionEnabled = 'Boolean | Optional | The ThemeSelectionEnabled parameter specifies whether users can change the theme in Outlook on the web.' WeatherEnabled = 'Boolean | Optional | The WeatherEnabled parameter specifies whether to enable or disable weather information in the calendar in Outlook on the web.' IsDefault = 'Boolean | Optional | The IsDefault switch specifies whether the Outlook on the web policy is the default policy that''s used to configure the Outlook on the web settings for new mailboxes.' AllowedFileTypes = @( 'String | Optional | The AllowedFileTypes parameter specifies the attachment file types (file extensions) that can be saved locally or viewed from Outlook on the web.' ) RulesEnabled = 'Boolean | Optional | The RulesEnabled parameter specifies whether a user can view, create, or modify server-side rules in Outlook on the web.' OneWinNativeOutlookEnabled = 'Boolean | Optional | The OneWinNativeOutlookEnabled parameter controls the availability of the new Outlook for Windows App.' FreCardsEnabled = 'Boolean | Optional | The FreCardsEnabled parameter specifies whether the theme, signature, and phone cards are available in Outlook on the web.' Name = 'String | Required | The Name parameter specifies the unique name for the policy. The maximum length is 64 characters.' InstantMessagingEnabled = 'Boolean | Optional | The InstantMessagingEnabled parameter specifies whether instant messaging is available in Outlook on the web.' AdditionalStorageProvidersAvailable = 'Boolean | Optional | The AdditionalStorageProvidersAvailable parameter specifies whether to allow additional storage providers (for example, Box, Dropbox, Facebook, Google Drive, Egnyte, personal OneDrive) attachments in Outlook on the web.' UseGB18030 = 'Boolean | Optional | The UseGB18030 parameter specifies whether to use the GB18030 character set instead of GB2312 in Outlook on the web.' OWALightEnabled = 'Boolean | Optional | The OWALightEnabled parameter controls the availability of the light version of Outlook on the web.' PrintWithoutDownloadEnabled = 'Boolean | Optional | The PrintWithoutDownloadEnabled specifies whether to allow printing of supported files without downloading the attachment in Outlook on the web.' SaveAttachmentsToCloudEnabled = 'Boolean | Optional | The SaveAttachmentsToCloudEnabled parameter specifies whether users can save regular email attachments to the cloud.' UniqueId = 'String | Required | Unique ID to identify this specific object' WacViewingOnPrivateComputersEnabled = 'Boolean | Optional | The WacViewingOnPrivateComputersEnabled parameter specifies whether to enable or disable web viewing of supported Office documents private computer sessions in Office Online Server (formerly known as Office Web Apps Server and Web Access Companion Server). By default, all Outlook on the web sessions are considered to be on private computers.' ReferenceAttachmentsEnabled = 'Boolean | Optional | The ReferenceAttachmentsEnabled parameter specifies whether users can attach files from the cloud as linked attachments in Outlook on the web.' DisableFacebook = 'Boolean | Optional | The DisableFacebook switch specifies whether users can synchronize their Facebook contacts to their Contacts folder in Outlook on the web. By default, Facebook integration is enabled.' PhoneticSupportEnabled = 'Boolean | Optional | The PhoneticSupportEnabled parameter specifies phonetically spelled entries in the address book. This parameter is available for use in Japan.' } ) PartnerApplications = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | The Name parameter specifies a new name for the partner application.' AcceptSecurityIdentifierInformation = 'Boolean | Optional | The AcceptSecurityIdentifierInformation parameter specifies whether Exchange should accept security identifiers (SIDs) from another trusted Active Directory forest for the partner application.' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the partner application is enabled.' Ensure = 'String | Optional | Specify if the Partner Application should exist or not. | Present / Absent' ApplicationIdentifier = 'String | Optional | The ApplicationIdentifier parameter specifies a unique application identifier for the partner application that uses an authorization server.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) LinkedAccount = 'String | Optional | The LinkedAccount parameter specifies a linked Active Directory user account for the application.' AccountType = 'String | Optional | The AccountType parameter specifies the type of Microsoft account that''s required for the partner application. | OrganizationalAccount / ConsumerAccount' } ) PerimeterConfiguration = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) GatewayIPAddresses = @( 'String | Optional | Use the GatewayIPAddresses parameter to create or modify a list of gateway server IP addresses to add to IP safelists.' ) Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' } PhishSimOverrideRules = @( @{ Comment = 'String | Optional | An optional comment for the override rule.' Ensure = 'String | Optional | Ensures the presence or absence of the configuration. | Present / Absent' SenderIpRanges = @( 'String | Optional | The IP ranges for the override rule.' ) Domains = @( 'String | Optional | The domains for the override rule.' ) Policy = 'String | Optional | The phishing simulation override policy that''s associated with the rule.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The unique identifier (GUID or name) of the override rule. This parameter is mandatory.' } ) Places = @( @{ Street = 'String | Optional | The Street parameter specifies the room''s physical address.' Tags = @( 'String | Optional | The Tags parameter specifies additional features of the room (for example, details like the type of view or furniture type).' ) ParentId = 'String | Optional | The ParentId parameter specifies the ID of a Place in the parent location hierarchy in Microsoft Places.' DisplayName = 'String | Optional | The display name of the place.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) FloorLabel = 'String | Optional | The FloorLabel parameter specifies a descriptive label for the floor that the room is on. If the value contains spaces, enclose the value in quotation marks.' Floor = 'String | Optional | The Floor parameter specifies the floor number that the room is on.' MTREnabled = 'Boolean | Optional | The MTREnabled parameter identifies the room as configured with a Microsoft Teams room system. You can add Teams room systems as audio sources in Teams meetings that involve the room.' Label = 'String | Optional | The Label parameter specifies a descriptive label for the room (for example, a number or name). If the value contains spaces, enclose the value in quotation marks.' AudioDeviceName = 'String | Optional | The AudioDeviceName parameter specifies the name of the audio device in the room. If the value contains spaces, enclose the value in quotation marks.' Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' Desks = @( 'String | Optional | N/A' ) ParentType = 'String | Optional | The ParentType parameter specifies the parent type of the ParentId in Microsoft Places. Valid values are: Floor, Section | Floor / Section / None' Capacity = 'UInt32 | Optional | The Capacity parameter specifies the capacity of the room. A valid value is an integer.' GeoCoordinates = 'String | Optional | The GeoCoordinates parameter specifies the room''s location in latitude, longitude and (optionally) altitude coordinates.' CountryOrRegion = 'String | Optional | The CountryOrRegion parameter specifies the room''s country or region. A valid value is a valid ISO 3166-1 two-letter country code (for example, AU for Australia) or the corresponding friendly name for the country (which might be different from the official ISO 3166 Maintenance Agency short name).' PostalCode = 'String | Optional | The PostalCode parameter specifies the room''s postal code.' State = 'String | Optional | The State parameter specifies the room''s state or province.' Identity = 'String | Required | The Identity parameter specifies the room mailbox that you want to modify. You can use any value that uniquely identifies the room.' DisplayDeviceName = 'String | Optional | The DisplayDeviceName parameter specifies the name of the display device in the room. If the value contains spaces, enclose the value in quotation marks.' City = 'String | Optional | The City parameter specifies the room''s city. If the value contains spaces, enclose the value in quotation marks.' Building = 'String | Optional | The Building parameter specifies the building name or building number that the room is in. If the value contains spaces, enclose the value in quotation marks.' VideoDeviceName = 'String | Optional | The VideoDeviceName parameter specifies the name of the video device in the room. If the value contains spaces, enclose the value in quotation marks.' IsWheelChairAccessible = 'Boolean | Optional | The IsWheelChairAccessible parameter specifies whether the room is wheelchair accessible.' Phone = 'String | Optional | The Phone parameter specifies the room''s telephone number.' } ) PoliciesTipConfig = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The Name parameter specifies the custom Policy Tip you want to modify.' UniqueId = 'String | Required | Unique ID to identify this specific object' Value = 'String | Optional | The Value parameter specifies the text that''s displayed by the Policy Tip.' Ensure = 'String | Optional | Specify if the Policy Tip Config should exist or not. | Present / Absent' } ) QuarantinePolicies = @( @{ EndUserQuarantinePermissionsValue = 'UInt32 | Optional | The EndUserQuarantinePermissionsValue parameter specifies the end-user permissions for the quarantine policy.' CustomDisclaimer = 'String | Optional | This parameter is reserved for internal Microsoft use.' EndUserSpamNotificationCustomFromAddress = 'String | Optional | The EndUserSpamNotificationCustomFromAddress specifies the email address of an existing internal sender to use as the sender for quarantine notifications. To set this parameter back to the default email address quarantine@messaging.microsoft.com, use the value $null.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MultiLanguageSetting = @( 'String | Optional | The MultiLanguageSetting parameter specifies the language of quarantine notifications.' ) ESNEnabled = 'Boolean | Optional | The ESNEnabled parameter specifies whether to enable quarantine notifications (formerly known as end-user spam notifications) for the policy.' MultiLanguageSenderName = @( 'String | Optional | The MultiLanguageSenderName parameter specifies the email sender''s display name to use in quarantine notifications.' ) EndUserSpamNotificationFrequencyInDays = 'String | Optional | This parameter is reserved for internal Microsoft use.' Ensure = 'String | Optional | Specifies if this QuarantinePolicy should exist. | Present / Absent' EsnCustomSubject = @( 'String | Optional | The EsnCustomSubject parameter specifies the text to use in the Subject field of quarantine notifications.This setting is available only in the built-in quarantine policy named DefaultGlobalTag that controls global quarantine policy settings.' ) Identity = 'String | Required | The Identity parameter specifies the QuarantinePolicy you want to modify.' OrganizationBrandingEnabled = 'Boolean | Optional | The OrganizationBrandingEnabled parameter enables or disables organization branding in the end-user quarantine notification messages.' MultiLanguageCustomDisclaimer = @( 'String | Optional | The MultiLanguageCustomDisclaimer parameter specifies the custom disclaimer text to use near the bottom of quarantine notifications.' ) EndUserSpamNotificationFrequency = 'String | Optional | The EndUserSpamNotificationFrequency parameter species how often quarantine notifications are sent to users. Valid values are: 04:00:00 (4 hours),1.00:00:00 (1 day),7.00:00:00 (7 days)' QuarantinePolicyType = 'String | Optional | The QuarantinePolicyType parameter filters the results by the specified quarantine policy type. Valid values are: QuarantinePolicy, GlobalQuarantinePolicy' } ) RecipientPermissions = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Trustee = 'String | Required | The account to give the permission to.' Ensure = 'String | Optional | Present ensures the group exists, absent ensures it is removed | Present / Absent' AccessRights = @( 'String | Optional | The access rights granted to the account. Only ''SendAs'' is supported.' ) Identity = 'String | Required | The mailbox the permission should be given on.' } ) RemoteDomains = @( @{ CharacterSet = 'String | Optional | The CharacterSet parameter specifies a character set for MIME messages without defined character sets that are sent from your organization to recipients in the remote domain.' DisplaySenderName = 'Boolean | Optional | The DisplaySenderName parameter specifies whether to show the sender''s Display Name in the From email address for messages sent to recipients in the remote domain.' MeetingForwardNotificationEnabled = 'Boolean | Optional | The MeetingForwardNotificationEnabled parameter specifies whether to enable meeting forward notifications for recipients in the remote domain.' Name = 'String | Optional | The Name parameter specifies a unique name for the remote domain object. The maximum length is 64 characters. If the value contains spaces, enclose the value in quotation marks.' Ensure = 'String | Optional | Specify if the RemoteDomain should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TNEFEnabled = 'Boolean | Optional | The TNEFEnabled parameter specifies whether Transport Neutral Encapsulation Format (TNEF) message encoding is used on messages sent to the remote domain.' UseSimpleDisplayName = 'Boolean | Optional | The UseSimpleDisplayName parameter specifies whether the sender''s simple display name is used for the From email address in messages sent to recipients in the remote domain.' LineWrapSize = 'String | Optional | The LineWrapSize parameter specifies the line-wrap size for messages to recipients in the remote domain. Valid values are an integer from 0 through 132 or the value to unlimited. The default value is unlimited.' PreferredInternetCodePageForShiftJis = 'String | Optional | The PreferredInternetCodePageForShiftJis parameter specifies the specific code page to use for Shift JIS character encoding in messages that are sent to recipients in the remote domain. | 50220 / 50221 / 50222 / Undefined' TrustedMailOutboundEnabled = 'Boolean | Optional | The TrustedMailOutboundEnabled parameter specifies whether messages sent to recipients in the remote domain are treated as trusted messages.' NonMimeCharacterSet = 'String | Optional | The NonMimeCharacterSet parameter specifies a character set for plain text messages without defined character sets that are sent from your organization to recipients in the remote domain.' TargetDeliveryDomain = 'Boolean | Optional | The TargetDeliveryDomain parameter specifies whether the remote domain is used in cross-forest deployments to generate target email addresses for new mail users that represent users in the other organization (for example, all mailboxes hosted on Exchange Online are represented as mail users in your on-premises organization).' ContentType = 'String | Optional | The ContentType parameter specifies the outbound message content type and formatting. | MimeHtmlText / MimeText / MimeHtml' AutoForwardEnabled = 'Boolean | Optional | The AutoForwardEnabled parameter specifies whether to allow messages that are auto-forwarded by client email programs in your organization.' Identity = 'String | Required | Specify the Identity for the RemoteDomain.' TrustedMailInboundEnabled = 'Boolean | Optional | The TrustedMailInboundEnabled parameter specifies whether messages from senders in the remote domain are treated as trusted messages.' DeliveryReportEnabled = 'Boolean | Optional | The DeliveryReportEnabled parameter specifies whether to allow delivery reports from client software in your organization to recipients in the remote domain.' ByteEncoderTypeFor7BitCharsets = 'String | Optional | The ByteEncoderTypeFor7BitCharsets parameter specifies the 7-bit transfer encoding method for MIME format for messages sent to this remote domain. | Use7Bit / UseQP / UseBase64 / UseQPHtmlDetectTextPlain / UseBase64HtmlDetectTextPlain / UseQPHtml7BitTextPlain / UseBase64Html7BitTextPlain / Undefined' RequiredCharsetCoverage = 'SInt32 | Optional | The RequiredCharsetCoverage parameter specifies a percentage threshold for characters in a message that must match to apply your organization''s preferred character set before switching to automatic character set detection.' DomainName = 'String | Optional | The DomainName parameter specifies the SMTP domain that you want to establish as a remote domain. A valid value is an SMTP domain (for example, contoso.com). The maximum length is 256 characters.' AutoReplyEnabled = 'Boolean | Optional | The AutoReplyEnabled parameter specifies whether to allow messages that are automatic replies from client email programs in your organization (for example, automatic reply messages that are generated by rules in Outlook).' NDREnabled = 'Boolean | Optional | The NDREnabled parameter specifies whether to allow non-delivery reports (also known NDRs or bounce messages) from your organization to recipients in the remote domain.' AllowedOOFType = 'String | Optional | The AllowedOOFType parameter specifies the type of automatic replies or out-of-office (also known as OOF) notifications than can be sent to recipients in the remote domain. Valid values are: External, ExternalLegacy, InternalLegacy or None | External / ExternalLegacy / InternalLegacy / None' IsInternal = 'Boolean | Optional | The IsInternal parameter specifies whether the recipients in the remote domain are considered to be internal recipients.' } ) ReportSubmissionPolicy = @{ ReportJunkToCustomizedAddress = 'Boolean | Optional | The ReportJunkToCustomizedAddress parameter specifies whether to send user reported messages from Outlook (using Microsoft or third-party reporting tools) to the reporting mailbox as part of reporting in Outlook. ' ReportNotJunkAddresses = @( 'String | Optional | The ReportNotJunkAddresses parameter specifies the email address of the reporting mailbox in Exchange Online to receive user reported messages in reporting in Outlook using Microsoft or third-party reporting tools in Outlook.' ) ReportNotJunkToCustomizedAddress = 'Boolean | Optional | The ReportNotJunkToCustomizedAddress parameter specifies whether to send user reported messages from Outlook (using Microsoft or third-party reporting tools) to the reporting mailbox as part of reporting in Outlook.' ReportJunkAddresses = @( 'String | Optional | The ReportJunkAddresses parameter specifies the email address of the reporting mailbox in Exchange Online to receive user reported messages in reporting in Outlook using Microsoft or third-party reporting tools in Outlook.' ) PreSubmitMessage = 'String | Optional | The PreSubmitMessage parameter specifies the custom pop-up message text to use in Outlook notifications before users report messages. ' PreSubmitMessageEnabled = 'Boolean | Optional | The PreSubmitMessageEnabled parameter enables or disables the pop-up Outlook notifications that users see before they report messages using Microsoft reporting tools.' PreSubmitMessageTitle = 'String | Optional | The PreSubmitMessage parameter parameter specifies the custom pop-up message title to use in Outlook notifications before users report messages.' ReportPhishAddresses = @( 'String | Optional | The ReportPhishAddresses parameter specifies the email address of the reporting mailbox in Exchange Online to receive user reported messages in reporting in Outlook using Microsoft or third-party reporting tools in Outlook.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ReportPhishToCustomizedAddress = 'Boolean | Optional | The ReportPhishToCustomizedAddress parameter specifies whether to send user reported messages from Outlook (using Microsoft or third-party reporting tools) to the reporting mailbox as part of reporting in Outlook.' ThirdPartyReportAddresses = @( 'String | Optional | Use the ThirdPartyReportAddresses parameter to specify the email address of the reporting mailbox when you''re using a third-party product for user submissions instead of reporting in Outlook.' ) Ensure = 'String | Optional | Specifies if this report submission policy should exist. | Present / Absent' EnableReportToMicrosoft = 'Boolean | Optional | The EnableReportToMicrosoft parameter specifies whether Microsoft integrated reporting experience is enabled or disabled.' EnableThirdPartyAddress = 'Boolean | Optional | The EnableThirdPartyAddress parameter specifies whether you''re using third-party reporting tools in Outlook instead of Microsoft tools to send messages to the reporting mailbox in Exchange Online.' EnableUserEmailNotification = 'Boolean | Optional | The EnableUserEmailNotification parameter species whether users receive result messages after an admin reviews and marks the reported messages as junk, not junk, or phishing.' EnableOrganizationBranding = 'Boolean | Optional | The EnableOrganizationBranding parameter specifies whether to show the company logo in the footer of result messages that users receive after an admin reviews and marks the reported messages as junk, not junk, or phishing.' DisableQuarantineReportingOption = 'Boolean | Optional | The DisableQuarantineReportingOption parameter allows or prevents users from reporting messages in quarantine.' EnableCustomNotificationSender = 'Boolean | Optional | The EnableCustomNotificationSender parameter specifies whether a custom sender email address is used for result messages after an admin reviews and marks the reported messages as junk, not junk, or phishing.' JunkReviewResultMessage = 'String | Optional | The JunkReviewResultMessage parameter specifies the custom text to use in result messages after an admin reviews and marks the reported messages as junk.' PostSubmitMessage = 'String | Optional | The PostSubmitMessage parameter specifies the custom pop-up message text to use in Outlook notifications after users report messages.' PostSubmitMessageEnabled = 'Boolean | Optional | The PostSubmitMessageEnabled parameter enables or disables the pop-up Outlook notifications that users see after they report messages using Microsoft reporting tools.' PostSubmitMessageTitle = 'String | Optional | The PostSubmitMessage parameter parameter specifies the custom pop-up message title to use in Outlook notifications after users report messages.' PhishingReviewResultMessage = 'String | Optional | The PhishingReviewResultMessage parameter specifies the custom text to use in result messages after an admin reviews and marks the reported messages as phishing.' NotJunkReviewResultMessage = 'String | Optional | The NotJunkReviewResultMessage parameter specifies the custom text to use in result messages after an admin reviews and marks the reported messages as not junk.' NotificationFooterMessage = 'String | Optional | The NotificationFooterMessage parameter specifies the custom footer text to use in email notifications after an admin reviews and marks the reported messages as junk, not junk, or phishing.' NotificationSenderAddress = 'String | Optional | The NotificationSenderAddress parameter specifies the sender email address to use in result messages after an admin reviews and marks the reported messages as junk, not junk, or phishing.' } ReportSubmissionRule = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specifies if this report submission rule should exist. | Present / Absent' Identity = 'String | Optional | The Identity parameter specifies the report submission rule that you want to modify.' SentTo = @( 'String | Optional | The SentTo parameter specifies the email address of the reporting mailbox in Exchange Online where user reported messages are sent.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time.' } ResourceConfiguration = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ResourcePropertySchema = @( 'String | Optional | The ResourcePropertySchema parameter specifies the custom resource property that you want to make available to room or equipment mailboxes. This parameter uses the syntax Room/<Text> or Equipment/<Text> where the <Text> value doesn''t contain spaces. For example, Room/Whiteboard or Equipment/Van.' ) Ensure = 'String | Optional | Specifies if this Outbound connector should exist. | Present / Absent' } RetentionPolicies = @( @{ Name = 'String | Optional | The Name parameter specifies a unique name for the retention policy.' Ensure = 'String | Optional | Specifies if this report submission rule should exist. | Present / Absent' RetentionId = 'String | Optional | The RetentionId parameter specifies the identity of the retention policy to make sure mailboxes moved between two Exchange organizations continue to have the same retention policy applied to them.' IsDefaultArbitrationMailbox = 'Boolean | Optional | The IsDefaultArbitrationMailbox switch configures this policy as the default retention policy for arbitration mailboxes in your Exchange Online organization. You don''t need to specify a value with this switch.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the name, distinguished name (DN), or GUID of the retention policy.' IsDefault = 'Boolean | Optional | The IsDefault switch specifies that this retention policy is the default retention policy. You don''t need to specify a value with this switch.' RetentionPolicyTagLinks = @( 'String | Optional | The RetentionPolicyTagLinks parameter specifies the identity of retention policy tags to associate with the retention policy. Mailboxes that get a retention policy applied have retention tags linked with that retention policy.' ) } ) RoleAssignmentPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | The Description parameter specifies the description that''s displayed when the role assignment policy is viewed using the Get-RoleAssignmentPolicy cmdlet.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if the Role Assignment Policy should exist or not. | Present / Absent' Roles = @( 'String | Optional | The Roles parameter specifies the management roles to assign to the role assignment policy when it''s created.' ) Name = 'String | Required | The Name parameter specifies the new name of the assignment policy. The maximum length is 64 characters.' IsDefault = 'Boolean | Optional | The IsDefault switch makes the assignment policy the default assignment policy.' } ) RoleGroups = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | The Description parameter specifies the description that''s displayed when the role group is viewed using the Get-RoleGroup cmdlet. Enclose the description in quotation marks' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if the Role Group should exist or not. | Present / Absent' Roles = @( 'String | Optional | The Roles parameter specifies the management roles to assign to the role group when it''s created. If a role name contains spaces, enclose the name in quotation marks. If you want to assign more that one role, separate the role names with commas.' ) Name = 'String | Required | The Name parameter specifies the name of the role. The maximum length of the name is 64 characters.' Members = @( 'String | Optional | The Members parameter specifies the mailboxes or mail-enabled USGs to add as a member of the role group. You can identify the user or group by the name, DN, or primary SMTP address value. You can specify multiple members separated by commas (Value1,Value2,...ValueN). If the value contains spaces, enclose the value in quotation marks' ) } ) SafeAttachmentPolicies = @( @{ Redirect = 'Boolean | Optional | The Redirect parameter specifies whether to send detected malware attachments to another email address. Valid values are: $true: Malware attachments are sent to the email address specified by the RedirectAddress parameter. $false: Malware attachments aren''t sent to another email address. This is the default value.' Enable = 'Boolean | Optional | Specify if this policy should be enabled. Default is $true.' Action = 'String | Optional | The Action parameter specifies the action for the Safe Attachments policy. | Block / Replace / Allow / DynamicDelivery' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' RedirectAddress = 'String | Optional | The RedirectAddress parameter specifies the email address where detected malware attachments are sent when the Redirect parameter is set to the value $true.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identity parameter specifies the name of the SafeAttachmentpolicy that you want to modify.' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' QuarantineTag = 'String | Optional | The QuarantineTag specifies the quarantine policy that''s used on messages that are quarantined as malware by Safe Attachments.' ActionOnError = 'Boolean | Optional | The ActionOnError parameter specifies the error handling option for Safe Attachments scanning (what to do if scanning times out or an error occurs). Valid values are: $true: The action specified by the Action parameter is applied to messages even when the attachments aren''t successfully scanned. $false: The action specified by the Action parameter isn''t applied to messages when the attachments aren''t successfully scanned. This is the default value.' } ) SafeAttachmentRules = @( @{ Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SentTo = @( 'String | Optional | The SentTo parameter specifies a condition that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) Identity = 'String | Required | The Identity parameter specifies the name of the SafeAttachment rule that you want to modify.' SafeAttachmentPolicy = 'String | Required | The SafeAttachmentPolicy parameter specifies the name of the SafeAttachment policy that''s associated with the SafeAttachment rule.' ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) Enabled = 'Boolean | Optional | Specify if this rule should be enabled. Default is $true.' } ) SafeLinksPolicies = @( @{ DisableUrlRewrite = 'Boolean | Optional | The DisableUrlRewrite parameter specifies whether to rewrite (wrap) URLs in email messages. Valid values are: $true: URLs in messages are not rewritten, but messages are still scanned by Safe Links prior to delivery. Time of click checks on links are done using the Safe Links API in supported Outlook clients (currently, Outlook for Windows and Outlook for Mac). Typically, we don''t recommend using this value. $false: URLs in messages are rewritten. API checks still occur on unwrapped URLs in supported clients if the user is in a valid Safe Links policy. This is the default value.' EnableForInternalSenders = 'Boolean | Optional | The EnableForInternalSenders parameter specifies whether the Safe Links policy is applied to messages sent between internal senders and internal recipients within the same Exchange Online organization.' EnableOrganizationBranding = 'Boolean | Optional | The EnableOrganizationBranding parameter specifies whether your organization''s logo is displayed on Safe Links warning and notification pages.' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EnableSafeLinksForOffice = 'Boolean | Optional | The EnableSafeLinksForOffice parameter specifies whether to enable Safe Links protection for supported Office desktop, mobile, or web apps.' TrackClicks = 'Boolean | Optional | The TrackClicks parameter specifies whether to track user clicks related to Safe Links protection of links.' EnableSafeLinksForEmail = 'Boolean | Optional | The EnableSafeLinksForEmail parameter specifies whether to enable Safe Links protection for email messages. Valid values are: $true: Safe Links is enabled for email. When a user clicks a link in an email, the link is checked by Safe Links. If the link is found to be malicious, a warning page appears in the default web browser. $false: Safe Links isn''t enabled for email. This is the default value.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' DoNotRewriteUrls = @( 'String | Optional | The DoNotRewriteUrls parameter specifies a URL that''s skipped by Safe Links scanning. You can specify multiple values separated by commas.' ) EnableSafeLinksForTeams = 'Boolean | Optional | The EnableSafeLinksForTeams parameter specifies whether Safe Links is enabled for Microsoft Teams. Valid values are: $true: Safe Links is enabled for Teams. If a protected user clicks a malicious link in a Teams conversation, group chat, or from channels, a warning page will appear in the default web browser. $false: Safe Links isn''t enabled for Teams. This is the default value.' AllowClickThrough = 'Boolean | Optional | The AllowClickThrough parameter specifies whether to allow users to click through to the original URL on warning pages.' CustomNotificationText = 'String | Optional | The custom notification text specifies the customized notification text to show to users.' DeliverMessageAfterScan = 'Boolean | Optional | The DeliverMessageAfterScan parameter specifies whether to deliver email messages only after Safe Links scanning is complete. Valid values are: $true: Wait until Safe Links scanning is complete before delivering the message. $false: If Safe Links scanning can''t complete, deliver the message anyway. This is the default value.' ScanUrls = 'Boolean | Optional | The ScanUrls parameter specifies whether to enable or disable the scanning of links in email messages. Valid values are: $true: Scanning links in email messages is enabled. $false: Scanning links in email messages is disabled. This is the default value.' Identity = 'String | Required | The Identity parameter specifies the SafeLinks policy that you want to modify.' UseTranslatedNotificationText = 'Boolean | Optional | The UseTranslatedNotificationText specifies whether to use Microsoft Translator to automatically localize the custom notification text that you specified with the CustomNotificationText parameter.' } ) SafeLinksRules = @( @{ Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and rules can''t have the same priority value.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SentTo = @( 'String | Optional | The SentTo parameter specifies a condition that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) Comments = 'String | Optional | The Comments parameter specifies informative comments for the rule, such as what the rule is used for or how it has changed over time. The length of the comment can''t exceed 1024 characters.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) Identity = 'String | Required | The Identity parameter specifies the name of the SafeLink rule that you want to modify.' ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) SafeLinksPolicy = 'String | Required | The SafeLinksPolicy parameter specifies the name of the SafeLink policy that''s associated with the SafeLinksing rule.' ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) Enabled = 'Boolean | Optional | Specify if this rule should be enabled. Default is $true.' } ) SecOpsOverrideRules = @( @{ Policy = 'String | Optional | The SecOps simulation override policy that''s associated with the rule.' Comment = 'String | Optional | An optional comment for the override rule.' Ensure = 'String | Optional | Ensures the presence or absence of the configuration. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The unique identifier (GUID or name) of the override rule. This parameter is mandatory.' } ) ServicePrincipals = @( @{ AppId = 'String | Optional | The AppId parameter specifies the unique AppId GUID value for the service principal.' DisplayName = 'String | Optional | The DisplayName parameter specifies the friendly name of the service principal.' Ensure = 'String | Optional | Present ensures the group exists, absent ensures it is removed | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | The Identity parameter specifies the service principal that you want to view.' AppName = 'String | Required | The AppName parameter specifies the corresponding friendly name of the unique AppId GUID value for the service principal.' } ) SharedMailboxs = @( @{ Ensure = 'String | Optional | Present ensures the group exists, absent ensures it is removed | Present / Absent' Alias = 'String | Optional | The alias of the Shared Mailbox' EmailAddresses = @( 'String | Optional | The EmailAddresses parameter specifies all the email addresses (proxy addresses) for the Shared Mailbox' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | The unique identifier of the Shared Mailbox' PrimarySMTPAddress = 'String | Optional | The primary email address of the Shared Mailbox' DisplayName = 'String | Required | The display name of the Shared Mailbox' } ) SharingPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Default = 'Boolean | Optional | The Default switch specifies that the sharing policy is the default sharing policy for all mailboxes.' Ensure = 'String | Optional | Specify if the Sharing Policy should exist or not. | Present / Absent' Domains = @( 'String | Optional | The Domains parameter specifies domains to which this policy applies and the sharing policy action.' ) Name = 'String | Required | The Name parameter specifies the unique name of the sharing policy. The maximum length is 64 characters.' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether to enable the sharing policy. Valid values for this parameter are $true or $false.' } ) SweepRules = @( @{ Name = 'String | Required | The Name parameter specifies the name of the Sweep rule. If the value contains spaces, enclose the value in quotation marks.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' Provider = 'String | Optional | The Provider parameter specifies the provider for the Sweep rule. If the value contains spaces, enclose the value in quotation marks. For Sweep rules that you create in Outlook on the web, the default value is Exchange16.' SystemCategory = 'String | Optional | The SystemCategory parameter specifies a condition for the sweep rule that looks for messages with the specified system category. System categories are available to all mailboxes in the organization.' KeepLatest = 'UInt32 | Optional | The KeepLatest parameter specifies an action for the Sweep rule that specifies the number of messages to keep that match the conditions of the rule. After the number of messages is exceeded, the oldest messages are moved to the location that''s specified by the DestinationFolder parameter (by default, the Deleted Items folder). You can''t use this parameter with the KeepForDays parameter and the Sweep rule must contain a KeepForDays or KeepLatest parameter value.' SourceFolder = 'String | Optional | The SourceFolder parameter specifies a condition for the Sweep rule that looks for messages in the specified folder.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' Mailbox = 'String | Optional | The Mailbox parameter specifies the mailbox where you want to create the Sweep rule. You can use any value that uniquely identifies the mailbox.' SenderName = 'String | Optional | The SenderName parameter specifies a condition for the Sweep rule that looks for the specified sender in messages. For internal senders, you can use any value that uniquely identifies the sender.' DestinationFolder = 'String | Optional | The DestinationFolder parameter specifies an action for the Sweep rule that moves messages to the specified folder.' KeepForDays = 'UInt32 | Optional | The KeepForDays parameter specifies an action for the Sweep rule that specifies the number of days to keep messages that match the conditions of the rule. After the number of days have passed, the messages are moved to the location that''s specified by the DestinationFolder parameter (by default, the Deleted Items folder). You can''t use this parameter with the KeepLatest parameter and the Sweep rule must contain a KeepForDays or KeepLatest parameter value.' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the Sweep rule is enabled or disabled.' } ) TeamsProtectionPolicy = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ZapEnabled = 'Boolean | Optional | The ZapEnabled parameter specifies whether to enable zero-hour auto purge (ZAP) for malware and high confidence phishing messages in Teams messages.' AdminDisplayName = 'String | Optional | The AdminDisplayName parameter specifies a description for the policy.' MalwareQuarantineTag = 'String | Optional | The MalwareQuarantineTag parameter specifies the quarantine policy that''s used for messages that are quarantined as malware by ZAP for Teams. | AdminOnlyAccessPolicy / DefaultFullAccessPolicy / DefaultFullAccessWithNotificationPolicy' HighConfidencePhishQuarantineTag = 'String | Optional | The HighConfidencePhishQuarantineTag parameter specifies the quarantine policy that''s used for messages that are quarantined as high confidence phishing by ZAP for Teams. | AdminOnlyAccessPolicy / DefaultFullAccessPolicy / DefaultFullAccessWithNotificationPolicy' } TenantAllowBlockListItemss = @( @{ RemoveAfter = 'UInt32 | Optional | Number of days after the entry is first used for it to removed' ListType = 'String | Required | The type of entry to add. | FileHash / Sender / Url' Action = 'String | Required | The action (allow/block) to take for this list entry | Allow / Block' SubmissionID = 'String | Optional | Reserved for internal Microsoft use' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Notes = 'String | Optional | Additional information about the object' UniqueId = 'String | Required | Unique ID to identify this specific object' Value = 'String | Required | The value that you want to add to the Tenant Allow/Block List based on the ListType parameter value' ExpirationDate = 'DateTime | Optional | The expiration date of the entry in Coordinated Universal Time (UTC)' ListSubType = 'String | Optional | The subtype for this entry | AdvancedDelivery / Tenant' } ) TenantAllowBlockListSpoofItemss = @( @{ SendingInfrastructure = 'String | Optional | The SendingInfrastructure parameter specifies the source of the messages sent by the spoofed sender that''s defined in the SpoofedUser parameter..' SpoofedUser = 'String | Required | The SpoofedUser parameter specifies the email address or domain for the spoofed sender entry.' Action = 'String | Optional | The Action parameter specifies whether is an allowed or blocked spoofed sender entry.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' SpoofType = 'String | Optional | The SpoofType parameter specifies whether this is an internal or external spoofed sender entry.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | Unique identified for the blocked item.' } ) TransportConfig = @{ MaxRecipientEnvelopeLimit = 'String | Optional | The MaxRecipientEnvelopeLimit parameter specifies the maximum number of recipients in a message.' ReplyAllStormBlockDurationHours = 'SInt32 | Optional | Reply all storm block duration hours.' ReplyAllStormDetectionMinimumRecipients = 'SInt32 | Optional | Reply all storm detection minimum recipients.' JournalingReportNdrTo = 'String | Optional | The JournalingReportNdrTo parameter specifies the email address to which journal reports are sent if the journaling mailbox is unavailable.' InternalDsnReportingAuthority = 'String | Optional | The InternalDsnReportingAuthority parameter specifies the domain in the machine-readable part of internal DSN messages.' InternalDsnSendHtml = 'Boolean | Optional | The InternalDsnSendHtml parameter specifies whether internal DSN messages should be HTML or plain text.' JournalMessageExpirationDays = 'SInt32 | Optional | The JournalMessageExpirationDays parameter extends the number of days that undeliverable journal reports are queued before they expire.' ReplyAllStormDetectionMinimumReplies = 'SInt32 | Optional | Reply all storm detection minimum replies.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ReplyAllStormProtectionEnabled = 'Boolean | Optional | Reply all storm protection enabled.' Rfc2231EncodingEnabled = 'Boolean | Optional | The Rfc2231EncodingEnabled parameter specifies whether the RFC 2231 encoding of MIME parameters for outbound messages is enabled in your organization.' SmtpClientAuthenticationDisabled = 'Boolean | Optional | The SmtpClientAuthenticationDisabled parameter specifies whether to disable authenticated SMTP (SMTP AUTH) for the whole organization.' InternalDsnLanguageDetectionEnabled = 'Boolean | Optional | The InternalDsnLanguageDetectionEnabled parameter specifies whether the server should try to send an internal DSN message in the same language as the original message that generated the notification.' ConvertDisclaimerWrapperToEml = 'Boolean | Optional | The ConvertDisclaimerWrapperToEml parameter specifies whether the original message will be added as a TNEF attachment or a regular EML attachment to a disclaimer.' DSNConversionMode = 'String | Optional | The DSNConversionMode parameter controls how Exchange handles delivery status notifications that are generated by earlier versions of Exchange or other messaging systems.' ExternalDelayDsnEnabled = 'Boolean | Optional | The ExternalDelayDsnEnabled parameter specifies whether a delay delivery status notification (DSN) message should be created for external messages that couldn''t be immediately delivered. ' ClearCategories = 'Boolean | Optional | The ClearCategories parameter keeps or removes Microsoft Outlook message categories during content conversion.' AddressBookPolicyRoutingEnabled = 'Boolean | Optional | The AddressBookPolicyRoutingEnabled parameter controls how recipients are resolved in an organization that uses address book policies to create separate virtual organizations within the same Exchange organization.' AllowLegacyTLSClients = 'Boolean | Optional | Allow legacy TLS clients' ExternalDsnDefaultLanguage = 'String | Optional | The ExternalDsnDefaultLanguage parameter specifies which Exchange server language should be used by default when you create external DSN messages.' HeaderPromotionModeSetting = 'String | Optional | The HeaderPromotionModeSetting parameter specifies whether named properties are created for custom X-headers on messages received.' InternalDelayDsnEnabled = 'Boolean | Optional | The InternalDelayDsnEnabled parameter specifies whether a delay DSN message should be created for messages sent to or from recipients or senders in the same Exchange organization that couldn''t be immediately delivered.' InternalDsnDefaultLanguage = 'String | Optional | The InternalDsnDefaultLanguage parameter specifies which Exchange server language should be used by default when you create internal DSN messages.' ExternalPostmasterAddress = 'String | Optional | The ExternalPostmasterAddress parameter specifies the email address in the From header field of an external DSN message.' ExternalDsnLanguageDetectionEnabled = 'Boolean | Optional | The ExternalDsnLanguageDetectionEnabled parameter specifies whether the server should try to send an external DSN message in the same language as the original message that generated the notification.' ExternalDsnReportingAuthority = 'String | Optional | The ExternalDsnReportingAuthority parameter specifies the domain in the machine-readable part of external DSN messages. ' ExternalDsnSendHtml = 'Boolean | Optional | The ExternalDsnSendHtml parameter specifies whether external DSN messages should be HTML or plain text.' } TransportRules = @( @{ ActivationDate = 'String | Optional | The ActivationDate parameter specifies when the rule starts processing messages. The rule won''t take any action on messages until the specified date/time.' ExceptIfFrom = @( 'String | Optional | The ExceptIfFrom parameter specifies an exception that looks for messages from specific senders.' ) ApplyHtmlDisclaimerFallbackAction = 'String | Optional | The ApplyHtmlDisclaimerFallbackAction parameter specifies what to do if the HTML disclaimer can''t be added to a message. | Wrap / Ignore / Reject' ExceptIfRecipientADAttributeContainsWords = @( 'String | Optional | The ExceptIfRecipientADAttributeContainsWords parameter specifies an exception that looks for words in the Active Directory attributes of recipients.' ) RecipientADAttributeMatchesPatterns = @( 'String | Optional | The RecipientADAttributeMatchesPatterns parameter specifies a condition that looks for text patterns in the Active Directory attributes of recipients by using regular expressions.' ) AttachmentSizeOver = 'String | Optional | The AttachmentSizeOver parameter specifies a condition that looks for messages where any attachment is greater than the specified size.' ExceptIfSenderADAttributeContainsWords = @( 'String | Optional | The ExceptIfSenderADAttributeContainsWords parameter specifies an exception that looks for words in Active Directory attributes of message senders.' ) SetSCL = 'String | Optional | The SetSCL parameter specifies an action that adds or modifies the SCL value of messages.' AnyOfRecipientAddressContainsWords = @( 'String | Optional | The AnyOfRecipientAddressContainsWords parameter specifies a condition that looks for words in recipient email addresses.' ) ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception that looks for messages sent to members of groups. You can use any value that uniquely identifies the group.' ) ExceptIfAnyOfCcHeader = @( 'String | Optional | The ExceptIfAnyOfCcHeader parameter specifies an exception that looks for recipients in the Cc field of messages.' ) ExceptIfAttachmentMatchesPatterns = @( 'String | Optional | The ExceptIfAttachmentMatchesPatterns parameter specifies an exception that looks for text patterns in the content of message attachments by using regular expressions.' ) RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition that looks for recipients with email address in the specified domains.' ) SenderADAttributeContainsWords = @( 'String | Optional | The SenderADAttributeContainsWords parameter specifies a condition that looks for words in Active Directory attributes of message senders.' ) ExceptIfHeaderMatchesPatterns = @( 'String | Optional | The ExceptIfHeaderMatchesPatterns parameter specifies an exception that looks for text patterns in a header field by using regular expressions.' ) ExceptIfFromScope = 'String | Optional | The ExceptIfFromScope parameter specifies an exception that looks for the location of message senders. | InOrganization / NotInOrganization' ADComparisonAttribute = 'String | Optional | This parameter specifies a condition or part of a condition for the rule. The name of the corresponding exception parameter starts with ExceptIf.' From = @( 'String | Optional | The From parameter specifies a condition that looks for messages from specific senders. You can use any value that uniquely identifies the sender.' ) ExceptIfHeaderContainsWords = @( 'String | Optional | The ExceptIfHeaderContainsWords parameter specifies an exception that looks for words in a header field.' ) HeaderMatchesPatterns = @( 'String | Optional | The HeaderMatchesPatterns parameter specifies a condition that looks for text patterns in a header field by using regular expressions. ' ) RemoveRMSAttachmentEncryption = 'Boolean | Optional | This parameter specifies an action or part of an action for the rule.' DeleteMessage = 'Boolean | Optional | The DeleteMessage parameter specifies an action that silently drops messages without an NDR.' HasSenderOverride = 'Boolean | Optional | DEPRECATED' ExceptIfSubjectOrBodyMatchesPatterns = @( 'String | Optional | The ExceptIfSubjectOrBodyMatchesPatterns parameter specifies an exception that looks for text patterns in the Subject field or body of messages.' ) ExceptIfHasSenderOverride = 'Boolean | Optional | DEPRECATED' Quarantine = 'Boolean | Optional | The Quarantine parameter specifies an action that quarantines messages.' AnyOfCcHeaderMemberOf = @( 'String | Optional | The AnyOfCcHeaderMemberOf parameter specifies a condition that looks for group members in the Cc field of messages.' ) ExceptIfRecipientInSenderList = @( 'String | Optional | This parameter is reserved for internal Microsoft use.' ) RecipientAddressType = 'String | Optional | The RecipientAddressType parameter specifies how conditions and exceptions check recipient email addresses. | Original / Resolved' ExceptIfContentCharacterSetContainsWords = @( 'String | Optional | The ExceptIfContentCharacterSetContainsWords parameter specifies an exception that looks for character set names in messages.' ) BlindCopyTo = @( 'String | Optional | The BlindCopyTo parameter specifies an action that adds recipients to the Bcc field of messages. ' ) ApplyHtmlDisclaimerLocation = 'String | Optional | The ApplyHtmlDisclaimerLocation parameter specifies where to insert the HTML disclaimer text in the body of messages. | Append / Prepend' ExceptIfMessageTypeMatches = 'String | Optional | The ExceptIfMessageTypeMatches parameter specifies an exception that looks for messages of the specified type. | OOF / AutoForward / Encrypted / Calendaring / PermissionControlled / Voicemail / Signed / ApprovalRequest / ReadReceipt' SenderIpRanges = @( 'String | Optional | The SenderIpRanges parameter specifies a condition that looks for senders whose IP addresses matches the specified value, or fall within the specified ranges.' ) ExceptIfMessageContainsDataClassifications = @( 'String | Optional | DEPRECATED' ) ModerateMessageByUser = @( 'String | Optional | The ModerateMessageByUser parameter specifies an action that forwards messages for approval to the specified users.' ) HasNoClassification = 'Boolean | Optional | The HasNoClassification parameter specifies a condition that looks for messages with or without any message classifications.' ExceptIfSenderInRecipientList = @( 'String | Optional | This parameter is reserved for internal Microsoft use.' ) HeaderContainsMessageHeader = 'String | Optional | The HeaderContainsMessageHeader parameter specifies the name of header field in the message header when searching for the words specified by the HeaderContainsWords parameter.' RemoveHeader = 'String | Optional | The RemoveHeader parameter specifies an action that removes a header field from the message header.' HasClassification = 'String | Optional | The HasClassification parameter specifies a condition that looks for messages with the specified message classification.' MessageContainsDataClassifications = @( 'String | Optional | DEPRECATED' ) ExceptIfFromMemberOf = @( 'String | Optional | The ExceptIfFromMemberOf parameter specifies an exception that looks for messages sent by group members.' ) RuleSubType = 'String | Optional | The RuleSubType parameter specifies the rule type. | Dlp / None' SentToScope = 'String | Optional | The SentToScope parameter specifies a condition that looks for the location of recipients. | InOrganization / NotInOrganization / ExternalPartner / ExternalNonPartner' AnyOfToCcHeaderMemberOf = @( 'String | Optional | The AnyOfToCcHeaderMemberOf parameter specifies a condition that looks for group members in the To and Cc fields of messages.' ) SCLOver = 'String | Optional | The SCLOver parameter specifies a condition that looks for the SCL value of messages' ExceptIfAnyOfRecipientAddressContainsWords = @( 'String | Optional | The ExceptIfAnyOfRecipientAddressContainsWords parameter specifies an exception that looks for words in recipient email addresses.' ) ExceptIfWithImportance = 'String | Optional | The ExceptIfWithImportance parameter specifies an exception that looks for messages with the specified importance level. | Low / Normal / High' ContentCharacterSetContainsWords = @( 'String | Optional | The ContentCharacterSetContainsWords parameter specifies a condition that looks for character set names in messages.' ) SubjectContainsWords = @( 'String | Optional | The SubjectContainsWords parameter specifies a condition that looks for words in the Subject field of messages.' ) RejectMessageEnhancedStatusCode = 'String | Optional | The RejectMessageEnhancedStatusCode parameter specifies the enhanced status code that''s used when the rule rejects messages.' SenderADAttributeMatchesPatterns = @( 'String | Optional | The SenderADAttributeMatchesPatterns parameter specifies a condition that looks for text patterns in Active Directory attributes of message senders by using regular expressions.' ) ExceptIfSenderADAttributeMatchesPatterns = @( 'String | Optional | The ExceptIfSenderADAttributeMatchesPatterns parameter specifies an exception that looks for text patterns in Active Directory attributes of message senders by using regular expressions.' ) IncidentReportContent = @( 'String | Optional | The IncidentReportContent parameter specifies the message properties that are included in the incident report that''s generated when a message violates a DLP policy. ' ) FromMemberOf = @( 'String | Optional | The FromMemberOf parameter specifies a condition that looks for messages sent by group members.' ) AttachmentContainsWords = @( 'String | Optional | The AttachmentContainsWords parameter specifies a condition that looks for words in message attachments. ' ) ExceptIfSCLOver = 'String | Optional | The ExceptIfSCLOver parameter specifies an exception that looks for the SCL value of messages' ExceptIfBetweenMemberOf1 = @( 'String | Optional | The ExceptIfBetweenMemberOf1 parameter specifies an exception that looks for messages that are sent between group members. ' ) GenerateNotification = 'String | Optional | The GenerateNotification parameter specifies an action that sends a notification message to recipients.' NotifySender = 'String | Optional | DEPRECATED | NotifyOnly / RejectMessage / RejectUnlessFalsePositiveOverride / RejectUnlessSilentOverride / RejectUnlessExplicitOverride' ExceptIfAttachmentIsPasswordProtected = 'Boolean | Optional | The ExceptIfAttachmentIsPasswordProtected parameter specifies an exception that looks for password protected files in messages (because the contents of the file can''t be inspected).' AddToRecipients = @( 'String | Optional | The AddToRecipients parameter specifies an action that adds recipients to the To field of messages.' ) ExceptIfSenderManagementRelationship = 'String | Optional | The ExceptIfSenderManagementRelationship parameter specifies an exception that looks for the relationship between the sender and recipients in messages. | Manager / DirectReport' SetAuditSeverity = 'String | Optional | The SetAuditSeverity parameter specifies an action that sets the severity level of the incident report and the corresponding entry that''s written to the message tracking log when messages violate DLP policies. | DoNotAudit / Low / Medium / High' AttachmentPropertyContainsWords = @( 'String | Optional | The AttachmentPropertyContainsWords parameter specifies a condition that looks for words in the properties of attached Office documents.' ) ExceptIfAnyOfToHeader = @( 'String | Optional | The ExceptIfAnyOfToHeader parameter specifies an exception that looks for recipients in the To field of messages.' ) ApplyRightsProtectionCustomizationTemplate = 'String | Optional | The ApplyRightsProtectionCustomizationTemplate parameter specifies an action that applies a custom branding template for OME encrypted messages.' SetHeaderName = 'String | Optional | The SetHeaderName parameter specifies an action that adds or modifies a header field in the message header.' RouteMessageOutboundRequireTls = 'Boolean | Optional | The RouteMessageOutboundRequireTls parameter specifies an action that uses Transport Layer Security (TLS) encryption to deliver messages outside your organization.' RuleErrorAction = 'String | Optional | The RuleErrorAction parameter specifies what to do if rule processing can''t be completed on messages. | Ignore / Defer' FromScope = 'String | Optional | The FromScope parameter specifies a condition that looks for the location of message senders. | InOrganization / NotInOrganization' AttachmentNameMatchesPatterns = @( 'String | Optional | The AttachmentNameMatchesPatterns parameter specifies a condition that looks for text patterns in the file name of message attachments by using regular expressions.' ) SentTo = @( 'String | Optional | The SentTo parameter specifies a condition that looks for recipients in messages.' ) ExceptIfFromAddressMatchesPatterns = @( 'String | Optional | The ExceptIfFromAddressMatchesPatterns parameter specifies an exception that looks for text patterns in the sender''s email address by using regular expressions.' ) Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the new rule is created as enabled or disabled.' AttachmentIsPasswordProtected = 'Boolean | Optional | The AttachmentIsPasswordProtected parameter specifies a condition that looks for password protected files in messages (because the contents of the file can''t be inspected).' ExceptIfManagerForEvaluatedUser = 'String | Optional | The ExceptIfManagerForEvaluatedUser parameter specifies an exception that looks for users in the Manager attribute of senders or recipients.' RemoveOMEv2 = 'Boolean | Optional | The RemoveOMEv2 parameter specifies an action that removes Office 365 Message Encryption from messages and their attachments.' ExceptIfFromAddressContainsWords = @( 'String | Optional | The ExceptIfFromAddressContainsWords parameter specifies an exception that looks for words in the sender''s email address.' ) AttachmentHasExecutableContent = 'Boolean | Optional | The AttachmentHasExecutableContent parameter specifies a condition that looks for executable content in message attachments.' ExceptIfHasClassification = 'String | Optional | The ExceptIfHasClassification parameter specifies an exception that looks for messages with the specified message classification.' RouteMessageOutboundConnector = 'String | Optional | The RouteMessageOutboundConnector parameter specifies an action that routes messages through the specified Outbound connector in Office 365.' ExceptIfAttachmentNameMatchesPatterns = @( 'String | Optional | The ExceptIfAttachmentNameMatchesPatterns parameter specifies an exception that looks for text patterns in the file name of message attachments by using regular expressions.' ) ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception that looks for recipients with email address in the specified domains.' ) ExceptIfSenderDomainIs = @( 'String | Optional | The ExceptIfSenderDomainIs parameter specifies an exception that looks for senders with email address in the specified domains.' ) SenderManagementRelationship = 'String | Optional | The SenderManagementRelationship parameter specifies a condition that looks for the relationship between the sender and recipients in messages. | Manager / DirectReport' ExceptIfBetweenMemberOf2 = @( 'String | Optional | The ExceptIfBetweenMemberOf2 parameter specifies an exception that looks for messages that are sent between group members.' ) RedirectMessageTo = @( 'String | Optional | The RedirectMessageTo parameter specifies a rule action that redirects messages to the specified recipients.' ) ApplyOME = 'Boolean | Optional | The ApplyOME parameter specifies an action that encrypts messages and their attachments by using Office 365 Message Encryption.' UniqueId = 'String | Required | Unique ID to identify this specific object' ExceptIfAttachmentSizeOver = 'String | Optional | The ExceptIfAttachmentSizeOver parameter specifies an exception that looks for messages where any attachment is greater than the specified size.' SenderDomainIs = @( 'String | Optional | The SenderDomainIs parameter specifies a condition that looks for senders with email address in the specified domains.' ) MessageSizeOver = 'String | Optional | The MessageSizeOver parameter specifies a condition that looks for messages larger than the specified size. The size includes the message and all attachments.' ApplyHtmlDisclaimerText = 'String | Optional | The ApplyHtmlDisclaimerText parameter specifies an action that adds the disclaimer text to messages.' ExceptIfAttachmentHasExecutableContent = 'Boolean | Optional | The ExceptIfAttachmentHasExecutableContent parameter specifies an exception that looks for executable content in message attachments.' ExceptIfAttachmentIsUnsupported = 'Boolean | Optional | The ExceptIfAttachmentIsUnsupported parameter specifies an exception that looks for unsupported file types in messages.' ExceptIfAnyOfRecipientAddressMatchesPatterns = @( 'String | Optional | The ExceptIfAnyOfRecipientAddressMatchesPatterns parameter specifies an exception that looks for text patterns in recipient email addresses by using regular expressions.' ) RemoveOME = 'Boolean | Optional | The RemoveOME parameter specifies an action that removes the previous version of Office 365 Message Encryption from messages and their attachments.' RejectMessageReasonText = 'String | Optional | The RejectMessageReasonText parameter specifies the explanation text that''s used when the rule rejects messages.' RecipientAddressContainsWords = @( 'String | Optional | The RecipientAddressContainsWords parameter specifies a condition that looks for words in recipient email addresses.' ) GenerateIncidentReport = 'String | Optional | The GenerateIncidentReport parameter specifies where to send the incident report that''s defined by the IncidentReportContent parameter.' FromAddressContainsWords = @( 'String | Optional | The FromAddressContainsWords parameter specifies a condition that looks for words in the sender''s email address. ' ) AnyOfRecipientAddressMatchesPatterns = @( 'String | Optional | The AnyOfRecipientAddressMatchesPatterns parameter specifies a condition that looks for text patterns in recipient email addresses by using regular expressions.' ) RecipientAddressMatchesPatterns = @( 'String | Optional | The RecipientAddressMatchesPatterns parameter specifies a condition that looks for text patterns in recipient email addresses by using regular expressions.' ) ExceptIfSubjectContainsWords = @( 'String | Optional | The ExceptIfSubjectContainsWords parameter specifies an exception that looks for words in the Subject field of messages.' ) ApplyRightsProtectionTemplate = 'String | Optional | The ApplyRightsProtectionTemplate parameter specifies an action that applies rights management service (RMS) templates to messages. ' AnyOfToCcHeader = @( 'String | Optional | The AnyOfToCcHeader parameter specifies a condition that looks for recipients in the To or Cc fields of messages.' ) ExceptIfSentToScope = 'String | Optional | The ExceptIfSentToScope parameter specifies an exception that looks for the location of a recipient. | InOrganization / NotInOrganization / ExternalPartner / ExternalNonPartner' ExceptIfAnyOfToCcHeaderMemberOf = @( 'String | Optional | The ExceptIfAnyOfToCcHeaderMemberOf parameter specifies an exception that looks for group members in the To and Cc fields of messages.' ) ModerateMessageByManager = 'Boolean | Optional | The ModerateMessageByManager parameter specifies an action that forwards messages for approval to the user that''s specified in the sender''s Manager attribute.' ADComparisonOperator = 'String | Optional | This parameter specifies a condition or part of a condition for the rule. The name of the corresponding exception parameter starts with ExceptIf. | Equal / NotEqual' BetweenMemberOf2 = @( 'String | Optional | The BetweenMemberOf2 parameter specifies a condition that looks for messages that are sent between group members.' ) SubjectMatchesPatterns = @( 'String | Optional | The SubjectMatchesPatterns parameter specifies a condition that looks for text patterns in the Subject field of messages by using regular expressions.' ) AttachmentProcessingLimitExceeded = 'Boolean | Optional | The AttachmentProcessingLimitExceeded parameter specifies a condition that looks for messages where attachment scanning didn''t complete.' ExceptIfAnyOfCcHeaderMemberOf = @( 'String | Optional | The ExceptIfAnyOfCcHeaderMemberOf parameter specifies an exception that looks for group members in the Cc field of messages. You can use any value that uniquely identifies the group.' ) ExceptIfSubjectMatchesPatterns = @( 'String | Optional | The ExceptIfSubjectMatchesPatterns parameter specifies an exception that looks for text patterns in the Subject field of messages by using regular expressions.' ) Name = 'String | Required | The Name parameter specifies the display name of the transport rule to be created. The maximum length is 64 characters.' ExceptIfRecipientAddressContainsWords = @( 'String | Optional | The ExceptIfRecipientAddressContainsWords parameter specifies an exception that looks for words in recipient email addresses.' ) HeaderMatchesMessageHeader = 'String | Optional | The HeaderMatchesMessageHeader parameter specifies the name of header field in the message header when searching for the text patterns specified by the HeaderMatchesPatterns parameter.' AnyOfToHeaderMemberOf = @( 'String | Optional | The AnyOfToHeaderMemberOf parameter specifies a condition that looks for group members in the To field of messages.' ) HeaderContainsWords = @( 'String | Optional | The HeaderContainsWords parameter specifies a condition that looks for words in a header field.' ) ManagerForEvaluatedUser = 'String | Optional | The ManagerForEvaluatedUser parameter specifies a condition that looks for users in the Manager attribute of senders or recipients. | Recipient / Sender' Comments = 'String | Optional | The Comments parameter specifies optional descriptive text for the rule. The length of the comment can''t exceed 1024 characters.' WithImportance = 'String | Optional | The WithImportance parameter specifies a condition that looks for messages with the specified importance level. | Low / Normal / High' ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) AddManagerAsRecipientType = 'String | Optional | The AddManagerAsRecipientType parameter specifies an action that delivers or redirects messages to the user that''s defined in the sender''s Manager attribute. | To / Cc / Bcc / Redirect' ExceptIfADComparisonOperator = 'String | Optional | The ExceptIfADComparisonOperator parameter specifies the comparison operator for the ExceptIfADComparisonAttribute parameter. | Equal / NotEqual' ExceptIfAnyOfToHeaderMemberOf = @( 'String | Optional | The ExceptIfAnyOfToHeaderMemberOf parameter specifies an exception that looks for group members in the To field of messages.' ) Mode = 'String | Optional | The Mode parameter specifies how the rule operates. | Audit / AuditAndNotify / Enforce' RecipientInSenderList = @( 'String | Optional | This parameter is reserved for internal Microsoft use.' ) SubjectOrBodyMatchesPatterns = @( 'String | Optional | The SubjectOrBodyMatchesPatterns parameter specifies a condition that looks for text patterns in the Subject field or body of messages.' ) ExceptIfAttachmentExtensionMatchesWords = @( 'String | Optional | The ExceptIfAttachmentExtensionMatchesWords parameter specifies an exception that looks for words in the file name extensions of message attachments.' ) ExceptIfRecipientAddressMatchesPatterns = @( 'String | Optional | The ExceptIfRecipientAddressMatchesPatterns parameter specifies an exception that looks for text patterns in recipient email addresses by using regular expressions.' ) ExceptIfHasNoClassification = 'Boolean | Optional | The ExceptIfHasNoClassification parameter specifies an exception that looks for messages with or without any message classifications.' ExceptIfSenderIpRanges = @( 'String | Optional | The ExceptIfSenderIpRanges parameter specifies an exception that looks for senders whose IP addresses matches the specified value, or fall within the specified ranges.' ) ExceptIfRecipientADAttributeMatchesPatterns = @( 'String | Optional | The ExceptIfRecipientADAttributeMatchesPatterns parameter specifies an exception that looks for text patterns in the Active Directory attributes of recipients by using regular expressions.' ) RecipientADAttributeContainsWords = @( 'String | Optional | The RecipientADAttributeContainsWords parameter specifies a condition that looks for words in the Active Directory attributes of recipients. ' ) AttachmentIsUnsupported = 'Boolean | Optional | The AttachmentIsUnsupported parameter specifies a condition that looks for unsupported file types in messages.' ExpiryDate = 'String | Optional | The ExpiryDate parameter specifies when this rule will stop processing messages. The rule won''t take any action on messages after the specified date/time.' AttachmentExtensionMatchesWords = @( 'String | Optional | The AttachmentExtensionMatchesWords parameter specifies a condition that looks for words in the file name extensions of message attachments.' ) SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter specifies a condition that looks for messages sent to members of distribution groups, dynamic distribution groups, or mail-enabled security groups.' ) ExceptIfManagerAddresses = @( 'String | Optional | The ExceptIfManagerAddresses parameter specifies the users (managers) for the ExceptIfManagerForEvaluatedUser parameter.' ) SenderInRecipientList = 'String | Optional | This parameter is reserved for internal Microsoft use.' ExceptIfAnyOfToCcHeader = @( 'String | Optional | The ExceptIfAnyOfToCcHeader parameter specifies an exception that looks for recipients in the To or Cc fields of messages.' ) AttachmentMatchesPatterns = @( 'String | Optional | The AttachmentMatchesPatterns parameter specifies a condition that looks for text patterns in the content of message attachments by using regular expressions.' ) DlpPolicy = 'String | Optional | The DlpPolicy parameter specifies the data loss prevention (DLP) policy that''s associated with the rule.' ManagerAddresses = @( 'String | Optional | The ManagerAddresses parameter specifies the users (managers) for the ExceptIfManagerForEvaluatedUser parameter.' ) SenderAddressLocation = 'String | Optional | The SenderAddressLocation parameter specifies where to look for sender addresses in conditions and exceptions that examine sender email addresses. | Header / Envelope / HeaderOrEnvelope' CopyTo = @( 'String | Optional | The CopyTo parameter specifies an action that adds recipients to the Cc field of messages.' ) SubjectOrBodyContainsWords = @( 'String | Optional | The SubjectOrBodyContainsWords parameter specifies a condition that looks for words in the Subject field or body of messages.' ) ApplyClassification = 'String | Optional | The ApplyClassification parameter specifies an action that applies a message classification to messages. ' ExceptIfADComparisonAttribute = 'String | Optional | The ExceptIfADComparisonAttribute parameter specifies an exception that compares an Active Directory attribute between the sender and all recipients of the message.' SetHeaderValue = 'String | Optional | The SetHeaderValue parameter specifies an action that adds or modifies a header field in the message header.' Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the rule that determines the order of rule processing.' BetweenMemberOf1 = @( 'String | Optional | The BetweenMemberOf1 parameter specifies a condition that looks for messages that are sent between group members.' ) ExceptIfMessageSizeOver = 'String | Optional | The ExceptIfMessageSizeOver parameter specifies an exception that looks for messages larger than the specified size. ' AnyOfCcHeader = @( 'String | Optional | The AnyOfCcHeader parameter specifies a condition that looks for recipients in the Cc field of messages.' ) Ensure = 'String | Optional | Specify if the Transport Rule should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ExceptIfAttachmentProcessingLimitExceeded = 'Boolean | Optional | The ExceptIfAttachmentProcessingLimitExceeded parameter specifies an exception that looks for messages where attachment scanning didn''t complete.' FromAddressMatchesPatterns = @( 'String | Optional | The FromAddressMatchesPatterns parameter specifies a condition that looks for text patterns in the sender''s email address by using regular expressions.' ) ExceptIfHeaderMatchesMessageHeader = 'String | Optional | The ExceptIfHeaderMatchesMessageHeader parameter specifies the name of header field in the message header when searching for the text patterns specified by the ExceptIfHeaderMatchesPatterns parameter.' ExceptIfAttachmentContainsWords = @( 'String | Optional | The ExceptIfAttachmentContainsWords parameter specifies an exception that looks for words in message attachments.' ) AnyOfToHeader = @( 'String | Optional | The AnyOfToHeader parameter specifies a condition that looks for recipients in the To field of messages.' ) PrependSubject = 'String | Optional | The PrependSubject parameter specifies an action that adds text to add to the beginning of the Subject field of messages.' ExceptIfSubjectOrBodyContainsWords = @( 'String | Optional | The ExceptIfSubjectOrBodyContainsWords parameter specifies an exception that looks for words in the Subject field or body of messages.' ) MessageTypeMatches = 'String | Optional | The MessageTypeMatches parameter specifies a condition that looks for messages of the specified type. | OOF / AutoForward / Encrypted / Calendaring / PermissionControlled / Voicemail / Signed / ApprovalRequest / ReadReceipt' ExceptIfAttachmentPropertyContainsWords = @( 'String | Optional | The ExceptIfAttachmentPropertyContainsWords parameter specifies an exception that looks for words in the properties of attached Office documents. ' ) StopRuleProcessing = 'Boolean | Optional | The StopRuleProcessing parameter specifies an action that stops processing more rules.' ExceptIfHeaderContainsMessageHeader = 'String | Optional | The ExceptIfHeaderContainsMessageHeader parameter specifies the name of header field in the message header when searching for the words specified by the ExceptIfHeaderContainsWords parameter.' } ) } Fabric = @{ AdminTenantSettings = @{ InstallNonvalidatedTemplateApps = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } HealthcareSolutionsTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } KustoDashboardTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } InstallServiceApps = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } GitIntegrationTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } GitIntegrationSensitivityLabelsTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } GraphQLTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } GoogleBigQuerySSO = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } OneDriveSharePointAllowSharingTenantSetting = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ODSPRefreshEnforcementTenantAllowAutomaticUpdate = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } OneLakeFileExplorer = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } OneDriveSharePointViewerIntegrationTenantSettingV2 = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } LogAnalyticsAttachForWorkspaceAdmins = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } LiveConnection = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } Mirroring = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } M365DataSharing = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } GitIntegrationCrossGeoTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportToPowerPoint = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportToMHTML = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportToXML = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportToWord = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportToCsv = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportReport = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportToImage = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportToExcelSetting = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } FabricGAWorkloads = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } FabricFeedbackTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } GitHubTenantSettings = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } FabricThirdPartyWorkloads = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExternalDatasetSharingTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExportVisualImageTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } FabricAddPartnerWorkload = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExternalSharingV2 = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } OneLakeForThirdParty = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } TridentPrivatePreview = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } TenantSettingPublishGetHelpInfo = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } UsageMetricsTrackUserLevelInfo = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } UsageMetrics = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } StorytellingTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } SnowflakeSSO = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } TemplatePublish = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } SustainabilitySolutionsTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) VisualizeListInPowerBI = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } UseDatasetsAcrossWorkspaces = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } WebModelingTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } WebContentTilesTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ShareToTeamsTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } PublishContentPack = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } PromoteContent = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } QnaFeedbackLoop = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } PublishToWeb = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } PowerBIGoalsTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } OnPremAnalyzeInExcel = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } Printing = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } PowerPlatformSolutionsIntegrationTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } RScriptVisual = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } RetailSolutionsTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ShareLinkToEntireOrg = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ServicePrincipalAccess = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } QueryScaleOutTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } QnaLsdlSharing = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } RestrictMyFolderCapacity = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } RedshiftSSO = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ExpFlightingTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ArtifactSearchTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AppPush = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ASShareableCloudConnectionBindingSecurityModeTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ASCollectQueryTextTelemetryTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowSendNLToDaxDataToOtherRegions = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowSendAOAIDataToOtherRegions = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowServicePrincipalsUseReadAdminAPIs = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowServicePrincipalsCreateAndUseProfiles = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AzureMap = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AutomatedInsightsTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } BlockAccessFromPublicNetworks = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } BingMap = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ASWritethruTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ASWritethruContinuousExportTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AutomatedInsightsEntryPoints = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AutoInstallPowerBIAppInTeamsTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowPowerBIASDQOnTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AISkillArtifactTenantSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AdminCustomDisclaimer = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowCVAuthenticationTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowAccessOverPrivateLinks = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AADSSOForGateway = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AdminApisIncludeExpressions = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AdminApisIncludeDetailedMetadata = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowFreeTrial = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowExternalDataSharingSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowGuestUserToAccessSharedContent = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowGuestLookup = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowCVToExportDataToFileTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowCVLocalStorageV2Tenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowExternalDataSharingReceiverSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } AllowEndorsementMasterDataSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } BlockAutoDiscoverAndPackageRefresh = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EmailSubscriptionsToB2BUsers = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EmailSecurityGroupsOnOutage = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EmailSubscriptionTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EmailSubscriptionsToExternalUsers = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EimInformationProtectionLessElevated = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EimInformationProtectionEdit = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ElevatedGuestsTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EimInformationProtectionWorkspaceAdminsOverrideAutomaticLabelsSetting = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EnableNLToDax = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EnableFabricAirflow = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EsriVisual = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EnableReassignDataDomainSwitch = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EnableAOAI = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } Embedding = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EnableExcelYellowIntegration = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EnableDatasetInPlaceSharing = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EimInformationProtectionDownstreamInheritanceSetting = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } ConfigureFolderRetentionPeriod = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } CertifyDatasets = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } CustomVisualsTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } CreateAppWorkspaces = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } BlockResourceKeyAuthentication = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } BlockProtectedLabelSharingToEntireOrg = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } CertifiedCustomVisualsTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } CDSAManagement = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } DiscoverDatasetsSettingsPromoted = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } DiscoverDatasetsSettingsCertified = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } EimInformationProtectionDataSourceInheritanceSetting = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } DremioSSO = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } DatasetExecuteQueries = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } DatamartTenant = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } DiscoverDatasetsConsumption = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } DevelopServiceApps = @{ excludedSecurityGroups = @( 'String | Optional | A list of excluded security groups.' ) enabled = 'Boolean | Optional | The status of the tenant setting.' delegateToWorkspace = 'Boolean | Optional | Indicates whether the tenant setting can be delegated to a workspace admin. False - Workspace admin cannot override the tenant setting.' enabledSecurityGroups = @( 'String | Optional | A list of enabled security groups.' ) delegatedFrom = @{ Capacity = 'String | Optional | The setting is delegated from a capacity.' Domain = 'String | Optional | The setting is delegated from a domain.' Tenant = 'String | Optional | The setting is delegated from a tenant.' } canSpecifySecurityGroups = 'Boolean | Optional | Indicates if the tenant setting is enabled for a security group. 0 - The tenant setting is enabled for the entire organization.' settingName = 'String | Optional | The name of the tenant setting.' properties = @( @{ value = 'String | Optional | The value of the property.' name = 'String | Optional | The name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' type = 'String | Optional | The type of the property.' } ) title = 'String | Optional | The title of the tenant setting.' tenantSettingGroup = 'String | Optional | Tenant setting group name.' } } } Intune = @{ AccountProtectionLocalAdministratorPasswordSolutionPolicies = @( @{ Description = 'String | Optional | Description of the account protection local administrator password solution policy.' DisplayName = 'String | Required | Display name of the account protection local administrator password solution policy.' AdPasswordEncryptionEnabled = 'Boolean | Optional | Configures whether the password is encrypted before being stored in Active Directory.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AdPasswordEncryptionPrincipal = 'String | Optional | Configures the name or SID of a user or group that can decrypt the password stored in Active Directory.' PasswordLength = 'UInt32 | Optional | Configures the length of the password of the managed local administrator account. Minimum - 8, Maximum - 64' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) PostAuthenticationActions = 'UInt32 | Optional | Specifies the actions to take upon expiration of the configured grace period. 1 - Reset password, 3 - Reset password and log off, 5 - Reset password and restart | 1 / 3 / 5' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' passwordagedays_aad = 'UInt32 | Optional | Configures the maximum password age of the managed local administrator account for Azure AD. Minimum - 7, Maximum - 365' BackupDirectory = 'UInt32 | Optional | Configures which directory the local admin account password is backed up to. 0 - Disabled, 1 - Azure AD, 2 - AD | 0 / 1 / 2' PostAuthenticationResetDelay = 'UInt32 | Optional | Specifies the amount of time (in hours) to wait after an authentication before executing the specified post-authentication actions. Minimum - 0, Maximum - 24' PasswordAgeDays = 'UInt32 | Optional | Configures the maximum password age of the managed local administrator account for Active Directory. Minimum - 1, Maximum - 365' Identity = 'String | Optional | Identity of the account protection local administrator password solution policy.' AdEncryptedPasswordHistorySize = 'UInt32 | Optional | Configures how many previous encrypted passwords will be remembered in Active Directory. Minimum - 0, Maximum - 12' AdministratorAccountName = 'String | Optional | Configures the name of the managed local administrator account.' PasswordExpirationProtectionEnabled = 'Boolean | Optional | Configures additional enforcement of maximum password age for the managed local administrator account.' PasswordComplexity = 'UInt32 | Optional | Configures the password complexity of the managed local administrator account. 1 - Large letters, 2 - Large + small letters, 3 - Large + small letters + numbers, 4 - Large + small letters + numbers + special characters, 5 - Large letters + small letters + numbers + special characters (improved readability) | 1 / 2 / 3 / 4 / 5' } ) AccountProtectionLocalUserGroupMembershipPolicies = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the account protection rules policy.' LocalUserGroupCollection = @( @{ LocalGroups = @( 'String | Optional | The local groups to add / remove the members to / from. List of the following values: `administrators`, `users`, `guests`, `powerusers`, `remotedesktopusers`, `remotemanagementusers`' ) Members = @( 'String | Optional | The members to add / remove to / from the group. For AzureAD Users, use the format `AzureAD\<UserPrincipalName>`. For groups, use the security identifier (SID).' ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' Action = 'String | Optional | The action to use for adding / removing members. Note: add_replace is superseded by add_restrict | add_update / remove_update / add_replace / add_restrict' UserSelectionType = 'String | Optional | The type of the selection. Either users / groups from AzureAD, or by manual identifier. | users / manual' } ) Ensure = 'String | Optional | Present ensures the site collection exists, absent ensures it is removed | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | Identity of the account protection policy.' DisplayName = 'String | Required | Display name of the account protection rules policy.' } ) AccountProtectionPolicies = @( @{ PinRecoveryEnabled = 'Boolean | Optional | If enabled, the PIN recovery secret will be stored on the device and the user can change their PIN if needed. If disabled or not configured, the recovery secret will not be created or stored.' SecurityDeviceRequired = 'Boolean | Optional | If you enable this policy setting, only devices with a usable TPM provision Windows Hello for Business. If you disable or do not configure this policy setting, the TPM is still preferred, but all devices provision Windows Hello for Business.' Description = 'String | Optional | Description of the account protection rules policy.' UseSecurityKeyForSignin = 'Boolean | Optional | Enable Windows Hello security key as a logon credential for all PCs in the tenant.' PinUppercaseCharactersUsage = 'String | Optional | If required, user PIN must include at least one uppercase letter. | notConfigured / blocked / required / allowed' DisplayName = 'String | Required | Display name of the account protection rules policy.' PinPreviousBlockCount = 'UInt32 | Optional | If configured, the user will not be able to reuse this number of previous PINs. (0, 50), 0 = Do not remember.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UseCertificatesForOnPremisesAuthEnabled = 'Boolean | Optional | If configured, Windows Hello for Business can use certificates to authenticate to on-premise resources.' UnlockWithBiometricsEnabled = 'Boolean | Optional | If allowed, Windows Hello for Business can authenticate using gestures, such as face and fingerprint. Users must still configure a PIN in case of failure.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Ensure = 'String | Optional | Present ensures the site collection exists, absent ensures it is removed | Present / Absent' PinLowercaseCharactersUsage = 'String | Optional | If required, user PIN must include at least one lowercase letter. | notConfigured / blocked / required / allowed' Identity = 'String | Optional | Identity of the account protection policy.' PinExpirationInDays = 'UInt32 | Optional | If configured, the user will be forced to change their PIN after the set number of days. (0, 730), 0 = Never' WindowsHelloForBusinessBlocked = 'String | Optional | Block Windows Hello for Business. | notConfigured / true / false' DeviceGuardLocalSystemAuthorityCredentialGuardSettings = 'String | Optional | Setting this Disable will disable the use of Credential Guard, which is the Windows default. Setting this to Enable with UEFI lock will enable Credential Guard and not allow it to be disabled remotely, as the UEFI persisted configuration must be manually cleared. Setting this to Enable without UEFI lock will enable Credential Guard and allow it to be turned off without physical access to the machine. | notConfigured / disable / enableWithUEFILock / enableWithoutUEFILock' PinSpecialCharactersUsage = 'String | Optional | If required, user PIN must include at least one special character. | notConfigured / blocked / required / allowed' PinMaximumLength = 'UInt32 | Optional | Maximum PIN length must be between 4 and 127. (4-127)' EnhancedAntiSpoofingForFacialFeaturesEnabled = 'Boolean | Optional | If enabled, devices will use enhanced anti-spoofing, when available. If not configured, the client configuration for anti-spoofing will be honored.' PinMinimumLength = 'UInt32 | Optional | Minimum PIN length must be between 4 and 127. (4-127)' } ) AccountProtectionPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DeviceSettings = @{ SpecialCharacters = 'String | Optional | Special Characters (0: Allows the use of special characters in PIN., 1: Requires the use of at least one special characters in PIN., 2: Does not allow the use of special characters in PIN.) | 0 / 1 / 2' EnablePinRecovery = 'String | Optional | Enable Pin Recovery (false: Disabled, true: Enabled) | false / true' UsePassportForWork = 'String | Optional | Use Windows Hello For Business (Device) (false: Disabled, true: Enabled) | false / true' LsaCfgFlags = 'String | Optional | Credential Guard (0: (Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock., 1: (Enabled with UEFI lock) Turns on Credential Guard with UEFI lock., 2: (Enabled without lock) Turns on Credential Guard without UEFI lock.) | 0 / 1 / 2' RequireSecurityDevice = 'String | Optional | Require Security Device (false: Disabled, true: Enabled) | false / true' Expiration = 'SInt32 | Optional | Expiration' MinimumPINLength = 'SInt32 | Optional | Minimum PIN Length' MaximumPINLength = 'SInt32 | Optional | Maximum PIN Length' FacialFeaturesUseEnhancedAntiSpoofing = 'String | Optional | Facial Features Use Enhanced Anti Spoofing (false: Disabled, true: Enabled) | false / true' UseCertificateForOnPremAuth = 'String | Optional | Use Certificate For On Prem Auth (false: Disabled, true: Enabled) | false / true' History = 'SInt32 | Optional | PIN History' UppercaseLetters = 'String | Optional | Uppercase Letters (0: Allows the use of uppercase letters in PIN., 1: Requires the use of at least one uppercase letters in PIN., 2: Does not allow the use of uppercase letters in PIN.) | 0 / 1 / 2' LowercaseLetters = 'String | Optional | Lowercase Letters (0: Allows the use of lowercase letters in PIN., 1: Requires the use of at least one lowercase letters in PIN., 2: Does not allow the use of lowercase letters in PIN.) | 0 / 1 / 2' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UserSettings = @{ Expiration = 'SInt32 | Optional | Expiration (User)' RequireSecurityDevice = 'String | Optional | Require Security Device (User) (false: Disabled, true: Enabled) | false / true' SpecialCharacters = 'String | Optional | Special Characters (User) (0: Allows the use of special characters in PIN., 1: Requires the use of at least one special characters in PIN., 2: Does not allow the use of special characters in PIN.) | 0 / 1 / 2' EnablePinRecovery = 'String | Optional | Enable Pin Recovery (User) (false: Disabled, true: Enabled) | false / true' MaximumPINLength = 'SInt32 | Optional | Maximum PIN Length (User)' UsePassportForWork = 'String | Optional | Use Windows Hello For Business (User) (false: Disabled, true: Enabled) | false / true' LowercaseLetters = 'String | Optional | Lowercase Letters (User) (0: Allows the use of lowercase letters in PIN., 1: Requires the use of at least one lowercase letters in PIN., 2: Does not allow the use of lowercase letters in PIN.) | 0 / 1 / 2' UppercaseLetters = 'String | Optional | Uppercase Letters (User) (0: Allows the use of uppercase letters in PIN., 1: Requires the use of at least one uppercase letters in PIN., 2: Does not allow the use of uppercase letters in PIN.) | 0 / 1 / 2' MinimumPINLength = 'SInt32 | Optional | Minimum PIN Length (User)' History = 'SInt32 | Optional | PIN History (User)' } DisplayName = 'String | Required | Policy name' } ) AndroidManagedStoreAppConfigurations = @( @{ Id = 'String | Optional | Id of the Intune policy.' DisplayName = 'String | Required | Display name of the Intune policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) payloadJson = 'String | Optional | Android Enterprise app configuration JSON payload.' connectedAppsEnabled = 'Boolean | Optional | Setting to specify whether to allow ConnectedApps experience for this app.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) packageId = 'String | Optional | Android Enterprise app configuration package id.' profileApplicability = 'String | Optional | Android Enterprise profile applicability (AndroidWorkProfile, DeviceOwner, or default (applies to both)). Possible values are: default, androidWorkProfile, androidDeviceOwner. | default / androidWorkProfile / androidDeviceOwner' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' permissionActions = @( @{ permission = 'String | Optional | Android permission string, defined in the official Android documentation. Example ''android.permission.READ_CONTACTS''.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' action = 'String | Optional | Type of Android permission action. Possible values are: prompt, autoGrant, autoDeny. | prompt / autoGrant / autoDeny' } ) appSupportsOemConfig = 'Boolean | Optional | Whether or not this AppConfig is an OEMConfig policy. This property is read-only.' Description = 'String | Optional | Admin provided description of the Device Configuration. Inherited from managedDeviceMobileAppConfiguration' targetedMobileApps = @( 'String | Optional | the associated app. Inherited from managedDeviceMobileAppConfiguration' ) } ) AntivirusExclusionsPoliciesLinux = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Exclusions = @( @{ exclusions_item_type = 'String | Optional | Type - Depends on exclusions (0: Path, 1: File extension, 2: Process name) | 0 / 1 / 2' exclusions_item_extension = 'String | Optional | File extension - Depends on exclusions_item_type=1' exclusions_item_name = 'String | Optional | File name - exclusions_item_type=2' UniqueId = 'String | Required | [Unique ID to identify this specific object]' exclusions_item_path = 'String | Optional | Path - exclusions_item_type=0' exclusions_item_isDirectory = 'String | Optional | Is directory (false: Disabled, true: Enabled) - Depends on exclusions_item_type=0 | false / true' } ) DisplayName = 'String | Required | Policy name' } ) AntivirusExclusionsPoliciesMacOS = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Exclusions = @( @{ exclusions_item_type = 'String | Optional | Type - Depends on exclusions (0: Path, 1: File extension, 2: Process name) | 0 / 1 / 2' exclusions_item_extension = 'String | Optional | File extension - Depends on exclusions_item_type=1' exclusions_item_name = 'String | Optional | File name - exclusions_item_type=2' UniqueId = 'String | Required | [Unique ID to identify this specific object]' exclusions_item_path = 'String | Optional | Path - exclusions_item_type=0' exclusions_item_isDirectory = 'String | Optional | Is directory (false: Disabled, true: Enabled) - Depends on exclusions_item_type=0 | false / true' } ) DisplayName = 'String | Required | Policy name' } ) AntivirusPoliciesLinux = @( @{ scanHistoryMaximumItems = 'SInt32 | Optional | Scan history size' exclusions = @( @{ exclusions_item_type = 'String | Optional | Type - Depends on exclusions (0: Path, 1: File extension, 2: Process name) | 0 / 1 / 2' exclusions_item_extension = 'String | Optional | File extension - Depends on exclusions_item_type=1' exclusions_item_name = 'String | Optional | File name - exclusions_item_type=2' UniqueId = 'String | Required | [Unique ID to identify this specific object]' exclusions_item_path = 'String | Optional | Path - exclusions_item_type=0' exclusions_item_isDirectory = 'String | Optional | Is directory (false: Disabled, true: Enabled) - Depends on exclusions_item_type=0 | false / true' } ) antivirusengine_enforcementLevel = 'String | Optional | Enforcement Level (0: Realtime, 1: OnDemand, 2: Passive) | 0 / 1 / 2' Description = 'String | Optional | Policy description' threatTypeSettings = @( @{ threatTypeSettings_item_value = 'String | Optional | Action to take - Depends on threatTypeSettings (0: audit, 1: block, 2: off) | 0 / 1 / 2' UniqueId = 'String | Required | [Unique ID to identify this specific object]' threatTypeSettings_item_key = 'String | Optional | Threat type - Depends on threatTypeSettings (0: potentially_unwanted_application, 1: archive_bomb) | 0 / 1' } ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Policy name' enabled = 'String | Optional | Enable cloud delivered protection (false: Disabled, true: Enabled) | false / true' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) enableFileHashComputation = 'String | Optional | Enable file hash computation (false: Disabled, true: Enabled) | false / true' nonExecMountPolicy = 'String | Optional | non execute mount mute (0: unmute, 1: mute) | 0 / 1' passiveMode = 'String | Optional | Enable passive mode (deprecated) (false: Disabled, true: Enabled) | false / true' behaviorMonitoring = 'String | Optional | Enable behavior monitoring (0: Disabled, 1: Enabled) | 0 / 1' exclusionsMergePolicy = 'String | Optional | Exclusions merge (0: merge, 1: admin_only) | 0 / 1' allowedThreats = @( 'String | Optional | Allowed threats' ) RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) automaticDefinitionUpdateEnabled = 'String | Optional | Automatic security intelligence updates (false: Disabled, true: Enabled) | false / true' cloudBlockLevel = 'String | Optional | Configure cloud block level (normal: Normal, moderate: Moderate, high: High, plus: High_Plus, tolerance: Zero_Tolerance) | normal / moderate / high / plus / tolerance' scanResultsRetentionDays = 'SInt32 | Optional | Scan results retention' enableRealTimeProtection = 'String | Optional | Enable real-time protection (deprecated) (false: Disabled, true: Enabled) | false / true' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' scanArchives = 'String | Optional | Enable scanning of archives (false: Disabled, true: Enabled) | false / true' Id = 'String | Optional | The unique identifier for an entity. Read-only.' threatTypeSettingsMergePolicy = 'String | Optional | Threat type settings merge (0: merge, 1: admin_only) | 0 / 1' networkprotection_enforcementLevel = 'String | Optional | Enforcement Level (0: disabled, 1: audit, 2: block) | 0 / 1 / 2' scanAfterDefinitionUpdate = 'String | Optional | Enable scanning after definition update (false: Disabled, true: Enabled) | false / true' automaticSampleSubmissionConsent = 'String | Optional | Enable automatic sample submissions (none: None, safe: Safe, all: All) | none / safe / all' unmonitoredFilesystems = @( 'String | Optional | Unmonitored Filesystems' ) diagnosticLevel = 'String | Optional | Diagnostic data collection level (0: optional, 1: required) | 0 / 1' disallowedThreatActions = @( 'String | Optional | Disallowed threat actions' ) maximumOnDemandScanThreads = 'SInt32 | Optional | maximum on demand scan threads' } ) AntivirusPoliciesMacOS = @( @{ scanHistoryMaximumItems = 'SInt32 | Optional | Scan history size' exclusions = @( @{ exclusions_item_type = 'String | Optional | Type - Depends on exclusions (0: Path, 1: File extension, 2: Process name) | 0 / 1 / 2' exclusions_item_extension = 'String | Optional | File extension - Depends on exclusions_item_type=1' exclusions_item_name = 'String | Optional | File name - exclusions_item_type=2' UniqueId = 'String | Required | [Unique ID to identify this specific object]' exclusions_item_path = 'String | Optional | Path - exclusions_item_type=0' exclusions_item_isDirectory = 'String | Optional | Is directory (false: Disabled, true: Enabled) - Depends on exclusions_item_type=0 | false / true' } ) antivirusengine_enforcementLevel = 'String | Optional | Enforcement level (0: passive, 1: on_demand, 2: real_time) | 0 / 1 / 2' Description = 'String | Optional | Policy description' consumerExperience = 'String | Optional | Control sign-in to consumer version (0: enabled, 1: disabled) | 0 / 1' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) enforcementLevel_tamperProtection = 'String | Optional | Enforcement level (0: disabled, 1: audit, 2: block) | 0 / 1 / 2' DisplayName = 'String | Required | Policy name' enabled = 'String | Optional | Enable / disable cloud delivered protection (false: Disabled, true: Enabled) | false / true' automaticSampleSubmission = 'String | Optional | Enable / disable automatic sample submissions (false: Disabled, true: Enabled) | false / true' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) enableFileHashComputation = 'String | Optional | Enable file hash computation (false: Disabled, true: Enabled) | false / true' enforcementLevel = 'String | Optional | Enforcement level (0: disabled, 1: audit, 2: block) | 0 / 1 / 2' passiveMode = 'String | Optional | Enable passive mode (deprecated) (false: Disabled, true: Enabled) | false / true' exclusionsMergePolicy = 'String | Optional | Exclusions merge (0: merge, 1: admin_only) | 0 / 1' allowedThreats = @( 'String | Optional | Allowed threats' ) RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) hideStatusMenuIcon = 'String | Optional | Show / hide status menu icon (false: Disabled, true: Enabled) | false / true' scanResultsRetentionDays = 'SInt32 | Optional | Scan results retention' enableRealTimeProtection = 'String | Optional | Enable real-time protection (deprecated) (false: Disabled, true: Enabled) | false / true' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' scanArchives = 'String | Optional | Scanning inside archive files (false: Disabled, true: Enabled) | false / true' Id = 'String | Optional | The unique identifier for an entity. Read-only.' threatTypeSettingsMergePolicy = 'String | Optional | Threat type settings merge (0: merge, 1: admin_only) | 0 / 1' threatTypeSettings = @( @{ threatTypeSettings_item_value = 'String | Optional | Action to take - Depends on threatTypeSettings (0: audit, 1: block, 2: off) | 0 / 1 / 2' UniqueId = 'String | Required | [Unique ID to identify this specific object]' threatTypeSettings_item_key = 'String | Optional | Threat type - Depends on threatTypeSettings (0: potentially_unwanted_application, 1: archive_bomb) | 0 / 1' } ) automaticDefinitionUpdateEnabled = 'String | Optional | Automatic security intelligence updates (false: Disabled, true: Enabled) | false / true' scanAfterDefinitionUpdate = 'String | Optional | Run a scan after definitions are updated (false: Disabled, true: Enabled) | false / true' userInitiatedFeedback = 'String | Optional | User initiated feedback (0: enabled, 1: disabled) | 0 / 1' diagnosticLevel = 'String | Optional | Diagnostic collection level (0: optional, 1: required) | 0 / 1' disallowedThreatActions = @( 'String | Optional | Disallowed threat actions' ) maximumOnDemandScanThreads = 'SInt32 | Optional | Degree of parallelism for on-demand scans' } ) AntivirusPoliciesWindows10SettingCatalog = @( @{ SignatureUpdateFallbackOrder = @( 'String | Optional | This policy setting allows you to define the order in which different definition update sources should be contacted.' ) DisableAppBrowserUI = 'String | Optional | Use this policy setting if you want to disable the display of the app and browser protection area in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' DisableAccountProtectionUI = 'String | Optional | Use this policy setting to specify if to display the Account protection area in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' SevereThreats = 'String | Optional | Allows an administrator to specify high severity threats corresponding action ID to take. | clean / quarantine / remove / allow / userdefined / block' DisableTpmFirmwareUpdateWarning = 'String | Optional | Hide the recommendation to update TPM Firmware when a vulnerable firmware is detected. (0: disable feature. 1: enable feature) | 0 / 1' AllowScriptScanning = 'String | Optional | Allows or disallows Windows Defender Script Scanning functionality. (0: disable feature. 1: enable feature) | 0 / 1' SignatureUpdateFileSharesSources = @( 'String | Optional | This policy setting allows you to configure UNC file share sources for downloading definition updates.' ) DaysToRetainCleanedMalware = 'SInt32 | Optional | Time period (in days) that quarantine items will be stored on the system.' AllowDatagramProcessingOnWinServer = 'String | Optional | Allows or disallows Network Protection to enable datagram processing on Windows Server. (0: disable feature. 1: enable feature) | 0 / 1' ScheduleQuickScanTime = 'SInt32 | Optional | Selects the time of day that the Windows Defender quick scan should run.' DisableCoreServiceTelemetry = 'String | Optional | Disable Core Service Telemetry. (1: disabled, 0: enabled) | 0 / 1' DisableHealthUI = 'String | Optional | Use this policy setting if you want to disable the display of the device performance and health area in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' AllowScanningNetworkFiles = 'String | Optional | Allows or disallows a scanning of network files. (0: disable feature. 1: enable feature) | 0 / 1' AllowIOAVProtection = 'String | Optional | Allows or disallows Windows Defender IOAVP Protection functionality. (0: disable feature. 1: enable feature) | 0 / 1' URL = 'String | Optional | The help portal URL that is displayed to users. The default browser is used to initiate this action.' CloudExtendedTimeout = 'SInt32 | Optional | This feature allows Microsoft Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it''s safe. Value type is integer, range is 0 - 50.' DisableHttpParsing = 'String | Optional | Disables or enables HTTP Parsing for Network Protection. (0: enable feature. 1: disable feature) | 0 / 1' DisableFamilyUI = 'String | Optional | Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' SecurityIntelligenceUpdatesChannel = 'String | Optional | Enable this policy to specify when devices receive Microsoft Defender security intelligence updates during the daily gradual rollout. (0: Not configured, 4: Current Channel (Staged), 5: Current Channel (Broad)) | 0 / 4 / 5' DisableLocalAdminMerge = 'String | Optional | This policy setting controls whether or not complex list settings configured by a local administrator are merged with managed settings. (0: enable local admin merge, 1: disable local admin merge) | 0 / 1' ExcludedExtensions = @( 'String | Optional | Allows an administrator to specify a list of file type extensions to ignore during a scan.' ) EnableLowCPUPriority = 'String | Optional | This policy setting allows you to enable or disable low CPU priority for scheduled scans. (0: disable feature. 1: enable feature) | 0 / 1' TemplateId = 'String | Optional | Template Id of the policy. 0: Windows Security Experience, 1: Defender Update controls, 2: Microsoft Defender Antivirus exclusions, 3: Microsoft Defender Antivirus | d948ff9b-99cb-4ee0-8012-1fbc09685377_1 / e3f74c5a-a6de-411d-aef6-eb15628f3a0a_1 / 45fea5e9-280d-4da1-9792-fb5736da0ca9_1 / 804339ad-1553-4478-a742-138fb5807418_1' AllowUserUIAccess = 'String | Optional | Allows or disallows user access to the Windows Defender UI. I disallowed, all Windows Defender notifications will also be suppressed. (0: Prevents users from accessing UI. 1: Lets users access UI) | 0 / 1' AllowRealtimeMonitoring = 'String | Optional | Allows or disallows Windows Defender real-time Monitoring functionality. (0: disable feature. 1: enable feature) | 0 / 1' EnableInAppCustomization = 'String | Optional | Enable this policy to have your company name and contact options displayed in a contact card fly out in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' Email = 'String | Optional | The email address that is displayed to users. The default mail application is used to initiate email actions.' ModerateSeverityThreats = 'String | Optional | Allows an administrator to specify moderate severity threats corresponding action ID to take. | clean / quarantine / remove / allow / userdefined / block' AllowNetworkProtectionDownLevel = 'String | Optional | Allows or disallows Network Protection to be configured into block or audit mode on windows downlevel of RS3. (0: disable feature. 1: enable feature) | 0 / 1' CompanyName = 'String | Optional | The company name that is displayed to the users. CompanyName is required for both EnableCustomizedToasts and EnableInAppCustomization.' HideRansomwareDataRecovery = 'String | Optional | Use this policy setting to hide the Ransomware data recovery area in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' ScheduleScanTime = 'SInt32 | Optional | Selects the time of day that the Windows Defender scan should run. Must be between 0 and 1380 minutes.' DisableNetworkUI = 'String | Optional | Use this policy setting if you want to disable the display of the firewall and network protection area in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' DisableCatchupFullScan = 'String | Optional | This policy setting allows you to configure catch-up scans for scheduled full scans. (1: disabled, 0: enabled) | 0 / 1' ArchiveMaxSize = 'SInt32 | Optional | Specify the maximum size, in KB, of archive files to be extracted and scanned.' AllowFullScanOnMappedNetworkDrives = 'String | Optional | Allows or disallows a full scan of mapped network drives. (0: disable feature. 1: enable feature) | 0 / 1' HideWindowsSecurityNotificationAreaControl = 'String | Optional | This policy setting hides the Windows Security notification area control. (0: disable feature. 1: enable feature) | 0 / 1' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' SignatureUpdateInterval = 'SInt32 | Optional | Specifies the interval (in hours) that will be used to check for signatures, so instead of using the ScheduleDay and ScheduleTime the check for new signatures will be set according to the interval. Must be between 0 and 24 hours.' Phone = 'String | Optional | The phone number or Skype ID that is displayed to users. Skype is used to initiate the call.' Description = 'String | Optional | Description of the endpoint protection policy for Windows 10.' DisableDeviceSecurityUI = 'String | Optional | Use this policy setting if you want to disable the display of the Device security area in the Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' TamperProtection = 'String | Optional | Allows or disallows scanning of archives. (0: enable feature. 1: disable feature) | 0 / 1' ArchiveMaxDepth = 'SInt32 | Optional | Specify the maximum folder depth to extract from archive files for scanning.' EngineUpdatesChannel = 'String | Optional | Enable this policy to specify when devices receive Microsoft Defender engine updates during the monthly gradual rollout. (0: Not configured, 2: Beta Channel, 3: Current Channel (Preview), 4: Current Channel (Staged), 5: Current Channel (Broad), 6: Critical) | 0 / 2 / 3 / 4 / 5 / 6' CheckForSignaturesBeforeRunningScan = 'String | Optional | This policy setting allows you to manage whether a check for new virus and spyware definitions will occur before running a scan. (0: disable feature. 1: enable feature) | 0 / 1' PUAProtection = 'String | Optional | Specifies the level of detection for potentially unwanted applications (PUAs). (0: disabled, 1: block mode, 2: audit mode) | 0 / 1 / 2' HighSeverityThreats = 'String | Optional | Allows an administrator to specify severe threats corresponding action ID to take. | clean / quarantine / remove / allow / userdefined / block' MeteredConnectionUpdates = 'String | Optional | Allow managed devices to update through metered connections. (0: disabled, 1: enabled)' DisplayName = 'String | Required | Display name of the endpoint protection policy for Windows 10.' AllowEmailScanning = 'String | Optional | Allows or disallows scanning of email. (0: disable feature. 1: enable feature) | 0 / 1' CloudBlockLevel = 'String | Optional | This policy setting determines how aggressive Microsoft Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer.(0: Default windows defender blocking level, 2: High blocking level, 4:High+ blocking level, 6:Zero tolerance blocking level) | 0 / 2 / 4 / 6' DisableCatchupQuickScan = 'String | Optional | This policy setting allows you to configure catch-up scans for scheduled quick scans. (1: disabled, 0: enabled) | 0 / 1' EnableCustomizedToasts = 'String | Optional | Enable this policy to display your company name and contact options in the notifications. (0: disable feature. 1: enable feature) | 0 / 1' DisableTlsParsing = 'String | Optional | This setting disables TLS Parsing for Network Protection. (0: enabled, 1: disabled) | 0 / 1' DisableClearTpmButton = 'String | Optional | Disable the Clear TPM button in Windows Security. (0: disable feature. 1: enable feature) | 0 / 1' ExcludedProcesses = @( 'String | Optional | Allows an administrator to specify a list of files opened by processes to ignore during a scan.' ) AllowOnAccessProtection = 'String | Optional | Allows or disallows Windows Defender On Access Protection functionality. (0: disable feature. 1: enable feature) | 0 / 1' DisableCoreServiceECSIntegration = 'String | Optional | Disable Core Service ECS Integration. (0: disabled, 1: enabled) | 0 / 1' DisableSshParsing = 'String | Optional | Disable Ssh Parsing (1: SSH parsing is disabled, 0: SSH parsing is enabled) | 1 / 0' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) RealTimeScanDirection = 'String | Optional | Controls which sets of files should be monitored. (0: Monitor all files (bi-directional), 1: Monitor incoming files, 2: Monitor outgoing files) | 0 / 1 / 2' AvgCPULoadFactor = 'SInt32 | Optional | Represents the average CPU load factor for the Windows Defender scan (in percent).' SchedulerRandomizationTime = 'SInt32 | Optional | This setting allows you to configure the scheduler randomization in hours. The randomization interval is [1 - 23] hours.' DisableVirusUI = 'String | Optional | Use this policy setting if you want to disable the display of the virus and threat protection area in Windows Defender Security Center. (0: disable feature. 1: enable feature) | 0 / 1' DisableEnhancedNotifications = 'String | Optional | Use this policy setting if you want to disable the display of Windows Defender Security Center notifications. (0: disable feature. 1: enable feature) | 0 / 1' EnableNetworkProtection = 'String | Optional | This policy allows you to turn on network protection (block/audit) or off. (0: disabled, 1: block mode, 2: audit mode) | 0 / 1 / 2' AllowIntrusionPreventionSystem = 'String | Optional | https://github.com/MicrosoftDocs/memdocs/issues/2250 (0: disable feature. 1: enable feature) | 0 / 1' AllowFullScanRemovableDriveScanning = 'String | Optional | Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned. (0: disable feature. 1: enable feature) | 0 / 1' ExcludedPaths = @( 'String | Optional | Allows an administrator to specify a list of directory paths to ignore during a scan.' ) LowSeverityThreats = 'String | Optional | Allows an administrator to specify low severity threats corresponding action ID to take. | clean / quarantine / remove / allow / userdefined / block' PlatformUpdatesChannel = 'String | Optional | Enable this policy to specify when devices receive Microsoft Defender platform updates during the monthly gradual rollout. (0: Not configured, 2: Beta Channel, 3: Current Channel (Preview), 4: Current Channel (Staged), 5: Current Channel (Broad), 6: Critical) | 0 / 2 / 3 / 4 / 5 / 6' ScheduleScanDay = 'String | Optional | Selects the day that the Windows Defender scan should run. (0: Every day, 1: Sunday, 2: Monday, 3: Tuesday, 4: Wednesday, 5: Thursday, 6: Friday, 7: Saturday, 8: No scheduled scan) | 0 / 1 / 2 / 3 / 4 / 5 / 6 / 7 / 8' DisableDnsOverTcpParsing = 'String | Optional | Disables or enables DNS over TCP Parsing for Network Protection. (0: enable feature. 1: disable feature) | 0 / 1' AllowCloudProtection = 'String | Optional | To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions. (0: disable feature. 1: enable feature) | 0 / 1' RandomizeScheduleTaskTimes = 'String | Optional | Specifies if the start time of the scan is randomized. (0: no randomization, 1: randomized) | 0 / 1' AllowArchiveScanning = 'String | Optional | Allows or disallows scanning of archives. (0: disable feature. 1: enable feature) | 0 / 1' Identity = 'String | Optional | Identity of the endpoint protection policy for Windows 10.' ScanParameter = 'String | Optional | Selects whether to perform a quick scan or full scan. (1: Quick scan, 2: Full scan) | 1 / 2' SubmitSamplesConsent = 'String | Optional | Checks for the user consent level in Windows Defender to send data. (0: Always prompt, 1: Send safe samples automatically, 2: Never send, 3: Send all samples automatically) | 0 / 1 / 2 / 3' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowBehaviorMonitoring = 'String | Optional | Allows or disallows Windows Defender Behavior Monitoring functionality. (0: disable feature. 1: enable feature) | 0 / 1' } ) AppAndBrowserIsolationPoliciesWindows10 = @( @{ EnterpriseNetworkDomainNames = @( 'String | Optional | Enterprise Network Domain Names' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' PrintingSettings = @( 'SInt32 | Optional | Print Settings (0: Disables all print functionality., 1: Enables only XPS printing., 2: Enables only PDF printing., 4: Enables only local printing., 8: Enables only network printing.) | 0 / 1 / 2 / 4 / 8' ) EnterpriseInternalProxyServers = @( 'String | Optional | Enterprise Internal Proxy Servers' ) ClipboardFileType = 'String | Optional | Clipboard content options (1: Allow text copying., 2: Allow image copying., 3: Allow text and image copying.) | 1 / 2 / 3' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SaveFilesToHost = 'String | Optional | Allow files to download and save to the host operating system (0: The user cannot download files from Edge in the container to the host file system. When the policy is not configured, it is the same as disabled (0)., 1: Turns on the functionality to allow users to download files from Edge in the container to the host file system.) | 0 / 1' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Policy name' EnterpriseCloudResources = @( 'String | Optional | Enterprise Cloud Resources' ) AllowPersistence = 'String | Optional | Allow data persistence (0: Application Guard discards user-downloaded files and other items (such as, cookies, Favorites, and so on) during machine restart or user log-off., 1: Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions.) | 0 / 1' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' InstallWindowsDefenderApplicationGuard = 'String | Optional | Install Windows defender application guard (install: Install) | install' CertificateThumbprints = @( 'String | Optional | Certificate Thumbprints' ) EnterpriseIPRange = @( 'String | Optional | Enterprise IP Range' ) AllowWindowsDefenderApplicationGuard = 'String | Optional | Turn on Microsoft Defender Application Guard (0: Disable Microsoft Defender Application Guard, 1: Enable Microsoft Defender Application Guard for Microsoft Edge ONLY, 2: Enable Microsoft Defender Application Guard for isolated Windows environments ONLY, 3: Enable Microsoft Defender Application Guard for Microsoft Edge AND isolated Windows environments) | 0 / 1 / 2 / 3' ClipboardSettings = 'String | Optional | Clipboard behavior settings (0: Completely turns Off the clipboard functionality for the Application Guard., 1: Turns On clipboard operation from an isolated session to the host., 2: Turns On clipboard operation from the host to an isolated session., 3: Turns On clipboard operation in both the directions.) | 0 / 1 / 2 / 3' EnterpriseProxyServers = @( 'String | Optional | Enterprise Proxy Servers' ) AllowVirtualGPU = 'String | Optional | Allow hardware-accelerated rendering (0: Cannot access the vGPU and uses the CPU to support rendering graphics. When the policy is not configured, it is the same as disabled (0)., 1: Turns on the functionality to access the vGPU offloading graphics rendering from the CPU. This can create a faster experience when working with graphics intense websites or watching video within the container.) | 0 / 1' AuditApplicationGuard = 'String | Optional | Audit Application Guard (0: Audit event logs aren''t collected for Application Guard., 1: Application Guard inherits its auditing policies from system and starts to audit security events for Application Guard container.) | 0 / 1' Description = 'String | Optional | Policy description' EnterpriseProxyServersAreAuthoritative = 'String | Optional | Enterprise Proxy Servers Are Authoritative (1: Enable, 0: Disable) | 1 / 0' EnterpriseIPRangesAreAuthoritative = 'String | Optional | Enterprise IP Ranges Are Authoritative (1: Enable, 0: Disable) | 1 / 0' AllowCameraMicrophoneRedirection = 'String | Optional | Allow camera and microphone access (0: Microsoft Defender Application Guard cannot access the device''s camera and microphone. When the policy is not configured, it is the same as disabled (0)., 1: Turns on the functionality to allow Microsoft Defender Application Guard to access the device''s camera and microphone.) | 0 / 1' NeutralResources = @( 'String | Optional | Neutral Resources' ) } ) AppAndBrowserIsolationPoliciesWindows10ConfigMgr = @( @{ EnterpriseNetworkDomainNames = @( 'String | Optional | Enterprise Network Domain Names' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' PrintingSettings = @( 'SInt32 | Optional | Print Settings (0: Disables all print functionality., 1: Enables only XPS printing., 2: Enables only PDF printing., 4: Enables only local printing., 8: Enables only network printing.) | 0 / 1 / 2 / 4 / 8' ) EnterpriseInternalProxyServers = @( 'String | Optional | Enterprise Internal Proxy Servers' ) ClipboardFileType = 'String | Optional | Clipboard content options (1: Allow text copying., 2: Allow image copying., 3: Allow text and image copying.) | 1 / 2 / 3' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SaveFilesToHost = 'String | Optional | Allow files to download and save to the host operating system (0: The user cannot download files from Edge in the container to the host file system. When the policy is not configured, it is the same as disabled (0)., 1: Turns on the functionality to allow users to download files from Edge in the container to the host file system.) | 0 / 1' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Policy name' EnterpriseCloudResources = @( 'String | Optional | Enterprise Cloud Resources' ) AllowPersistence = 'String | Optional | Allow data persistence (0: Application Guard discards user-downloaded files and other items (such as, cookies, Favorites, and so on) during machine restart or user log-off., 1: Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions.) | 0 / 1' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' InstallWindowsDefenderApplicationGuard = 'String | Optional | Install Windows defender application guard (install: Install). Required if AllowWindowsDefenderApplicationGuard is not set to 0. | install' CertificateThumbprints = @( 'String | Optional | Certificate Thumbprints' ) EnterpriseIPRange = @( 'String | Optional | Enterprise IP Range' ) AllowWindowsDefenderApplicationGuard = 'String | Optional | Turn on Microsoft Defender Application Guard (0: Disable Microsoft Defender Application Guard, 1: Enable Microsoft Defender Application Guard for Microsoft Edge ONLY, 2: Enable Microsoft Defender Application Guard for isolated Windows environments ONLY, 3: Enable Microsoft Defender Application Guard for Microsoft Edge AND isolated Windows environments) | 0 / 1 / 2 / 3' ClipboardSettings = 'String | Optional | Clipboard behavior settings (0: Completely turns Off the clipboard functionality for the Application Guard., 1: Turns On clipboard operation from an isolated session to the host., 2: Turns On clipboard operation from the host to an isolated session., 3: Turns On clipboard operation in both the directions.) | 0 / 1 / 2 / 3' EnterpriseProxyServers = @( 'String | Optional | Enterprise Proxy Servers' ) AllowVirtualGPU = 'String | Optional | Allow hardware-accelerated rendering (0: Cannot access the vGPU and uses the CPU to support rendering graphics. When the policy is not configured, it is the same as disabled (0)., 1: Turns on the functionality to access the vGPU offloading graphics rendering from the CPU. This can create a faster experience when working with graphics intense websites or watching video within the container.) | 0 / 1' AuditApplicationGuard = 'String | Optional | Audit Application Guard (0: Audit event logs aren''t collected for Application Guard., 1: Application Guard inherits its auditing policies from system and starts to audit security events for Application Guard container.) | 0 / 1' Description = 'String | Optional | Policy description' EnterpriseProxyServersAreAuthoritative = 'String | Optional | Enterprise Proxy Servers Are Authoritative (1: Enable, 0: Disable) | 1 / 0' EnterpriseIPRangesAreAuthoritative = 'String | Optional | Enterprise IP Ranges Are Authoritative (1: Enable, 0: Disable) | 1 / 0' AllowCameraMicrophoneRedirection = 'String | Optional | Allow camera and microphone access (0: Microsoft Defender Application Guard cannot access the device''s camera and microphone. When the policy is not configured, it is the same as disabled (0)., 1: Turns on the functionality to allow Microsoft Defender Application Guard to access the device''s camera and microphone.) | 0 / 1' NeutralResources = @( 'String | Optional | Neutral Resources' ) } ) AppCategories = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | The name of the app.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' } ) AppConfigurationDevicePolicies = @( @{ Description = 'String | Optional | Admin provided description of the Device Configuration.' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PayloadJson = 'String | Optional | Android Enterprise app configuration JSON payload.' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this App configuration entity.' ) ConnectedAppsEnabled = 'Boolean | Optional | Setting to specify whether to allow ConnectedApps experience for this Android app.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) PackageId = 'String | Optional | Android Enterprise app configuration package id.' ProfileApplicability = 'String | Optional | Android Enterprise profile applicability (AndroidWorkProfile, DeviceOwner, or default (applies to both)). Possible values are: default, androidWorkProfile, androidDeviceOwner. | default / androidWorkProfile / androidDeviceOwner' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' PermissionActions = @( @{ Permission = 'String | Optional | Android permission string, defined in the official Android documentation. Example ''android.permission.READ_CONTACTS''.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Action = 'String | Optional | Type of Android permission action. Possible values are: prompt, autoGrant, autoDeny. | prompt / autoGrant / autoDeny' } ) Id = 'String | Required | The unique identifier for an entity. Read-only.' Settings = @( @{ AppConfigKeyType = 'String | Optional | app configuration key type. Possible values are: stringType, integerType, realType, booleanType, tokenType. | stringType / integerType / realType / booleanType / tokenType' AppConfigKey = 'String | Optional | app configuration key.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' AppConfigKeyValue = 'String | Optional | app configuration key value.' } ) EncodedSettingXml = 'String | Optional | Mdm iOS app configuration Base64 binary. Must not be an empty string if specified.' TargetedMobileApps = @( 'String | Optional | The associated app.' ) } ) AppConfigurationPolicies = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | Key of the entity. Read-Only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Description of the app configuration policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CustomSettings = @( @{ name = 'String | Optional | Name of the custom setting.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' value = 'String | Optional | Value of the custom setting.' } ) DisplayName = 'String | Required | Display name of the app configuration policy.' } ) AppleMDMPushNotificationCertificates = @( @{ Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Certificate = 'String | Optional | The Apple Push notification certificate.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AppleIdentifier = 'String | Required | The name of the Apple Identifier.' DataSharingConsetGranted = 'Boolean | Optional | The boolean indicating DataSharing Conset agreement granted or not between Intune and Apple.' } ) ApplicationControlPoliciesWindows10 = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the endpoint protection application control policy for Windows 10.' Ensure = 'String | Optional | Present ensures the site collection exists, absent ensures it is removed | Present / Absent' AppLockerApplicationControl = 'String | Optional | App locker application control mode | notConfigured / enforceComponentsAndStoreApps / auditComponentsAndStoreApps / enforceComponentsStoreAppsAndSmartlocker / auditComponentsStoreAppsAndSmartlocker' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SmartScreenEnableInshell = 'Boolean | Optional | Enforce the use of SmartScreen for all users.' SmartScreenBlockOverrideForFiles = 'Boolean | Optional | Indicates whether or not SmartScreen will not present an option for the user to disregard the warning and run the app.' DisplayName = 'String | Required | Display name of the endpoint protection application control policy for Windows 10.' } ) AppProtectionPoliciesAndroid = @( @{ MinimumRequiredAppVersion = 'String | Optional | Versions less than the specified version will block the managed app from accessing company data.' ContactSyncBlocked = 'Boolean | Optional | Indicates whether contacts can be synced to the user''s device.' Description = 'String | Optional | Description of the Android App Protection Policy.' MinimumRequiredPatchVersion = 'String | Optional | Versions less than the specified version will block the managed app from accessing company data.' DisableAppEncryptionIfDeviceEncryptionIsEnabled = 'Boolean | Optional | Indicates whether or not the ''Encrypt org data on enrolled devices'' value is enabled. False = require. Only functions if EncryptAppData is set to True' Assignments = @( 'String | Optional | List of IDs of the groups assigned to this Android Protection Policy.' ) DisplayName = 'String | Required | Display name of the Android App Protection Policy.' CustomBrowserDisplayName = 'String | Optional | The application name for browser associated with the ''Unmanaged Browser ID''. This name will be displayed to users if the specified browser is not installed.' RequireClass3Biometrics = 'Boolean | Optional | Require user to apply Class 3 Biometrics on their Android device.' AllowedInboundDataTransferSources = 'String | Optional | Sources from which data is allowed to be transferred. Possible values are: allApps, managedApps, none. | allApps / managedApps / none' AllowedOutboundDataTransferDestinations = 'String | Optional | Destinations to which data is allowed to be transferred. Possible values are: allApps, managedApps, none. | allApps / managedApps / none' MaximumPinRetries = 'UInt32 | Optional | Maximum number of incorrect pin retry attempts before the managed app is either blocked or wiped.' MinimumWarningOSVersion = 'String | Optional | Versions less than the specified version will result in warning message on the managed app' FingerprintBlocked = 'Boolean | Optional | Indicates whether use of the fingerprint reader is allowed in place of a pin if PinRequired is set to True.' PinRequired = 'Boolean | Optional | Indicates whether an app-level pin is required.' ManagedBrowserToOpenLinksRequired = 'Boolean | Optional | Indicates whether internet links should be opened in the managed browser app, or any custom browser specified by CustomBrowserProtocol (for Android) or CustomBrowserPackageId/CustomBrowserDisplayName (for Android).' OrganizationalCredentialsRequired = 'Boolean | Optional | Indicates whether organizational credentials are required for app use.' SimplePinBlocked = 'Boolean | Optional | Block simple PIN and require complex PIN to be set.' PrintBlocked = 'Boolean | Optional | Indicates whether printing is allowed from managed apps.' PeriodOfflineBeforeWipeIsEnforced = 'String | Optional | The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped.' CustomBrowserPackageId = 'String | Optional | The application ID for a single browser. Web content (http/s) from policy managed applications will open in the specified browser.' ScreenCaptureBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from taking Screenshots.' AppGroupType = 'String | Optional | The apps controlled by this protection policy, overrides any values in Apps unless this value is ''selectedPublicApps''. | allApps / allMicrosoftApps / allCoreMicrosoftApps / selectedPublicApps' ManagedBrowser = 'String | Optional | Indicates in which managed browser(s) that internet links should be opened. Used in conjunction with CustomBrowserPackageId, CustomBrowserDisplayName and ManagedBrowserToOpenLinksRequired. Possible values are: notConfigured, microsoftEdge. | notConfigured / microsoftEdge' PeriodBeforePinReset = 'String | Optional | TimePeriod before the all-level pin must be reset if PinRequired is set to True.' EncryptAppData = 'Boolean | Optional | Indicates whether or not the ''Encrypt org data'' value is enabled. True = require' AllowedOutboundClipboardSharingLevel = 'String | Optional | The level to which the clipboard may be shared between apps on the managed device. Possible values are: allApps, managedAppsWithPasteIn, managedApps, blocked. | allApps / managedAppsWithPasteIn / managedApps / blocked' AllowedDataStorageLocations = @( 'String | Optional | Data storage locations where a user may store managed data.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' MinimumWarningPatchVersion = 'String | Optional | Versions less than the specified version will result in warning message on the managed app' DeviceComplianceRequired = 'Boolean | Optional | Indicates whether device compliance is required.' IsAssigned = 'Boolean | Optional | Indicates if the policy is deployed to any inclusion groups or not. Inherited from targetedManagedAppProtection.' MinimumPinLength = 'UInt32 | Optional | Minimum pin length required for an app-level pin if PinRequired is set to True.' Id = 'String | Optional | Id of the Intune policy. To avoid creation of duplicate policies DisplayName will be searched for if the ID is not found' DataBackupBlocked = 'Boolean | Optional | Indicates whether the backup of a managed app''s data is blocked.' Apps = @( 'String | Optional | List of IDs representing the Android apps controlled by this protection policy.' ) MinimumRequiredOSVersion = 'String | Optional | Versions less than the specified version will block the managed app from accessing company data.' DisableAppPinIfDevicePinIsSet = 'Boolean | Optional | Indicates whether use of the app pin is required if the device pin is set.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RequirePinAfterBiometricChange = 'Boolean | Optional | A PIN prompt will override biometric prompts if class 3 biometrics are updated on the device.' MinimumWarningAppVersion = 'String | Optional | Versions less than the specified version will result in warning message on the managed app' PeriodOnlineBeforeAccessCheck = 'String | Optional | The period after which access is checked when the device is connected to the internet.' PinCharacterSet = 'String | Optional | Character set which may be used for an app-level pin if PinRequired is set to True. Possible values are: numeric, alphanumericAndSymbol. | numeric / alphanumericAndSymbol' PeriodOfflineBeforeAccessCheck = 'String | Optional | The period after which access is checked when the device is not connected to the internet.' SaveAsBlocked = 'Boolean | Optional | Indicates whether users may use the Save As menu item to save a copy of protected files.' ExcludedGroups = @( 'String | Optional | List of IDs of the groups that are excluded from this Android Protection Policy.' ) } ) AppProtectionPoliciesiOS = @( @{ FilterOpenInToOnlyManagedApps = 'Boolean | Optional | Defines if open-in operation is supported from the managed app to the filesharing locations selected. This setting only applies when AllowedOutboundDataTransferDestinations is set to ManagedApps and DisableProtectionOfManagedOutboundOpenInData is set to False.' ContactSyncBlocked = 'Boolean | Optional | Indicates whether contacts can be synced to the user''s device.' AppActionIfIosDeviceModelNotAllowed = 'String | Optional | Defines a managed app behavior, either block or wipe, if the specified device model is not allowed. | block / wipe / warn' TargetedAppManagementLevels = @( 'String | Optional | The intended app management levels for this policy. | unspecified / unmanaged / mdm / androidEnterprise' ) Identity = 'String | Optional | Identity of the iOS App Protection Policy.' Assignments = @( 'String | Optional | List of IDs of the groups assigned to this iOS Protection Policy.' ) MinimumRequiredSdkVersion = 'String | Optional | Versions less than the specified version will block the managed app from accessing company data.' MinimumWipeOSVersion = 'String | Optional | Versions less than or equal to the specified version will wipe the managed app and the associated company data.' DisplayName = 'String | Required | Display name of the iOS App Protection Policy.' DisableProtectionOfManagedOutboundOpenInData = 'Boolean | Optional | Disable protection of data transferred to other apps through IOS OpenIn option. This setting is only allowed to be True when AllowedOutboundDataTransferDestinations is set to ManagedApps.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MinimumWipeAppVersion = 'String | Optional | Versions less than or equal to the specified version will wipe the managed app and the associated company data.' AllowedInboundDataTransferSources = 'String | Optional | Sources from which data is allowed to be transferred. Possible values are: allApps, managedApps, none. | allApps / managedApps / none' DisableAppPinIfDevicePinIsSet = 'Boolean | Optional | Indicates whether use of the app pin is required if the device pin is set.' AllowedOutboundDataTransferDestinations = 'String | Optional | Destinations to which data is allowed to be transferred. Possible values are: allApps, managedApps, none. | allApps / managedApps / none' MaximumPinRetries = 'UInt32 | Optional | Maximum number of incorrect pin retry attempts before the managed app is either blocked or wiped.' AppDataEncryptionType = 'String | Optional | Require app data to be encrypted. | useDeviceSettings / afterDeviceRestart / whenDeviceLockedExceptOpenFiles / whenDeviceLocked' MinimumWarningOSVersion = 'String | Optional | Versions less than the specified version will result in warning message on the managed app from accessing company data.' PeriodBeforePinReset = 'String | Optional | TimePeriod before the all-level pin must be reset if PinRequired is set to True.' FaceIdBlocked = 'Boolean | Optional | Indicates whether use of the FaceID is allowed in place of a pin if PinRequired is set to True.' ProtectInboundDataFromUnknownSources = 'Boolean | Optional | Protect incoming data from unknown source. This setting is only allowed to be True when AllowedInboundDataTransferSources is set to AllApps.' PinRequired = 'Boolean | Optional | Indicates whether an app-level pin is required.' ManagedBrowserToOpenLinksRequired = 'Boolean | Optional | Indicates whether internet links should be opened in the managed browser app, or any custom browser specified by CustomBrowserProtocol (for iOS) or CustomBrowserPackageId/CustomBrowserDisplayName (for Android).' OrganizationalCredentialsRequired = 'Boolean | Optional | Indicates whether organizational credentials are required for app use.' CustomBrowserProtocol = 'String | Optional | A custom browser protocol to open weblink on iOS.' PrintBlocked = 'Boolean | Optional | Indicates whether printing is allowed from managed apps.' AppActionIfDeviceComplianceRequired = 'String | Optional | Defines a managed app behavior, either block or wipe, when the device is either rooted or jailbroken, if DeviceComplianceRequired is set to true. | block / wipe / warn' FingerprintBlocked = 'Boolean | Optional | Indicates whether use of the fingerprint reader is allowed in place of a pin if PinRequired is set to True.' Description = 'String | Optional | Description of the iOS App Protection Policy.' PinRequiredInsteadOfBiometricTimeout = 'String | Optional | Timeout in minutes for an app pin instead of non biometrics passcode .' ManagedBrowser = 'String | Optional | Indicates in which managed browser(s) that internet links should be opened. When this property is configured, ManagedBrowserToOpenLinksRequired should be true. Possible values are: notConfigured, microsoftEdge. | notConfigured / microsoftEdge' SimplePinBlocked = 'Boolean | Optional | Block simple PIN and require complex PIN to be set.' AllowedOutboundClipboardSharingLevel = 'String | Optional | The level to which the clipboard may be shared between apps on the managed device. Possible values are: allApps, managedAppsWithPasteIn, managedApps, blocked. | allApps / managedAppsWithPasteIn / managedApps / blocked' AllowedDataStorageLocations = @( 'String | Optional | Data storage locations where a user may store managed data.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ExemptedAppProtocols = @( 'String | Optional | Apps in this list will be exempt from the policy and will be able to receive data from managed apps.' ) AllowedOutboundClipboardSharingExceptionLength = 'UInt32 | Optional | Specify the number of characters that may be cut or copied from Org data and accounts to any application. This setting overrides the AllowedOutboundClipboardSharingLevel restriction. Default value of ''0'' means no exception is allowed.' DeviceComplianceRequired = 'Boolean | Optional | Indicates whether device compliance is required.' PeriodOfflineBeforeWipeIsEnforced = 'String | Optional | The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped.' DataBackupBlocked = 'Boolean | Optional | Indicates whether the backup of a managed app''s data is blocked.' Apps = @( 'String | Optional | List of IDs representing the iOS apps controlled by this protection policy.' ) MinimumRequiredOSVersion = 'String | Optional | Versions less than the specified version will block the managed app from accessing company data.' AllowedIosDeviceModels = @( 'String | Optional | Semicolon seperated list of device models allowed, as a string, for the managed app to work.' ) PeriodOnlineBeforeAccessCheck = 'String | Optional | The period after which access is checked when the device is connected to the internet.' MinimumPinLength = 'UInt32 | Optional | Minimum pin length required for an app-level pin if PinRequired is set to True.' MinimumWarningAppVersion = 'String | Optional | Versions less than the specified version will result in warning message on the managed app from accessing company data.' AppActionIfMaximumPinRetriesExceeded = 'String | Optional | Defines a managed app behavior, either block or wipe, based on maximum number of incorrect pin retry attempts. | block / wipe / warn' MinimumWipeSdkVersion = 'String | Optional | Versions less than the specified version will block the managed app from accessing company data.' PinCharacterSet = 'String | Optional | Character set which may be used for an app-level pin if PinRequired is set to True. Possible values are: numeric, alphanumericAndSymbol. | numeric / alphanumericAndSymbol' PeriodOfflineBeforeAccessCheck = 'String | Optional | The period after which access is checked when the device is not connected to the internet.' SaveAsBlocked = 'Boolean | Optional | Indicates whether users may use the Save As menu item to save a copy of protected files.' ExcludedGroups = @( 'String | Optional | List of IDs of the groups that are excluded from this iOS Protection Policy.' ) MinimumRequiredAppVersion = 'String | Optional | Versions less than the specified version will block the managed app from accessing company data.' NotificationRestriction = 'String | Optional | Specify app notification restriction. | allow / blockOrganizationalData / block' } ) ASRRulesPoliciesWindows10 = @( @{ AttackSurfaceReductionExcludedPaths = @( 'String | Optional | Exclude files and paths from attack surface reduction rules' ) UntrustedUSBProcessType = 'String | Optional | With this rule, admins can prevent unsigned or untrusted executable files from running from USB removable drives, including SD cards. | notConfigured / userDefined / block / auditMode / warn / disable' Description = 'String | Optional | Description of the endpoint protection attack surface protection rules policy for Windows 10.' UntrustedExecutableType = 'String | Optional | This rule blocks executable files that don''t meet a prevalence, age, or trusted list criteria, such as .exe, .dll, or .scr, from launching. | notConfigured / userDefined / block / auditMode / warn / disable' OfficeCommunicationAppsLaunchChildProcess = 'String | Optional | This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions. | notConfigured / userDefined / enable / auditMode / warn / disable' DisplayName = 'String | Required | Display name of the endpoint protection attack surface protection rules policy for Windows 10.' Ensure = 'String | Optional | Present ensures the site collection exists, absent ensures it is removed | Present / Absent' AdditionalGuardedFolders = @( 'String | Optional | List of additional folders that need to be protected' ) PreventCredentialStealingType = 'String | Optional | This rule helps prevent credential stealing by locking down Local Security Authority Subsystem Service (LSASS). | notConfigured / userDefined / enable / auditMode / warn' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OfficeAppsLaunchChildProcessType = 'String | Optional | This rule blocks Office apps from creating child processes. Office apps include Word, Excel, PowerPoint, OneNote, and Access. | notConfigured / userDefined / block / auditMode / warn / disable' GuardedFoldersAllowedAppPaths = @( 'String | Optional | List of apps that have access to protected folders.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) OfficeAppsOtherProcessInjectionType = 'String | Optional | This rule blocks code injection attempts from Office apps into other processes. | notConfigured / userDefined / block / auditMode / warn / disable' ScriptObfuscatedMacroCodeType = 'String | Optional | This rule detects suspicious properties within an obfuscated script. | notConfigured / userDefined / block / auditMode / warn / disable' BlockPersistenceThroughWmiType = 'String | Optional | This rule prevents malware from abusing WMI to attain persistence on a device. | notConfigured / userDefined / block / auditMode / warn / disable' OfficeAppsExecutableContentCreationOrLaunchType = 'String | Optional | This rule prevents Office apps, including Word, Excel, and PowerPoint, from creating potentially malicious executable content, by blocking malicious code from being written to disk. | notConfigured / userDefined / block / auditMode / warn / disable' ProcessCreationType = 'String | Optional | This rule blocks processes created through PsExec and WMI from running. | notConfigured / userDefined / block / auditMode / warn / disable' AdvancedRansomewareProtectionType = 'String | Optional | This rule provides an extra layer of protection against ransomware. | notConfigured / userDefined / enable / auditMode' OfficeMacroCodeAllowWin32ImportsType = 'String | Optional | This rule prevents VBA macros from calling Win32 APIs. | notConfigured / userDefined / block / auditMode / warn / disable' AdobeReaderLaunchChildProcess = 'String | Optional | This rule prevents attacks by blocking Adobe Reader from creating processes. | notConfigured / userDefined / enable / auditMode / warn' Identity = 'String | Optional | Identity of the endpoint protection attack surface protection rules policy for Windows 10.' GuardMyFoldersType = 'String | Optional | This rule enable Controlled folder access which protects your data by checking apps against a list of known, trusted apps. | notConfigured / userDefined / enable / auditMode / blockDiskModification / auditDiskModification' ScriptDownloadedPayloadExecutionType = 'String | Optional | This rule prevents scripts from launching potentially malicious downloaded content. | notConfigured / userDefined / block / auditMode / warn / disable' EmailContentExecutionType = 'String | Optional | This rule blocks the following file types from launching from email opened within the Microsoft Outlook application, or Outlook.com and other popular webmail providers. | notConfigured / userDefined / block / auditMode / warn / disable' } ) AttackSurfaceReductionRulesPoliciesWindows10ConfigManager = @( @{ BlockProcessCreationsFromPSExecAndWMICommands = 'String | Optional | This rule blocks processes created through PsExec and WMI from running. | off / block / audit / warn' BlockOfficeCommunicationAppFromCreatingChildProcesses = 'String | Optional | This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions. | off / block / audit / warn' Description = 'String | Optional | Description of the endpoint protection attack surface protection rules policy for Windows 10.' DisplayName = 'String | Required | Display name of the endpoint protection attack surface protection rules policy for Windows 10.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) BlockExecutableContentFromEmailClientAndWebmail = 'String | Optional | This rule blocks the following file types from launching from email opened within the Microsoft Outlook application, or Outlook.com and other popular webmail providers. | off / block / audit / warn' AttackSurfaceReductionOnlyExclusions = @( 'String | Optional | Exclude files and paths from attack surface reduction rules' ) UseAdvancedProtectionAgainstRansomware = 'String | Optional | This rule provides an extra layer of protection against ransomware. | off / block / audit / warn' ControlledFolderAccessAllowedApplications = @( 'String | Optional | List of apps that have access to protected folders.' ) BlockJavaScriptOrVBScriptFromLaunchingDownloadedExecutableContent = 'String | Optional | This rule prevents scripts from launching potentially malicious downloaded content. | off / block / audit / warn' EnableControlledFolderAccess = 'String | Optional | This rule enable Controlled folder access which protects your data by checking apps against a list of known, trusted apps.values 0:disable, 1:enable, 2:audit, 3: Block disk modification only, 4: Audit disk modification only | 0 / 1 / 2 / 3 / 4' BlockAllOfficeApplicationsFromCreatingChildProcesses = 'String | Optional | This rule blocks Office apps from creating child processes. Office apps include Word, Excel, PowerPoint, OneNote, and Access. | off / block / audit / warn' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' BlockOfficeApplicationsFromInjectingCodeIntoOtherProcesses = 'String | Optional | This rule blocks code injection attempts from Office apps into other processes. | off / block / audit / warn' BlockCredentialStealingFromWindowsLocalSecurityAuthoritySubsystem = 'String | Optional | This rule helps prevent credential stealing by locking down Local Security Authority Subsystem Service (LSASS). | off / block / audit / warn' Identity = 'String | Optional | Identity of the endpoint protection attack surface protection rules policy for Windows 10.' ControlledFolderAccessProtectedFolders = @( 'String | Optional | List of additional folders that need to be protected' ) BlockUntrustedUnsignedProcessesThatRunFromUSB = 'String | Optional | With this rule, admins can prevent unsigned or untrusted executable files from running from USB removable drives, including SD cards. | off / block / audit / warn' BlockWin32APICallsFromOfficeMacros = 'String | Optional | This rule prevents VBA macros from calling Win32 APIs. | off / block / audit / warn' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) BlockExecutableFilesRunningUnlessTheyMeetPrevalenceAgeTrustedListCriterion = 'String | Optional | This rule blocks executable files that don''t meet a prevalence, age, or trusted list criteria, such as .exe, .dll, or .scr, from launching. | off / block / audit / warn' BlockPersistenceThroughWMIEventSubscription = 'String | Optional | This rule prevents malware from abusing WMI to attain persistence on a device. | off / block / audit / warn' BlockAbuseOfExploitedVulnerableSignedDrivers = 'String | Optional | This rule prevents an application from writing a vulnerable signed driver to disk. | off / block / audit / warn' BlockExecutionOfPotentiallyObfuscatedScripts = 'String | Optional | This rule detects suspicious properties within an obfuscated script. | off / block / audit / warn' BlockOfficeApplicationsFromCreatingExecutableContent = 'String | Optional | This rule prevents Office apps, including Word, Excel, and PowerPoint, from creating potentially malicious executable content, by blocking malicious code from being written to disk. | off / block / audit / warn' BlockAdobeReaderFromCreatingChildProcesses = 'String | Optional | This rule prevents attacks by blocking Adobe Reader from creating processes. | off / block / audit / warn' } ) DerivedCredentials = @( @{ Issuer = 'String | Optional | Supported values for the derived credential issuer. | intercede / entrustDatacard / purebred' Id = 'String | Optional | The unique identifier for an entity. Read-only.' NotificationType = 'String | Optional | Supported values for the notification type to use. | none / email / companyPortal / companyPortal,email' Ensure = 'String | Optional | Supported values for the notification type to use. | Present / Absent' HelpUrl = 'String | Optional | The URL that will be accessible to end users as they retrieve a derived credential using the Company Portal.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RenewalThresholdPercentage = 'UInt32 | Optional | The nominal percentage of time before certificate renewal is initiated by the client.' DisplayName = 'String | Required | The name of the app category.' } ) DeviceAndAppManagementAssignmentFilters = @( @{ Description = 'String | Optional | Description of the Assignment Filter.' Platform = 'String | Optional | Platform type of the devices on which the Assignment Filter will be applicable. | android / androidForWork / iOS / macOS / windowsPhone81 / windows81AndLater / windows10AndLater / androidWorkProfile / unknown / androidAOSP / androidMobileApplicationManagement / iOSMobileApplicationManagement / unknownFutureValue' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | Key of the Assignment Filter.' Rule = 'String | Optional | Rule definition of the Assignment Filter.' DisplayName = 'String | Required | DisplayName of the Assignment Filter.' } ) DeviceCategories = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Description of the device category.' DisplayName = 'String | Required | Display name of the device category.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Present ensures the category exists, absent ensures it is removed. | Present / Absent' } ) DeviceCleanupRule = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Enabled = 'Boolean | Required | Indicates whether the cleanup rule is enabled.' Ensure = 'String | Optional | Present ensures the category exists, absent ensures it is removed. | Present / Absent' DeviceInactivityBeforeRetirementInDays = 'UInt32 | Optional | Number of days until Intune devices are deleted. Minimum: 30, Maximum: 270.' } DeviceCompliancePoliciesAndroid = @( @{ SecurityDisableUsbDebugging = 'Boolean | Optional | SecurityDisableUsbDebugging of the Android device compliance policy.' Description = 'String | Optional | Description of the Android device compliance policy.' StorageRequireEncryption = 'Boolean | Optional | StorageRequireEncryption of the Android device compliance policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Display name of the Android device compliance policy.' RestrictedApps = 'String | Optional | RestrictedApps of the Android device compliance policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RequiredPasswordComplexity = 'String | Optional | RequiredPasswordComplexity of the Android device compliance policy. | none / low / medium / high' OsMaximumVersion = 'String | Optional | OsMaximumVersion of the Android device compliance policy.' SecurityRequireSafetyNetAttestationBasicIntegrity = 'Boolean | Optional | SecurityRequireSafetyNetAttestationBasicIntegrity of the Android device compliance policy.' SecurityBlockJailbrokenDevices = 'Boolean | Optional | SecurityBlockJailbrokenDevices of the Android device compliance policy.' MinAndroidSecurityPatchLevel = 'String | Optional | MinAndroidSecurityPatchLevel of the Android device compliance policy.' SecurityRequireUpToDateSecurityProviders = 'Boolean | Optional | SecurityRequireUpToDateSecurityProviders of the Android device compliance policy.' SecurityRequireVerifyApps = 'Boolean | Optional | SecurityRequireVerifyApps of the Android device compliance policy.' DeviceThreatProtectionRequiredSecurityLevel = 'String | Optional | DeviceThreatProtectionRequiredSecurityLevel of the Android device compliance policy. | unavailable / secured / low / medium / high / notSet' RoleScopeTagIds = 'String | Optional | RoleScopeTagIds of the Android device compliance policy.' PasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | PasswordSignInFailureCountBeforeFactoryReset of the Android device compliance policy.' SecurityBlockDeviceAdministratorManagedDevices = 'Boolean | Optional | SecurityBlockDeviceAdministratorManagedDevices of the Android device compliance policy.' PasswordExpirationDays = 'UInt32 | Optional | PasswordExpirationDays of the Android device compliance policy.' AdvancedThreatProtectionRequiredSecurityLevel = 'String | Optional | AdvancedThreatProtectionRequiredSecurityLevel of the Android device compliance policy. | unavailable / secured / low / medium / high / notSet' SecurityRequireGooglePlayServices = 'Boolean | Optional | SecurityRequireGooglePlayServices of the Android device compliance policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ConditionStatementId = 'String | Optional | ConditionStatementId of the Android device compliance policy.' PasswordRequired = 'Boolean | Optional | PasswordRequired of the Android device compliance policy.' PasswordMinimumLength = 'UInt32 | Optional | PasswordMinimumLength of the Android device compliance policy.' SecurityRequireSafetyNetAttestationCertifiedDevice = 'Boolean | Optional | SecurityRequireSafetyNetAttestationCertifiedDevice of the Android device compliance policy.' UniqueId = 'String | Required | Unique ID to identify this specific object' SecurityRequireCompanyPortalAppIntegrity = 'Boolean | Optional | SecurityRequireCompanyPortalAppIntegrity of the Android device compliance policy.' SecurityPreventInstallAppsFromUnknownSources = 'Boolean | Optional | SecurityPreventInstallAppsFromUnknownSources of the Android device compliance policy.' OsMinimumVersion = 'String | Optional | OsMinimumVersion of the Android device compliance policy.' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | PasswordPreviousPasswordBlockCount of the Android device compliance policy.' DeviceThreatProtectionEnabled = 'Boolean | Optional | DeviceThreatProtectionEnabled of the Android device compliance policy.' PasswordRequiredType = 'String | Optional | PasswordRequiredType of the Android device compliance policy. | deviceDefault / alphabetic / alphanumeric / alphanumericWithSymbols / lowSecurityBiometric / numeric / numericComplex / any' PasswordMinutesOfInactivityBeforeLock = 'UInt32 | Optional | PasswordMinutesOfInactivityBeforeLock of the Android device compliance policy.' } ) DeviceCompliancePoliciesAndroidDeviceOwner = @( @{ PasswordMinutesOfInactivityBeforeLock = 'UInt32 | Optional | PasswordMinutesOfInactivityBeforeLock of the Android Device Owner device compliance policy.' Description = 'String | Optional | Description of the Android Device Owner device compliance policy.' osMaximumVersion = 'String | Optional | osMaximumVersion of the Android Device Owner device compliance policy.' DisplayName = 'String | Required | Display name of the Android Device Owner device compliance policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) passwordRequired = 'Boolean | Optional | PasswordRequired of the Android Device Owner device compliance policy.' UniqueId = 'String | Required | Unique ID to identify this specific object' passwordMinimumLength = 'UInt32 | Optional | PasswordMinimumLength of the Android Device Owner device compliance policy.' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance. Inherited from deviceConfiguration' ) DeviceThreatProtectionRequiredSecurityLevel = 'String | Optional | DeviceThreatProtectionRequiredSecurityLevel of the Android Device Owner device compliance policy.' osMinimumVersion = 'String | Optional | osMinimumVersion of the Android Device Owner device compliance policy.' AdvancedThreatProtectionRequiredSecurityLevel = 'String | Optional | AdvancedThreatProtectionRequiredSecurityLevel of the Android Device Owner device compliance policy.' PasswordExpirationDays = 'UInt32 | Optional | PasswordExpirationDays of the Android Device Owner device compliance policy.' PasswordRequiredType = 'String | Optional | PasswordRequiredType of the Android Device Owner device compliance policy. | deviceDefault / alphabetic / alphanumeric / alphanumericWithSymbols / lowSecurityBiometric / numeric / numericComplex / any' PasswordPreviousPasswordCountToBlock = 'UInt32 | Optional | PasswordPreviousPasswordCountToBlock of the Android Device Owner device compliance policy.' SecurityRequireSafetyNetAttestationCertifiedDevice = 'Boolean | Optional | SecurityRequireSafetyNetAttestationCertifiedDevice of the Android Device Owner device compliance policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) SecurityRequireSafetyNetAttestationBasicIntegrity = 'Boolean | Optional | SecurityRequireSafetyNetAttestationBasicIntegrity of the Android Device Owner device compliance policy.' SecurityRequireIntuneAppIntegrity = 'Boolean | Optional | SecurityRequireIntuneAppIntegrity of the Android Device Owner device compliance policy.' DeviceThreatProtectionEnabled = 'Boolean | Optional | DeviceThreatProtectionEnabled of the Android Device Owner device compliance policy.' StorageRequireEncryption = 'Boolean | Optional | StorageRequireEncryption of the Android Device Owner device compliance policy.' } ) DeviceCompliancePoliciesAndroidWorkProfile = @( @{ SecurityDisableUsbDebugging = 'Boolean | Optional | SecurityDisableUsbDebugging of the AndroidWorkProfile device compliance policy.' Description = 'String | Optional | Description of the AndroidWorkProfile device compliance policy.' StorageRequireEncryption = 'Boolean | Optional | StorageRequireEncryption of the AndroidWorkProfile device compliance policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Display name of the AndroidWorkProfile device compliance policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OsMaximumVersion = 'String | Optional | OsMaximumVersion of the AndroidWorkProfile device compliance policy.' SecurityRequireSafetyNetAttestationBasicIntegrity = 'Boolean | Optional | SecurityRequireSafetyNetAttestationBasicIntegrity of the AndroidWorkProfile device compliance policy.' SecurityBlockJailbrokenDevices = 'Boolean | Optional | SecurityBlockJailbrokenDevices of the AndroidWorkProfile device compliance policy.' MinAndroidSecurityPatchLevel = 'String | Optional | MinAndroidSecurityPatchLevel of the AndroidWorkProfile device compliance policy.' SecurityRequireUpToDateSecurityProviders = 'Boolean | Optional | SecurityRequireUpToDateSecurityProviders of the AndroidWorkProfile device compliance policy.' SecurityRequireVerifyApps = 'Boolean | Optional | SecurityRequireVerifyApps of the AndroidWorkProfile device compliance policy.' DeviceThreatProtectionEnabled = 'Boolean | Optional | DeviceThreatProtectionEnabled of the AndroidWorkProfile device compliance policy.' RoleScopeTagIds = 'String | Optional | RoleScopeTagIds of the AndroidWorkProfile device compliance policy.' PasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | PasswordSignInFailureCountBeforeFactoryReset of the AndroidWorkProfile device compliance policy.' PasswordExpirationDays = 'UInt32 | Optional | PasswordExpirationDays of the AndroidWorkProfile device compliance policy.' AdvancedThreatProtectionRequiredSecurityLevel = 'String | Optional | AdvancedThreatProtectionRequiredSecurityLevel of the AndroidWorkProfile device compliance policy. | unavailable / secured / low / medium / high / notSet' SecurityRequireGooglePlayServices = 'Boolean | Optional | SecurityRequireGooglePlayServices of the AndroidWorkProfile device compliance policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' PasswordRequired = 'Boolean | Optional | PasswordRequired of the AndroidWorkProfile device compliance policy.' PasswordMinimumLength = 'UInt32 | Optional | PasswordMinimumLength of the AndroidWorkProfile device compliance policy.' SecurityRequireSafetyNetAttestationCertifiedDevice = 'Boolean | Optional | SecurityRequireSafetyNetAttestationCertifiedDevice of the AndroidWorkProfile device compliance policy.' SecurityRequiredAndroidSafetyNetEvaluationType = 'String | Optional | Require a specific SafetyNet evaluation type for compliance. | basic / hardwareBacked' DeviceThreatProtectionRequiredSecurityLevel = 'String | Optional | DeviceThreatProtectionRequiredSecurityLevel of the AndroidWorkProfile device compliance policy. | unavailable / secured / low / medium / high / notSet' UniqueId = 'String | Required | Unique ID to identify this specific object' SecurityRequireCompanyPortalAppIntegrity = 'Boolean | Optional | SecurityRequireCompanyPortalAppIntegrity of the AndroidWorkProfile device compliance policy.' SecurityPreventInstallAppsFromUnknownSources = 'Boolean | Optional | SecurityPreventInstallAppsFromUnknownSources of the AndroidWorkProfile device compliance policy.' OsMinimumVersion = 'String | Optional | OsMinimumVersion of the AndroidWorkProfile device compliance policy.' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | PasswordPreviousPasswordBlockCount of the AndroidWorkProfile device compliance policy.' PasswordRequiredType = 'String | Optional | PasswordRequiredType of the AndroidWorkProfile device compliance policy. | deviceDefault / alphabetic / alphanumeric / alphanumericWithSymbols / lowSecurityBiometric / numeric / numericComplex / any' PasswordMinutesOfInactivityBeforeLock = 'UInt32 | Optional | PasswordMinutesOfInactivityBeforeLock of the AndroidWorkProfile device compliance policy.' } ) DeviceCompliancePoliciesiOs = @( @{ PasscodeBlockSimple = 'Boolean | Optional | PasscodeBlockSimple of the iOS device compliance policy.' PasscodeMinimumCharacterSetCount = 'UInt32 | Optional | PasscodeMinimumCharacterSetCount of the iOS device compliance policy.' OsMinimumBuildVersion = 'String | Optional | Minimum IOS build version.' Description = 'String | Optional | Description of the iOS device compliance policy.' PasscodeRequired = 'Boolean | Optional | PasscodeRequired of the iOS device compliance policy.' DisplayName = 'String | Required | Display name of the iOS device compliance policy.' PasscodeMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Minutes of inactivity before the screen times out.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PasscodeExpirationDays = 'UInt32 | Optional | PasscodeExpirationDays of the iOS device compliance policy.' OsMaximumVersion = 'String | Optional | OsMaximumVersion of the iOS device compliance policy.' RestrictedApps = @( @{ publisher = 'String | Optional | The publisher of the application.' appId = 'String | Optional | The application or bundle identifier of the application.' name = 'String | Optional | The application name.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' appStoreUrl = 'String | Optional | The Store URL of the application.' } ) OsMinimumVersion = 'String | Optional | OsMinimumVersion of the iOS device compliance policy.' AdvancedThreatProtectionRequiredSecurityLevel = 'String | Optional | MDATP Require Mobile Threat Protection minimum risk level to report noncompliance. | unavailable / secured / low / medium / high / notSet' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' DeviceThreatProtectionRequiredSecurityLevel = 'String | Optional | Require Mobile Threat Protection minimum risk level to report noncompliance. | unavailable / secured / low / medium / high / notSet' PasscodeMinutesOfInactivityBeforeLock = 'UInt32 | Optional | PasscodeMinutesOfInactivityBeforeLock of the iOS device compliance policy.' PasscodePreviousPasscodeBlockCount = 'UInt32 | Optional | PasscodePreviousPasscodeBlockCount of the iOS device compliance policy.' PasscodeRequiredType = 'String | Optional | PasscodeRequiredType of the iOS device compliance policy. | deviceDefault / alphanumeric / numeric' PasscodeMinimumLength = 'UInt32 | Optional | PasscodeMinimumLength of the iOS device compliance policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) OsMaximumBuildVersion = 'String | Optional | Maximum IOS build version.' SecurityBlockJailbrokenDevices = 'Boolean | Optional | SecurityBlockJailbrokenDevices of the iOS device compliance policy.' DeviceThreatProtectionEnabled = 'Boolean | Optional | DeviceThreatProtectionEnabled of the iOS device compliance policy.' ManagedEmailProfileRequired = 'Boolean | Optional | ManagedEmailProfileRequired of the iOS device compliance policy.' } ) DeviceCompliancePoliciesMacOS = @( @{ FirewallEnableStealthMode = 'Boolean | Optional | FirewallEnableStealthMode of the MacOS device compliance policy.' OsMaximumBuildVersion = 'String | Optional | Maximum MacOS build version.' DeviceThreatProtectionEnabled = 'Boolean | Optional | DeviceThreatProtectionEnabled of the MacOS device compliance policy.' FirewallBlockAllIncoming = 'Boolean | Optional | FirewallBlockAllIncoming of the MacOS device compliance policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Display name of the MacOS device compliance policy.' PasswordMinimumLength = 'UInt32 | Optional | PasswordMinimumLength of the MacOS device compliance policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) OsMaximumVersion = 'String | Optional | OsMaximumVersion of the MacOS device compliance policy.' StorageRequireEncryption = 'Boolean | Optional | StorageRequireEncryption of the MacOS device compliance policy.' DeviceThreatProtectionRequiredSecurityLevel = 'String | Optional | DeviceThreatProtectionRequiredSecurityLevel of the MacOS device compliance policy. | Unavailable / Secured / Low / Medium / High / NotSet' PasswordBlockSimple = 'Boolean | Optional | PasswordBlockSimple of the MacOS device compliance policy.' PasswordExpirationDays = 'UInt32 | Optional | PasswordExpirationDays of the MacOS device compliance policy.' FirewallEnabled = 'Boolean | Optional | FirewallEnabled of the MacOS device compliance policy.' AdvancedThreatProtectionRequiredSecurityLevel = 'String | Optional | AdvancedThreatProtectionRequiredSecurityLevel of the MacOS device compliance policy. | Unavailable / Secured / Low / Medium / High / NotSet' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Description of the MacOS device compliance policy.' PasswordRequired = 'Boolean | Optional | PasswordRequired of the MacOS device compliance policy.' SystemIntegrityProtectionEnabled = 'Boolean | Optional | SystemIntegrityProtectionEnabled of the MacOS device compliance policy.' UniqueId = 'String | Required | Unique ID to identify this specific object' OsMinimumBuildVersion = 'String | Optional | Minimum MacOS build version.' OsMinimumVersion = 'String | Optional | OsMinimumVersion of the MacOS device compliance policy.' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | PasswordPreviousPasswordBlockCount of the MacOS device compliance policy.' PasswordRequiredType = 'String | Optional | PasswordRequiredType of the MacOS device compliance policy. | DeviceDefault / Alphanumeric / Numeric' PasswordMinimumCharacterSetCount = 'UInt32 | Optional | PasswordMinimumCharacterSetCount of the MacOS device compliance policy.' PasswordMinutesOfInactivityBeforeLock = 'UInt32 | Optional | PasswordMinutesOfInactivityBeforeLock of the MacOS device compliance policy.' GatekeeperAllowedAppSource = 'String | Optional | System and Privacy setting that determines which download locations apps can be run from on a macOS device. | notConfigured / macAppStore / macAppStoreAndIdentifiedDevelopers / anywhere' } ) DeviceCompliancePoliciesWindows10 = @( @{ MobileOsMinimumVersion = 'String | Optional | MobileOsMinimumVersion of the Windows 10 device compliance policy.' OsMaximumVersion = 'String | Optional | OsMaximumVersion of the Windows 10 device compliance policy.' TpmRequired = 'Boolean | Optional | TpmRequired of the Windows 10 device compliance policy.' Description = 'String | Optional | Description of the Windows 10 device compliance policy.' StorageRequireEncryption = 'Boolean | Optional | StorageRequireEncryption of the Windows 10 device compliance policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) RequireHealthyDeviceReport = 'Boolean | Optional | RequireHealthyDeviceReport of the Windows 10 device compliance policy.' DisplayName = 'String | Required | Display name of the Windows 10 device compliance policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ActiveFirewallRequired = 'Boolean | Optional | ActiveFirewallRequired of the Windows 10 device compliance policy.' AntivirusRequired = 'Boolean | Optional | AntivirusRequired of the Windows 10 device compliance policy.' PasswordRequiredToUnlockFromIdle = 'Boolean | Optional | PasswordRequiredToUnlockFromIdle of the Windows 10 device compliance policy.' RTPEnabled = 'Boolean | Optional | RTPEnabled of the Windows 10 device compliance policy.' ValidOperatingSystemBuildRanges = @( @{ HighestVersion = 'String | Optional | The highest inclusive version that this range contains.' Description = 'String | Optional | The description of this range (e.g. Valid 1702 builds)' UniqueId = 'String | Required | [Unique ID to identify this specific object]' LowestVersion = 'String | Optional | The lowest inclusive version that this range contains.' } ) PasswordBlockSimple = 'Boolean | Optional | PasswordBlockSimple of the Windows 10 device compliance policy.' SecureBootEnabled = 'Boolean | Optional | SecureBootEnabled of the Windows 10 device compliance policy.' AntiSpywareRequired = 'Boolean | Optional | AntiSpywareRequired of the Windows 10 device compliance policy.' DefenderVersion = 'String | Optional | DefenderVersion of the Windows 10 device compliance policy.' CodeIntegrityEnabled = 'Boolean | Optional | CodeIntegrityEnabled of the Windows 10 device compliance policy.' SignatureOutOfDate = 'Boolean | Optional | SignatureOutOfDate of the Windows 10 device compliance policy.' PasswordRequiredType = 'String | Optional | PasswordRequiredType of the Windows 10 device compliance policy. | DeviceDefault / Alphanumeric / Numeric' DeviceThreatProtectionRequiredSecurityLevel = 'String | Optional | DeviceThreatProtectionRequiredSecurityLevel of the Windows 10 device compliance policy. | Unavailable / Secured / Low / Medium / High / NotSet' DeviceCompliancePolicyScript = 'String | Optional | DeviceCompliancePolicyScript of the Windows 10 device compliance policy.' PasswordExpirationDays = 'UInt32 | Optional | PasswordExpirationDays of the Windows 10 device compliance policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' PasswordRequired = 'Boolean | Optional | PasswordRequired of the Windows 10 device compliance policy.' PasswordMinimumLength = 'UInt32 | Optional | PasswordMinimumLength of the Windows 10 device compliance policy.' DefenderEnabled = 'Boolean | Optional | DefenderEnabled of the Windows 10 device compliance policy.' MobileOsMaximumVersion = 'String | Optional | MobileOsMaximumVersion of the Windows 10 device compliance policy.' EarlyLaunchAntiMalwareDriverEnabled = 'Boolean | Optional | EarlyLaunchAntiMalwareDriverEnabled of the Windows 10 device compliance policy.' UniqueId = 'String | Required | Unique ID to identify this specific object' OsMinimumVersion = 'String | Optional | OsMinimumVersion of the Windows 10 device compliance policy.' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | PasswordPreviousPasswordBlockCount of the Windows 10 device compliance policy.' DeviceThreatProtectionEnabled = 'Boolean | Optional | DeviceThreatProtectionEnabled of the Windows 10 device compliance policy.' ConfigurationManagerComplianceRequired = 'Boolean | Optional | ConfigurationManagerComplianceRequired of the Windows 10 device compliance policy.' BitLockerEnabled = 'Boolean | Optional | BitLockerEnabled of the Windows 10 device compliance policy.' PasswordMinimumCharacterSetCount = 'UInt32 | Optional | PasswordMinimumCharacterSetCount of the Windows 10 device compliance policy.' PasswordMinutesOfInactivityBeforeLock = 'UInt32 | Optional | PasswordMinutesOfInactivityBeforeLock of the Windows 10 device compliance policy.' } ) DeviceConfigurationAdministrativeTemplatePoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | User provided description for the resource object.' DefinitionValues = @( @{ ConfigurationType = 'String | Optional | Specifies how the value should be configured. This can be either as a Policy or as a Preference. Possible values are: policy, preference. | policy / preference' PresentationValues = @( @{ BooleanValue = 'Boolean | Optional | A value for the associated presentation.' StringValue = 'String | Optional | A value for the associated presentation.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' DecimalValue = 'UInt64 | Optional | A value for the associated presentation.' odataType = 'String | Optional | A value for the associated presentation. | #microsoft.graph.groupPolicyPresentationValueBoolean / #microsoft.graph.groupPolicyPresentationValueDecimal / #microsoft.graph.groupPolicyPresentationValueList / #microsoft.graph.groupPolicyPresentationValueLongDecimal / #microsoft.graph.groupPolicyPresentationValueMultiText / #microsoft.graph.groupPolicyPresentationValueText' PresentationDefinitionLabel = 'String | Optional | The label of the presentation definition. Read-only.' KeyValuePairValues = @( @{ Name = 'String | Optional | Name for this key-value pair.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Value for this key-value pair.' } ) PresentationDefinitionId = 'String | Optional | The unique identifier for presentation definition. Read-only.' StringValues = @( 'String | Optional | A list of pairs for the associated presentation.' ) } ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Definition = @{ CategoryPath = 'String | Optional | The localized full category path for the policy.' PolicyType = 'String | Optional | Specifies the type of group policy. Possible values are: admxBacked, admxIngested. | admxBacked / admxIngested' SupportedOn = 'String | Optional | Localized string used to specify what operating system or application version is affected by the policy.' MinDeviceCspVersion = 'String | Optional | Minimum required CSP version for device configuration in this definition' MinUserCspVersion = 'String | Optional | Minimum required CSP version for user configuration in this definition' ExplainText = 'String | Optional | The localized explanation or help text associated with the policy. The default value is empty.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' ClassType = 'String | Optional | Identifies the type of groups the policy can be applied to. Possible values are: user, machine. | user / machine' GroupPolicyCategoryId = 'String | Optional | The category id of the parent category' HasRelatedDefinitions = 'Boolean | Optional | Signifies whether or not there are related definitions to this definition' DisplayName = 'String | Optional | The localized policy name.' } Enabled = 'Boolean | Optional | Enables or disables the associated group policy definition.' } ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PolicyConfigurationIngestionType = 'String | Optional | Type of definitions configured for this policy. Possible values are: unknown, custom, builtIn, mixed, unknownFutureValue. | unknown / custom / builtIn / mixed / unknownFutureValue' DisplayName = 'String | Required | User provided name for the resource object.' } ) DeviceConfigurationCustomPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Admin provided description of the Device Configuration.' DisplayName = 'String | Required | Admin provided name of the device configuration.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' OmaSettings = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' FileName = 'String | Optional | File name associated with the Value property (.cer)' Description = 'String | Optional | Description.' OmaUri = 'String | Optional | OMA.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.omaSettingBase64 / #microsoft.graph.omaSettingBoolean / #microsoft.graph.omaSettingDateTime / #microsoft.graph.omaSettingFloatingPoint / #microsoft.graph.omaSettingInteger / #microsoft.graph.omaSettingString / #microsoft.graph.omaSettingStringXml' SecretReferenceValueId = 'String | Optional | ReferenceId for looking up secret for decryption. This property is read-only.' Value = 'String | Optional | Value. (Base64 encoded string)' IsReadOnly = 'Boolean | Optional | By setting to true, the CSP (configuration service provider) specified in the OMA-URI will perform a get, instead of set' IsEncrypted = 'Boolean | Optional | Indicates whether the value field is encrypted. This property is read-only.' DisplayName = 'String | Optional | Display Name.' } ) } ) DeviceConfigurationDefenderForEndpointOnboardingPoliciesWindows10 = @( @{ Description = 'String | Optional | Admin provided description of the Device Configuration.' AdvancedThreatProtectionAutoPopulateOnboardingBlob = 'Boolean | Optional | Auto populate onboarding blob programmatically from Advanced Threat protection service' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EnableExpeditedTelemetryReporting = 'Boolean | Optional | Expedite Windows Defender Advanced Threat Protection telemetry reporting frequency.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) AdvancedThreatProtectionOnboardingBlob = 'String | Optional | Windows Defender AdvancedThreatProtection Onboarding Blob.' AdvancedThreatProtectionOffboardingBlob = 'String | Optional | Windows Defender AdvancedThreatProtection Offboarding Blob.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AdvancedThreatProtectionOnboardingFilename = 'String | Optional | Name of the file from which AdvancedThreatProtectionOnboardingBlob was obtained.' AllowSampleSharing = 'Boolean | Optional | Windows Defender AdvancedThreatProtection ''Allow Sample Sharing'' Rule' Id = 'String | Optional | The unique identifier for an entity. Read-only.' AdvancedThreatProtectionOffboardingFilename = 'String | Optional | Name of the file from which AdvancedThreatProtectionOffboardingBlob was obtained.' } ) DeviceConfigurationDeliveryOptimizationPoliciesWindows10 = @( @{ CacheServerForegroundDownloadFallbackToHttpDelayInSeconds = 'UInt32 | Optional | Specifies number of seconds to delay a fall back from cache servers to an HTTP source for a foreground download. Valid values 0 to 2592000.' GroupIdSource = @{ GroupIdCustom = 'String | Optional | Specifies an arbitrary group ID that the device belongs to' GroupIdSourceOption = 'String | Optional | Set this policy to restrict peer selection to a specific source. Possible values are: notConfigured, adSite, authenticatedDomainSid, dhcpUserOption, dnsSuffix. | notConfigured / adSite / authenticatedDomainSid / dhcpUserOption / dnsSuffix' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deliveryOptimizationGroupIdCustom / #microsoft.graph.deliveryOptimizationGroupIdSourceOptions' } Id = 'String | Optional | The unique identifier for an entity. Read-only.' ModifyCacheLocation = 'String | Optional | Specifies the drive that Delivery Optimization should use for its cache.' CacheServerBackgroundDownloadFallbackToHttpDelayInSeconds = 'UInt32 | Optional | Specifies number of seconds to delay a fall back from cache servers to an HTTP source for a background download. Valid values 0 to 2592000.' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CacheServerHostNames = @( 'String | Optional | Specifies cache servers host names.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) BandwidthMode = @{ MaximumDownloadBandwidthInKilobytesPerSecond = 'UInt64 | Optional | Specifies the maximum download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization. Valid values 0 to 4294967295' BandwidthBackgroundPercentageHours = @{ BandwidthBeginBusinessHours = 'UInt32 | Optional | Specifies the beginning of business hours using a 24-hour clock (0-23). Valid values 0 to 23' BandwidthPercentageOutsideBusinessHours = 'UInt32 | Optional | Specifies the percentage of bandwidth to limit outsidse business hours (0-100). Valid values 0 to 100' BandwidthPercentageDuringBusinessHours = 'UInt32 | Optional | Specifies the percentage of bandwidth to limit during business hours (0-100). Valid values 0 to 100' BandwidthEndBusinessHours = 'UInt32 | Optional | Specifies the end of business hours using a 24-hour clock (0-23). Valid values 0 to 23' } MaximumForegroundBandwidthPercentage = 'UInt32 | Optional | Specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth (0-100). Valid values 0 to 100 The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads. Valid values 0 to 100' BandwidthForegroundPercentageHours = @{ BandwidthBeginBusinessHours = 'UInt32 | Optional | Specifies the beginning of business hours using a 24-hour clock (0-23). Valid values 0 to 23' BandwidthPercentageOutsideBusinessHours = 'UInt32 | Optional | Specifies the percentage of bandwidth to limit outsidse business hours (0-100). Valid values 0 to 100' BandwidthPercentageDuringBusinessHours = 'UInt32 | Optional | Specifies the percentage of bandwidth to limit during business hours (0-100). Valid values 0 to 100' BandwidthEndBusinessHours = 'UInt32 | Optional | Specifies the end of business hours using a 24-hour clock (0-23). Valid values 0 to 23' } MaximumBackgroundBandwidthPercentage = 'UInt32 | Optional | Specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth (0-100). Valid values 0 to 100' MaximumUploadBandwidthInKilobytesPerSecond = 'UInt64 | Optional | Specifies the maximum upload bandwidth in KiloBytes/second that a device will use across all concurrent upload activity using Delivery Optimization (0-4000000). Valid values 0 to 4000000 The default value is 0, which permits unlimited possible bandwidth (optimized for minimal usage of upload bandwidth). Valid values 0 to 4000000' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deliveryOptimizationBandwidthAbsolute / #microsoft.graph.deliveryOptimizationBandwidthHoursWithPercentage / #microsoft.graph.deliveryOptimizationBandwidthPercentage' } DeliveryOptimizationMode = 'String | Optional | Specifies the download method that delivery optimization can use to manage network bandwidth consumption for large content distribution scenarios. Possible values are: userDefined, httpOnly, httpWithPeeringNat, httpWithPeeringPrivateGroup, httpWithInternetPeering, simpleDownload, bypassMode. | userDefined / httpOnly / httpWithPeeringNat / httpWithPeeringPrivateGroup / httpWithInternetPeering / simpleDownload / bypassMode' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ForegroundDownloadFromHttpDelayInSeconds = 'UInt64 | Optional | Specifies number of seconds to delay an HTTP source in a foreground download that is allowed to use peer-to-peer (0-86400). Valid values 0 to 86400 Specifying 0 sets Delivery Optimization to manage this setting using the cloud service. Valid values 0 to 86400' MaximumCacheSize = @{ MaximumCacheSizePercentage = 'UInt32 | Optional | Specifies the maximum cache size that Delivery Optimization can utilize, as a percentage of disk size (1-100). Valid values 1 to 100' MaximumCacheSizeInGigabytes = 'UInt64 | Optional | Specifies the maximum size in GB of Delivery Optimization cache. Valid values 0 to 4294967295' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deliveryOptimizationMaxCacheSizeAbsolute / #microsoft.graph.deliveryOptimizationMaxCacheSizePercentage' } BackgroundDownloadFromHttpDelayInSeconds = 'UInt64 | Optional | Specifies number of seconds to delay an HTTP source in a background download that is allowed to use peer-to-peer. Valid values 0 to 4294967295' MinimumRamAllowedToPeerInGigabytes = 'UInt32 | Optional | Specifies the minimum RAM size in GB to use Peer Caching (1-100000). Valid values 1 to 100000' VpnPeerCaching = 'String | Optional | Specifies whether the device is allowed to participate in Peer Caching while connected via VPN to the domain network. | notConfigured / enabled / disabled' Description = 'String | Optional | Admin provided description of the Device Configuration.' MaximumCacheAgeInDays = 'UInt32 | Optional | Specifies the maximum time in days that each file is held in the Delivery Optimization cache after downloading successfully (0-3650). Valid values 0 to 3650' MinimumDiskSizeAllowedToPeerInGigabytes = 'UInt32 | Optional | Specifies the minimum disk size in GB to use Peer Caching (1-100000). Valid values 1 to 100000 Recommended values: 64 GB to 256 GB. Valid values 1 to 100000' RestrictPeerSelectionBy = 'String | Optional | Specifies to restrict peer selection via selected option. | notConfigured / subnetMask' SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' MinimumBatteryPercentageAllowedToUpload = 'UInt32 | Optional | Specifies the minimum battery percentage to allow the device to upload data (0-100). Valid values 0 to 100 The default value is 0. The value 0 (zero) means ''not limited'' and the cloud service default value will be used. Valid values 0 to 100' MinimumFileSizeToCacheInMegabytes = 'UInt32 | Optional | Specifies the minimum content file size in MB enabled to use Peer Caching (1-100000). Valid values 1 to 100000 Recommended values: 1 MB to 100,000 MB. Valid values 1 to 100000' } ) DeviceConfigurationDomainJoinPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ComputerNameSuffixRandomCharCount = 'UInt32 | Optional | Dynamically generated characters used as suffix for computer name. Valid values 3 to 14' Description = 'String | Optional | Admin provided description of the Device Configuration.' ActiveDirectoryDomainName = 'String | Optional | Active Directory domain name to join.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' ComputerNameStaticPrefix = 'String | Optional | Fixed prefix to be used for computer name.' OrganizationalUnit = 'String | Optional | Organizational unit (OU) where the computer account will be created. If this parameter is NULL, the well known computer object container will be used as published in the domain.' DisplayName = 'String | Required | Admin provided name of the device configuration.' } ) DeviceConfigurationEmailProfilePoliciesWindows10 = @( @{ SyncCalendar = 'Boolean | Optional | Whether or not to sync the calendar.' Description = 'String | Optional | Admin provided description of the Device Configuration.' CustomDomainName = 'String | Optional | Custom domain name value used while generating an email profile before installing on the device.' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EmailSyncSchedule = 'String | Optional | Email sync schedule. Possible values are: userDefined, asMessagesArrive, manual, fifteenMinutes, thirtyMinutes, sixtyMinutes, basedOnMyUsage. | userDefined / asMessagesArrive / manual / fifteenMinutes / thirtyMinutes / sixtyMinutes / basedOnMyUsage' UsernameSource = 'String | Optional | Username attribute that is picked from AAD and injected into this profile before installing on the device. Possible values are: userPrincipalName, primarySmtpAddress. | userPrincipalName / primarySmtpAddress' UsernameAADSource = 'String | Optional | Name of the AAD field, that will be used to retrieve UserName for email profile. Possible values are: userPrincipalName, primarySmtpAddress, samAccountName. | userPrincipalName / primarySmtpAddress / samAccountName' EmailAddressSource = 'String | Optional | Email attribute that is picked from AAD and injected into this profile before installing on the device. Possible values are: userPrincipalName, primarySmtpAddress. | userPrincipalName / primarySmtpAddress' SyncTasks = 'Boolean | Optional | Whether or not to sync tasks.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' UserDomainNameSource = 'String | Optional | UserDomainname attribute that is picked from AAD and injected into this profile before installing on the device. Possible values are: fullDomainName, netBiosDomainName. | fullDomainName / netBiosDomainName' HostName = 'String | Optional | Exchange location that (URL) that the native mail app connects to.' RequireSsl = 'Boolean | Optional | Indicates whether or not to use SSL.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DurationOfEmailToSync = 'String | Optional | Duration of email to sync. Possible values are: userDefined, oneDay, threeDays, oneWeek, twoWeeks, oneMonth, unlimited. | userDefined / oneDay / threeDays / oneWeek / twoWeeks / oneMonth / unlimited' SyncContacts = 'Boolean | Optional | Whether or not to sync contacts.' AccountName = 'String | Optional | Account name.' } ) DeviceConfigurationEndpointProtectionPoliciesWindows10 = @( @{ LocalSecurityOptionsClearVirtualMemoryPageFile = 'Boolean | Optional | This security setting determines whether the virtual memory pagefile is cleared when the system is shut down.' SmartScreenEnableInShell = 'Boolean | Optional | Allows IT Admins to configure SmartScreen for Windows.' ApplicationGuardForceAuditing = 'Boolean | Optional | Force auditing will persist Windows logs and events to meet security/compliance criteria (sample events are user login-logoff, use of privilege rights, software installation, system changes, etc.)' DefenderEnableLowCpuPriority = 'Boolean | Optional | This policy setting allows you to enable or disable low CPU priority for scheduled scans.' UserRightsChangeSystemTime = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } LocalSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation = 'Boolean | Optional | Enable all elevation requests to go to the interactive user''s desktop rather than the secure desktop. Prompt behavior policy settings for admins and standard users are used.' UserRightsIncreaseSchedulingPriority = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } UserRightsRestoreData = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderAllowOnAccessProtection = 'Boolean | Optional | Allows or disallows Windows Defender On Access Protection functionality.' ApplicationGuardAllowPrintToPDF = 'Boolean | Optional | Allow printing to PDF from Container' LocalSecurityOptionsUseAdminApprovalMode = 'Boolean | Optional | Defines whether the built-in admin account uses Admin Approval Mode or runs all apps with full admin privileges.Default is enabled' FirewallPreSharedKeyEncodingMethod = 'String | Optional | Select the preshared key encoding to be used. Possible values are: deviceDefault, none, utF8. | deviceDefault / none / utF8' UserRightsDelegation = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderDisableScanDownloads = 'Boolean | Optional | Allows or disallows Windows Defender IOAVP Protection functionality.' UserRightsDebugPrograms = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } LocalSecurityOptionsLogOnMessageTitle = 'String | Optional | Set message title for users attempting to log in.' UserRightsBackupData = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderSecurityCenterDisableAppBrowserUI = 'Boolean | Optional | Used to disable the display of the app and browser protection area.' DefenderDisableOnAccessProtection = 'Boolean | Optional | Allows or disallows Windows Defender On Access Protection functionality.' DefenderBlockPersistenceThroughWmiType = 'String | Optional | Value indicating the behavior ofBlock persistence through WMI event subscription. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' DefenderDisableScanNetworkFiles = 'Boolean | Optional | Allows or disallows a scanning of network files.' DefenderDisableCatchupQuickScan = 'Boolean | Optional | This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.' LocalSecurityOptionsStandardUserElevationPromptBehavior = 'String | Optional | Define the behavior of the elevation prompt for standard users. Possible values are: notConfigured, automaticallyDenyElevationRequests, promptForCredentialsOnTheSecureDesktop, promptForCredentials. | notConfigured / automaticallyDenyElevationRequests / promptForCredentialsOnTheSecureDesktop / promptForCredentials' DefenderScanMaxCpuPercentage = 'UInt32 | Optional | Represents the average CPU load factor for the Windows Defender scan (in percent). The default value is 50. Valid values 0 to 100' UserRightsGenerateSecurityAudits = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderSecurityCenterDisableClearTpmUI = 'Boolean | Optional | Used to disable the display of the Clear TPM button.' DefenderEnableScanIncomingMail = 'Boolean | Optional | Allows or disallows scanning of email.' DefenderAdobeReaderLaunchChildProcess = 'String | Optional | Value indicating the behavior of Adobe Reader from creating child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' DefenderDisableCloudProtection = 'Boolean | Optional | To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.' LocalSecurityOptionsSmartCardRemovalBehavior = 'String | Optional | This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader. Possible values are: noAction, lockWorkstation, forceLogoff, disconnectRemoteDesktopSession. | noAction / lockWorkstation / forceLogoff / disconnectRemoteDesktopSession' DefenderOfficeCommunicationAppsLaunchChildProcess = 'String | Optional | Value indicating the behavior of Office communication applications, including Microsoft Outlook, from creating child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' XboxServicesAccessoryManagementServiceStartupMode = 'String | Optional | This setting determines whether the Accessory management service''s start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled. | manual / automatic / disabled' DefenderScriptObfuscatedMacroCodeType = 'String | Optional | Value indicating the behavior of obfuscated js/vbs/ps/macro code. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' XboxServicesEnableXboxGameSaveTask = 'Boolean | Optional | This setting determines whether xbox game save is enabled (1) or disabled (0).' UserRightsCreateGlobalObjects = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } LocalSecurityOptionsMachineInactivityLimit = 'UInt32 | Optional | Define maximum minutes of inactivity on the interactive desktops login screen until the screen saver runs. Valid values 0 to 9999' LocalSecurityOptionsDisableGuestAccount = 'Boolean | Optional | Determines if the Guest account is enabled or disabled.' LocalSecurityOptionsLogOnMessageText = 'String | Optional | Set message text for users attempting to log in.' ApplicationGuardCertificateThumbprints = @( 'String | Optional | Allows certain device level Root Certificates to be shared with the Microsoft Defender Application Guard container.' ) DefenderCloudBlockLevel = 'String | Optional | Added in Windows 10, version 1709. This policy setting determines how aggressive Windows Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer. This feature requires the ''Join Microsoft MAPS'' setting enabled in order to function. Possible values are: notConfigured, high, highPlus, zeroTolerance. | notConfigured / high / highPlus / zeroTolerance' DefenderProcessCreationType = 'String | Optional | Value indicating response to process creations originating from PSExec and WMI commands. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' UserRightsLocalLogOn = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } LocalSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers = 'Boolean | Optional | If this security setting is enabled, the Server Message Block (SMB) redirector is allowed to send plaintext passwords to non-Microsoft SMB servers that do not support password encryption during authentication.' UserRightsProfileSingleProcess = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderPotentiallyUnwantedAppAction = 'String | Optional | Added in Windows 10, version 1607. Specifies the level of detection for potentially unwanted applications (PUAs). Windows Defender alerts you when potentially unwanted software is being downloaded or attempts to install itself on your computer. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' LocalSecurityOptionsUseAdminApprovalModeForAdministrators = 'Boolean | Optional | Define whether Admin Approval Mode and all UAC policy settings are enabled, default is enabled' DefenderDisableRealTimeMonitoring = 'Boolean | Optional | Allows or disallows Windows Defender Realtime Monitoring functionality.' DefenderSecurityCenterNotificationsFromApp = 'String | Optional | Notifications to show from the displayed areas of app. Possible values are: notConfigured, blockNoncriticalNotifications, blockAllNotifications. | notConfigured / blockNoncriticalNotifications / blockAllNotifications' LocalSecurityOptionsAdministratorAccountName = 'String | Optional | Define a different account name to be associated with the security identifier (SID) for the account ''Administrator''.' DefenderSecurityCenterDisableAccountUI = 'Boolean | Optional | Used to disable the display of the account protection area.' UserRightsBlockAccessFromNetwork = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderEmailContentExecutionType = 'String | Optional | Value indicating if execution of executable content (exe, dll, ps, js, vbs, etc) should be dropped from email (webmail/mail-client). Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' DefenderAllowScanNetworkFiles = 'Boolean | Optional | Allows or disallows a scanning of network files.' LocalSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts = 'Boolean | Optional | This security setting determines what additional permissions will be granted for anonymous connections to the computer.' DefenderProcessCreation = 'String | Optional | Value indicating response to process creations originating from PSExec and WMI commands. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' LocalSecurityOptionsDoNotRequireCtrlAltDel = 'Boolean | Optional | Require CTRL+ALT+DEL to be pressed before a user can log on.' ApplicationGuardBlockNonEnterpriseContent = 'Boolean | Optional | Block enterprise sites to load non-enterprise content, such as third party plug-ins' LocalSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares = 'Boolean | Optional | This security setting determines whether to allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares.' ApplicationGuardAllowPersistence = 'Boolean | Optional | Allow persisting user generated data inside the App Guard Containter (favorites, cookies, web passwords, etc.)' LocalSecurityOptionsBlockUsersInstallingPrinterDrivers = 'Boolean | Optional | Restrict installing printer drivers as part of connecting to a shared printer to admins only.' UserRightsCreatePageFile = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } LocalSecurityOptionsBlockMicrosoftAccounts = 'Boolean | Optional | Prevent users from adding new Microsoft accounts to this computer.' DmaGuardDeviceEnumerationPolicy = 'String | Optional | This policy is intended to provide additional security against external DMA capable devices. It allows for more control over the enumeration of external DMA capable devices incompatible with DMA Remapping/device memory isolation and sandboxing. This policy only takes effect when Kernel DMA Protection is supported and enabled by the system firmware. Kernel DMA Protection is a platform feature that cannot be controlled via policy or by end user. It has to be supported by the system at the time of manufacturing. To check if the system supports Kernel DMA Protection, please check the Kernel DMA Protection field in the Summary page of MSINFO32.exe. Possible values are: deviceDefault, blockAll, allowAll. | deviceDefault / blockAll / allowAll' DefenderOfficeAppsOtherProcessInjectionType = 'String | Optional | Value indicating the behavior ofOffice applications injecting into other processes. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' LocalSecurityOptionsGuestAccountName = 'String | Optional | Define a different account name to be associated with the security identifier (SID) for the account ''Guest''.' SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' DefenderDetectedMalwareActions = @{ LowSeverity = 'String | Optional | Indicates a Defender action to take for low severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' SevereSeverity = 'String | Optional | Indicates a Defender action to take for severe severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' ModerateSeverity = 'String | Optional | Indicates a Defender action to take for moderate severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' HighSeverity = 'String | Optional | Indicates a Defender action to take for high severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' } LanManagerWorkstationDisableInsecureGuestLogons = 'Boolean | Optional | If enabled,the SMB client will allow insecure guest logons. If not configured, the SMB client will reject insecure guest logons.' DefenderScheduledScanTime = 'String | Optional | Selects the time of day that the Windows Defender scan should run.' DefenderAllowIntrusionPreventionSystem = 'Boolean | Optional | Allows or disallows Windows Defender Intrusion Prevention functionality.' DefenderSecurityCenterDisableRansomwareUI = 'Boolean | Optional | Used to disable the display of the ransomware protection area.' BitLockerRecoveryPasswordRotation = 'String | Optional | This setting initiates a client-driven recovery password rotation after an OS drive recovery (either by using bootmgr or WinRE). Possible values are: notConfigured, disabled, enabledForAzureAd, enabledForAzureAdAndHybrid. | notConfigured / disabled / enabledForAzureAd / enabledForAzureAdAndHybrid' DefenderOfficeMacroCodeAllowWin32Imports = 'String | Optional | Value indicating the behavior of Win32 imports from Macro code in Office. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' DefenderSecurityCenterDisableSecureBootUI = 'Boolean | Optional | Used to disable the display of the secure boot area under Device security.' UserRightsAllowAccessFromNetwork = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderAllowScanRemovableDrivesDuringFullScan = 'Boolean | Optional | Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.' UserRightsCreateToken = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderAllowScanScriptsLoadedInInternetExplorer = 'Boolean | Optional | Allows or disallows Windows Defender Script Scanning functionality.' DefenderSecurityCenterDisableVirusUI = 'Boolean | Optional | Used to disable the display of the virus and threat protection area.' UserRightsAccessCredentialManagerAsTrustedCaller = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } LocalSecurityOptionsAllowUIAccessApplicationElevation = 'Boolean | Optional | Allow UIAccess apps to prompt for elevation without using the secure desktop.' DefenderDisableScanScriptsLoadedInInternetExplorer = 'Boolean | Optional | Allows or disallows Windows Defender Script Scanning functionality.' LocalSecurityOptionsAdministratorElevationPromptBehavior = 'String | Optional | Define the behavior of the elevation prompt for admins in Admin Approval Mode. Possible values are: notConfigured, elevateWithoutPrompting, promptForCredentialsOnTheSecureDesktop, promptForConsentOnTheSecureDesktop, promptForCredentials, promptForConsent, promptForConsentForNonWindowsBinaries. | notConfigured / elevateWithoutPrompting / promptForCredentialsOnTheSecureDesktop / promptForConsentOnTheSecureDesktop / promptForCredentials / promptForConsent / promptForConsentForNonWindowsBinaries' UserRightsCreatePermanentSharedObjects = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } UserRightsManageAuditingAndSecurityLogs = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } FirewallMergeKeyingModuleSettings = 'Boolean | Optional | If an authentication set is not fully supported by a keying module, direct the module to ignore only unsupported authentication suites rather than the entire set' LocalSecurityOptionsAllowPKU2UAuthenticationRequests = 'Boolean | Optional | Block PKU2U authentication requests to this device to use online identities.' DefenderCloudExtendedTimeoutInSeconds = 'UInt32 | Optional | Added in Windows 10, version 1709. This feature allows Windows Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it''s safe. Value type is integer, range is 0 - 50. This feature depends on three other MAPS settings the must all be enabled- ''Configure the ''Block at First Sight'' feature ''Join Microsoft MAPS'' ''Send file samples when further analysis is required''. Valid values 0 to 50' FirewallIPSecExemptionsAllowICMP = 'Boolean | Optional | Configures IPSec exemptions to allow ICMP' DefenderAllowEndUserAccess = 'Boolean | Optional | Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.' DefenderScriptDownloadedPayloadExecution = 'String | Optional | Value indicating the behavior of js/vbs executing payload downloaded from Internet. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' Description = 'String | Optional | Admin provided description of the Device Configuration.' DefenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI = 'Boolean | Optional | Used to disable the display of update TPM Firmware when a vulnerable firmware is detected.' DefenderSignatureUpdateIntervalInHours = 'UInt32 | Optional | Specifies the interval (in hours) that will be used to check for signatures, so instead of using the ScheduleDay and ScheduleTime the check for new signatures will be set according to the interval. Valid values 0 to 24' DefenderExploitProtectionXmlFileName = 'String | Optional | Name of the file from which DefenderExploitProtectionXml was obtained.' ApplicationGuardBlockFileTransfer = 'String | Optional | Block clipboard to transfer image file, text file or neither of them. Possible values are: notConfigured, blockImageAndTextFile, blockImageFile, blockNone, blockTextFile. | notConfigured / blockImageAndTextFile / blockImageFile / blockNone / blockTextFile' LocalSecurityOptionsClientDigitallySignCommunicationsAlways = 'Boolean | Optional | This security setting determines whether packet signing is required by the SMB client component.' DefenderScriptObfuscatedMacroCode = 'String | Optional | Value indicating the behavior of obfuscated js/vbs/ps/macro code. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' DefenderOfficeMacroCodeAllowWin32ImportsType = 'String | Optional | Value indicating the behavior of Win32 imports from Macro code in Office. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' LocalSecurityOptionsDisableAdministratorAccount = 'Boolean | Optional | Determines whether the Local Administrator account is enabled or disabled.' FirewallProfileDomain = @{ PolicyRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging Firewall Rule policies from group policy with those from local store instead of ignoring the local store rules. When PolicyRulesFromGroupPolicyNotMerged and PolicyRulesFromGroupPolicyMerged are both true, PolicyRulesFromGroupPolicyMerged takes priority.' InboundNotificationsBlocked = 'Boolean | Optional | Prevents the firewall from displaying notifications when an application is blocked from listening on a port. When InboundNotificationsRequired and InboundNotificationsBlocked are both true, InboundNotificationsBlocked takes priority.' OutboundConnectionsRequired = 'Boolean | Optional | Configures the firewall to allow all outgoing connections by default. When OutboundConnectionsRequired and OutboundConnectionsBlocked are both true, OutboundConnectionsBlocked takes priority. This setting will get applied to Windows releases version 1809 and above.' GlobalPortRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging global port rules from group policy with those from local store instead of ignoring the local store rules. When GlobalPortRulesFromGroupPolicyNotMerged and GlobalPortRulesFromGroupPolicyMerged are both true, GlobalPortRulesFromGroupPolicyMerged takes priority.' ConnectionSecurityRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging connection security rules from group policy with those from local store instead of ignoring the local store rules. When ConnectionSecurityRulesFromGroupPolicyNotMerged and ConnectionSecurityRulesFromGroupPolicyMerged are both true, ConnectionSecurityRulesFromGroupPolicyMerged takes priority.' UnicastResponsesToMulticastBroadcastsRequired = 'Boolean | Optional | Configures the firewall to allow unicast responses to multicast broadcast traffic. When UnicastResponsesToMulticastBroadcastsRequired and UnicastResponsesToMulticastBroadcastsBlocked are both true, UnicastResponsesToMulticastBroadcastsBlocked takes priority.' PolicyRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge Firewall Rule policies from group policy with those from local store instead of ignoring the local store rules. When PolicyRulesFromGroupPolicyNotMerged and PolicyRulesFromGroupPolicyMerged are both true, PolicyRulesFromGroupPolicyMerged takes priority.' UnicastResponsesToMulticastBroadcastsBlocked = 'Boolean | Optional | Configures the firewall to block unicast responses to multicast broadcast traffic. When UnicastResponsesToMulticastBroadcastsRequired and UnicastResponsesToMulticastBroadcastsBlocked are both true, UnicastResponsesToMulticastBroadcastsBlocked takes priority.' IncomingTrafficRequired = 'Boolean | Optional | Configures the firewall to allow incoming traffic pursuant to other policy settings. When IncomingTrafficRequired and IncomingTrafficBlocked are both true, IncomingTrafficBlocked takes priority.' IncomingTrafficBlocked = 'Boolean | Optional | Configures the firewall to block all incoming traffic regardless of other policy settings. When IncomingTrafficRequired and IncomingTrafficBlocked are both true, IncomingTrafficBlocked takes priority.' ConnectionSecurityRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge connection security rules from group policy with those from local store instead of ignoring the local store rules. When ConnectionSecurityRulesFromGroupPolicyNotMerged and ConnectionSecurityRulesFromGroupPolicyMerged are both true, ConnectionSecurityRulesFromGroupPolicyMerged takes priority.' StealthModeRequired = 'Boolean | Optional | Allow the server to operate in stealth mode. When StealthModeRequired and StealthModeBlocked are both true, StealthModeBlocked takes priority.' InboundNotificationsRequired = 'Boolean | Optional | Allows the firewall to display notifications when an application is blocked from listening on a port. When InboundNotificationsRequired and InboundNotificationsBlocked are both true, InboundNotificationsBlocked takes priority.' AuthorizedApplicationRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge authorized application rules from group policy with those from local store instead of ignoring the local store rules. When AuthorizedApplicationRulesFromGroupPolicyNotMerged and AuthorizedApplicationRulesFromGroupPolicyMerged are both true, AuthorizedApplicationRulesFromGroupPolicyMerged takes priority.' InboundConnectionsBlocked = 'Boolean | Optional | Configures the firewall to block all incoming connections by default. When InboundConnectionsRequired and InboundConnectionsBlocked are both true, InboundConnectionsBlocked takes priority.' OutboundConnectionsBlocked = 'Boolean | Optional | Configures the firewall to block all outgoing connections by default. When OutboundConnectionsRequired and OutboundConnectionsBlocked are both true, OutboundConnectionsBlocked takes priority. This setting will get applied to Windows releases version 1809 and above.' StealthModeBlocked = 'Boolean | Optional | Prevent the server from operating in stealth mode. When StealthModeRequired and StealthModeBlocked are both true, StealthModeBlocked takes priority.' GlobalPortRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge global port rules from group policy with those from local store instead of ignoring the local store rules. When GlobalPortRulesFromGroupPolicyNotMerged and GlobalPortRulesFromGroupPolicyMerged are both true, GlobalPortRulesFromGroupPolicyMerged takes priority.' SecuredPacketExemptionBlocked = 'Boolean | Optional | Configures the firewall to block the host computer to respond to unsolicited network traffic of that traffic is secured by IPSec even when stealthModeBlocked is set to true. When SecuredPacketExemptionBlocked and SecuredPacketExemptionAllowed are both true, SecuredPacketExemptionAllowed takes priority.' SecuredPacketExemptionAllowed = 'Boolean | Optional | Configures the firewall to allow the host computer to respond to unsolicited network traffic of that traffic is secured by IPSec even when stealthModeBlocked is set to true. When SecuredPacketExemptionBlocked and SecuredPacketExemptionAllowed are both true, SecuredPacketExemptionAllowed takes priority.' InboundConnectionsRequired = 'Boolean | Optional | Configures the firewall to allow all incoming connections by default. When InboundConnectionsRequired and InboundConnectionsBlocked are both true, InboundConnectionsBlocked takes priority.' FirewallEnabled = 'String | Optional | Configures the host device to allow or block the firewall and advanced security enforcement for the network profile. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' AuthorizedApplicationRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging authorized application rules from group policy with those from local store instead of ignoring the local store rules. When AuthorizedApplicationRulesFromGroupPolicyNotMerged and AuthorizedApplicationRulesFromGroupPolicyMerged are both true, AuthorizedApplicationRulesFromGroupPolicyMerged takes priority.' } DefenderSecurityCenterDisableTroubleshootingUI = 'Boolean | Optional | Used to disable the display of the security process troubleshooting under Device security.' FirewallBlockStatefulFTP = 'Boolean | Optional | Blocks stateful FTP connections to the device' DefenderOfficeAppsExecutableContentCreationOrLaunchType = 'String | Optional | Value indicating the behavior of Office applications/macros creating or launching executable content. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' DefenderEmailContentExecution = 'String | Optional | Value indicating if execution of executable content (exe, dll, ps, js, vbs, etc) should be dropped from email (webmail/mail-client). Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' UserRightsModifyFirmwareEnvironment = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } ApplicationGuardAllowFileSaveOnHost = 'Boolean | Optional | Allow users to download files from Edge in the application guard container and save them on the host file system' DefenderOfficeAppsExecutableContentCreationOrLaunch = 'String | Optional | Value indicating the behavior of Office applications/macros creating or launching executable content. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' LocalSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients = 'String | Optional | This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. Possible values are: none, requireNtmlV2SessionSecurity, require128BitEncryption, ntlmV2And128BitEncryption. | none / requireNtmlV2SessionSecurity / require128BitEncryption / ntlmV2And128BitEncryption' DefenderSubmitSamplesConsentType = 'String | Optional | Checks for the user consent level in Windows Defender to send data. Possible values are: sendSafeSamplesAutomatically, alwaysPrompt, neverSend, sendAllSamplesAutomatically. | sendSafeSamplesAutomatically / alwaysPrompt / neverSend / sendAllSamplesAutomatically' LocalSecurityOptionsDetectApplicationInstallationsAndPromptForElevation = 'Boolean | Optional | App installations requiring elevated privileges will prompt for admin credentials.Default is enabled' DefenderDisableIntrusionPreventionSystem = 'Boolean | Optional | Allows or disallows Windows Defender Intrusion Prevention functionality.' DefenderDisableCatchupFullScan = 'Boolean | Optional | This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.' BitLockerDisableWarningForOtherDiskEncryption = 'Boolean | Optional | Allows the Admin to disable the warning prompt for other disk encryption on the user machines.' XboxServicesLiveNetworkingServiceStartupMode = 'String | Optional | This setting determines whether Networking service''s start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled. | manual / automatic / disabled' DefenderScriptDownloadedPayloadExecutionType = 'String | Optional | Value indicating the behavior of js/vbs executing payload downloaded from Internet. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' UserRightsTakeOwnership = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } FirewallProfilePublic = @{ PolicyRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging Firewall Rule policies from group policy with those from local store instead of ignoring the local store rules. When PolicyRulesFromGroupPolicyNotMerged and PolicyRulesFromGroupPolicyMerged are both true, PolicyRulesFromGroupPolicyMerged takes priority.' InboundNotificationsBlocked = 'Boolean | Optional | Prevents the firewall from displaying notifications when an application is blocked from listening on a port. When InboundNotificationsRequired and InboundNotificationsBlocked are both true, InboundNotificationsBlocked takes priority.' OutboundConnectionsRequired = 'Boolean | Optional | Configures the firewall to allow all outgoing connections by default. When OutboundConnectionsRequired and OutboundConnectionsBlocked are both true, OutboundConnectionsBlocked takes priority. This setting will get applied to Windows releases version 1809 and above.' GlobalPortRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging global port rules from group policy with those from local store instead of ignoring the local store rules. When GlobalPortRulesFromGroupPolicyNotMerged and GlobalPortRulesFromGroupPolicyMerged are both true, GlobalPortRulesFromGroupPolicyMerged takes priority.' ConnectionSecurityRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging connection security rules from group policy with those from local store instead of ignoring the local store rules. When ConnectionSecurityRulesFromGroupPolicyNotMerged and ConnectionSecurityRulesFromGroupPolicyMerged are both true, ConnectionSecurityRulesFromGroupPolicyMerged takes priority.' UnicastResponsesToMulticastBroadcastsRequired = 'Boolean | Optional | Configures the firewall to allow unicast responses to multicast broadcast traffic. When UnicastResponsesToMulticastBroadcastsRequired and UnicastResponsesToMulticastBroadcastsBlocked are both true, UnicastResponsesToMulticastBroadcastsBlocked takes priority.' PolicyRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge Firewall Rule policies from group policy with those from local store instead of ignoring the local store rules. When PolicyRulesFromGroupPolicyNotMerged and PolicyRulesFromGroupPolicyMerged are both true, PolicyRulesFromGroupPolicyMerged takes priority.' UnicastResponsesToMulticastBroadcastsBlocked = 'Boolean | Optional | Configures the firewall to block unicast responses to multicast broadcast traffic. When UnicastResponsesToMulticastBroadcastsRequired and UnicastResponsesToMulticastBroadcastsBlocked are both true, UnicastResponsesToMulticastBroadcastsBlocked takes priority.' IncomingTrafficRequired = 'Boolean | Optional | Configures the firewall to allow incoming traffic pursuant to other policy settings. When IncomingTrafficRequired and IncomingTrafficBlocked are both true, IncomingTrafficBlocked takes priority.' IncomingTrafficBlocked = 'Boolean | Optional | Configures the firewall to block all incoming traffic regardless of other policy settings. When IncomingTrafficRequired and IncomingTrafficBlocked are both true, IncomingTrafficBlocked takes priority.' ConnectionSecurityRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge connection security rules from group policy with those from local store instead of ignoring the local store rules. When ConnectionSecurityRulesFromGroupPolicyNotMerged and ConnectionSecurityRulesFromGroupPolicyMerged are both true, ConnectionSecurityRulesFromGroupPolicyMerged takes priority.' StealthModeRequired = 'Boolean | Optional | Allow the server to operate in stealth mode. When StealthModeRequired and StealthModeBlocked are both true, StealthModeBlocked takes priority.' InboundNotificationsRequired = 'Boolean | Optional | Allows the firewall to display notifications when an application is blocked from listening on a port. When InboundNotificationsRequired and InboundNotificationsBlocked are both true, InboundNotificationsBlocked takes priority.' AuthorizedApplicationRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge authorized application rules from group policy with those from local store instead of ignoring the local store rules. When AuthorizedApplicationRulesFromGroupPolicyNotMerged and AuthorizedApplicationRulesFromGroupPolicyMerged are both true, AuthorizedApplicationRulesFromGroupPolicyMerged takes priority.' InboundConnectionsBlocked = 'Boolean | Optional | Configures the firewall to block all incoming connections by default. When InboundConnectionsRequired and InboundConnectionsBlocked are both true, InboundConnectionsBlocked takes priority.' OutboundConnectionsBlocked = 'Boolean | Optional | Configures the firewall to block all outgoing connections by default. When OutboundConnectionsRequired and OutboundConnectionsBlocked are both true, OutboundConnectionsBlocked takes priority. This setting will get applied to Windows releases version 1809 and above.' StealthModeBlocked = 'Boolean | Optional | Prevent the server from operating in stealth mode. When StealthModeRequired and StealthModeBlocked are both true, StealthModeBlocked takes priority.' GlobalPortRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge global port rules from group policy with those from local store instead of ignoring the local store rules. When GlobalPortRulesFromGroupPolicyNotMerged and GlobalPortRulesFromGroupPolicyMerged are both true, GlobalPortRulesFromGroupPolicyMerged takes priority.' SecuredPacketExemptionBlocked = 'Boolean | Optional | Configures the firewall to block the host computer to respond to unsolicited network traffic of that traffic is secured by IPSec even when stealthModeBlocked is set to true. When SecuredPacketExemptionBlocked and SecuredPacketExemptionAllowed are both true, SecuredPacketExemptionAllowed takes priority.' SecuredPacketExemptionAllowed = 'Boolean | Optional | Configures the firewall to allow the host computer to respond to unsolicited network traffic of that traffic is secured by IPSec even when stealthModeBlocked is set to true. When SecuredPacketExemptionBlocked and SecuredPacketExemptionAllowed are both true, SecuredPacketExemptionAllowed takes priority.' InboundConnectionsRequired = 'Boolean | Optional | Configures the firewall to allow all incoming connections by default. When InboundConnectionsRequired and InboundConnectionsBlocked are both true, InboundConnectionsBlocked takes priority.' FirewallEnabled = 'String | Optional | Configures the host device to allow or block the firewall and advanced security enforcement for the network profile. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' AuthorizedApplicationRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging authorized application rules from group policy with those from local store instead of ignoring the local store rules. When AuthorizedApplicationRulesFromGroupPolicyNotMerged and AuthorizedApplicationRulesFromGroupPolicyMerged are both true, AuthorizedApplicationRulesFromGroupPolicyMerged takes priority.' } LocalSecurityOptionsOnlyElevateSignedExecutables = 'Boolean | Optional | Enforce PKI certification path validation for a given executable file before it is permitted to run.' FirewallIPSecExemptionsAllowRouterDiscovery = 'Boolean | Optional | Configures IPSec exemptions to allow router discovery IPv6 ICMP type-codes' BitLockerFixedDrivePolicy = @{ RecoveryOptions = @{ RecoveryInformationToStore = 'String | Optional | Configure what pieces of BitLocker recovery information are stored to AD DS. Possible values are: passwordAndKey, passwordOnly. | passwordAndKey / passwordOnly' HideRecoveryOptions = 'Boolean | Optional | Indicates whether or not to allow showing recovery options in BitLocker Setup Wizard for fixed or system disk.' BlockDataRecoveryAgent = 'Boolean | Optional | Indicates whether to block certificate-based data recovery agent.' RecoveryKeyUsage = 'String | Optional | Indicates whether users are allowed or required to generate a 256-bit recovery key for fixed or system disk. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' EnableBitLockerAfterRecoveryInformationToStore = 'Boolean | Optional | Indicates whether or not to enable BitLocker until recovery information is stored in AD DS.' EnableRecoveryInformationSaveToStore = 'Boolean | Optional | Indicates whether or not to allow BitLocker recovery information to store in AD DS.' RecoveryPasswordUsage = 'String | Optional | Indicates whether users are allowed or required to generate a 48-digit recovery password for fixed or system disk. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' } RequireEncryptionForWriteAccess = 'Boolean | Optional | This policy setting determines whether BitLocker protection is required for fixed data drives to be writable on a computer.' EncryptionMethod = 'String | Optional | Select the encryption method for fixed drives. Possible values are: aesCbc128, aesCbc256, xtsAes128, xtsAes256. | aesCbc128 / aesCbc256 / xtsAes128 / xtsAes256' } UserRightsCreateSymbolicLinks = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } SmartScreenBlockOverrideForFiles = 'Boolean | Optional | Allows IT Admins to control whether users can can ignore SmartScreen warnings and run malicious files.' LocalSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange = 'Boolean | Optional | This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the new password is stored. Its not stored by default.' DefenderCheckForSignaturesBeforeRunningScan = 'Boolean | Optional | This policy setting allows you to manage whether a check for new virus and spyware definitions will occur before running a scan.' DefenderSecurityCenterHelpEmail = 'String | Optional | The email address that is displayed to users.' FirewallRules = @( @{ LocalAddressRanges = @( 'String | Optional | List of local addresses covered by the rule. Default is any address. Valid tokens include:'''' indicates any local address. If present, this must be the only token included.A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask nor a network prefix is specified, the subnet mask defaults to 255.255.255.255.A valid IPv6 address.An IPv4 address range in the format of ''start address - end address'' with no spaces included.An IPv6 address range in the format of ''start address - end address'' with no spaces included.' ) Description = 'String | Optional | The description of the rule.' InterfaceTypes = @( 'String | Optional | The interface types of the rule. Possible values are: notConfigured, remoteAccess, wireless, lan. | notConfigured / remoteAccess / wireless / lan' ) RemotePortRanges = @( 'String | Optional | List of remote port ranges. For example, ''100-120'', ''200'', ''300-320''. If not specified, the default is All.' ) DisplayName = 'String | Optional | The display name of the rule. Does not need to be unique.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' ServiceName = 'String | Optional | The name used in cases when a service, not an application, is sending or receiving traffic.' FilePath = 'String | Optional | The full file path of an app that''s affected by the firewall rule.' LocalUserAuthorizations = 'String | Optional | Specifies the list of authorized local users for the app container. This is a string in Security Descriptor Definition Language (SDDL) format.' Protocol = 'UInt32 | Optional | 0-255 number representing the IP protocol (TCP = 6, UDP = 17). If not specified, the default is All. Valid values 0 to 255' TrafficDirection = 'String | Optional | The traffic direction that the rule is enabled for. If not specified, the default is Out. Possible values are: notConfigured, out, in. | notConfigured / out / in' RemoteAddressRanges = @( 'String | Optional | List of tokens specifying the remote addresses covered by the rule. Tokens are case insensitive. Default is any address. Valid tokens include:'''' indicates any remote address. If present, this must be the only token included.''Defaultgateway''''DHCP''''DNS''''WINS''''Intranet'' (supported on Windows versions 1809+)''RmtIntranet'' (supported on Windows versions 1809+)''Internet'' (supported on Windows versions 1809+)''Ply2Renders'' (supported on Windows versions 1809+)''LocalSubnet'' indicates any local address on the local subnet.A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask nor a network prefix is specified, the subnet mask defaults to 255.255.255.255.A valid IPv6 address.An IPv4 address range in the format of ''start address - end address'' with no spaces included.An IPv6 address range in the format of ''start address - end address'' with no spaces included.' ) PackageFamilyName = 'String | Optional | The package family name of a Microsoft Store application that''s affected by the firewall rule.' Action = 'String | Optional | The action the rule enforces. If not specified, the default is Allowed. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalPortRanges = @( 'String | Optional | List of local port ranges. For example, ''100-120'', ''200'', ''300-320''. If not specified, the default is All.' ) ProfileTypes = 'String | Optional | Specifies the profiles to which the rule belongs. If not specified, the default is All. Possible values are: notConfigured, domain, private, public.' EdgeTraversal = 'String | Optional | Indicates whether edge traversal is enabled or disabled for this rule. The EdgeTraversal setting indicates that specific inbound traffic is allowed to tunnel through NATs and other edge devices using the Teredo tunneling technology. In order for this setting to work correctly, the application or service with the inbound firewall rule needs to support IPv6. The primary application of this setting allows listeners on the host to be globally addressable through a Teredo IPv6 address. New rules have the EdgeTraversal property disabled by default. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' } ) ApplicationGuardAllowVirtualGPU = 'Boolean | Optional | Allow application guard to use virtual GPU' Id = 'String | Optional | The unique identifier for an entity. Read-only.' DefenderSecurityCenterOrganizationDisplayName = 'String | Optional | The company name that is displayed to the users.' BitLockerRemovableDrivePolicy = @{ RequireEncryptionForWriteAccess = 'Boolean | Optional | Indicates whether to block write access to devices configured in another organization. If requireEncryptionForWriteAccess is false, this value does not affect.' BlockCrossOrganizationWriteAccess = 'Boolean | Optional | This policy setting determines whether BitLocker protection is required for removable data drives to be writable on a computer.' EncryptionMethod = 'String | Optional | Select the encryption method for removable drives. Possible values are: aesCbc128, aesCbc256, xtsAes128, xtsAes256. | aesCbc128 / aesCbc256 / xtsAes128 / xtsAes256' } LocalSecurityOptionsAllowUIAccessApplicationsForSecureLocations = 'Boolean | Optional | Allow UIAccess apps to prompt for elevation without using the secure desktop.Default is enabled' DefenderFileExtensionsToExclude = @( 'String | Optional | File extensions to exclude from scans and real time protection.' ) LocalSecurityOptionsHideLastSignedInUser = 'Boolean | Optional | Do not display the username of the last person who signed in on this device.' DefenderSecurityCenterHelpPhone = 'String | Optional | The phone number or Skype ID that is displayed to users.' LocalSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers = 'String | Optional | This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. Possible values are: none, requireNtmlV2SessionSecurity, require128BitEncryption, ntlmV2And128BitEncryption. | none / requireNtmlV2SessionSecurity / require128BitEncryption / ntlmV2And128BitEncryption' XboxServicesLiveAuthManagerServiceStartupMode = 'String | Optional | This setting determines whether Live Auth Manager service''s start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled. | manual / automatic / disabled' DefenderAdditionalGuardedFolders = @( 'String | Optional | List of folder paths to be added to the list of protected folders' ) LocalSecurityOptionsMachineInactivityLimitInMinutes = 'UInt32 | Optional | Define maximum minutes of inactivity on the interactive desktops login screen until the screen saver runs. Valid values 0 to 9999' DefenderSecurityCenterDisableNetworkUI = 'Boolean | Optional | Used to disable the display of the firewall and network protection area.' UserRightsModifyObjectLabels = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DeviceGuardLocalSystemAuthorityCredentialGuardSettings = 'String | Optional | Turn on Credential Guard when Platform Security Level with Secure Boot and Virtualization Based Security are both enabled. Possible values are: notConfigured, enableWithUEFILock, enableWithoutUEFILock, disable. | notConfigured / enableWithUEFILock / enableWithoutUEFILock / disable' FirewallIdleTimeoutForSecurityAssociationInSeconds = 'UInt32 | Optional | Configures the idle timeout for security associations, in seconds, from 300 to 3600 inclusive. This is the period after which security associations will expire and be deleted. Valid values 300 to 3600' DefenderSecurityCenterHelpURL = 'String | Optional | The help portal URL this is displayed to users.' LocalSecurityOptionsDisableServerDigitallySignCommunicationsAlways = 'Boolean | Optional | This security setting determines whether packet signing is required by the SMB server component.' LocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool = 'Boolean | Optional | UI helper boolean for LocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManager entity' DefenderBlockEndUserAccess = 'Boolean | Optional | Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.' DeviceGuardEnableVirtualizationBasedSecurity = 'Boolean | Optional | Turns On Virtualization Based Security(VBS).' DefenderSecurityCenterBlockExploitProtectionOverride = 'Boolean | Optional | Indicates whether or not to block user from overriding Exploit Protection settings.' XboxServicesLiveGameSaveServiceStartupMode = 'String | Optional | This setting determines whether Live Game save service''s start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled. | manual / automatic / disabled' BitLockerEnableStorageCardEncryptionOnMobile = 'Boolean | Optional | Allows the admin to require encryption to be turned on using BitLocker. This policy is valid only for a mobile SKU.' ApplicationGuardAllowPrintToLocalPrinters = 'Boolean | Optional | Allow printing to Local Printers from Container' DefenderGuardedFoldersAllowedAppPaths = @( 'String | Optional | List of paths to exe that are allowed to access protected folders' ) DefenderFilesAndFoldersToExclude = @( 'String | Optional | Files and folder to exclude from scans and real time protection.' ) DefenderAllowScanArchiveFiles = 'Boolean | Optional | Allows or disallows scanning of archives.' FirewallIPSecExemptionsNone = 'Boolean | Optional | Configures IPSec exemptions to no exemptions' BitLockerAllowStandardUserEncryption = 'Boolean | Optional | Allows the admin to allow standard users to enable encrpytion during Azure AD Join.' LocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManager = 'String | Optional | Edit the default Security Descriptor Definition Language string to allow or deny users and groups to make remote calls to the SAM.' DefenderScheduledScanDay = 'String | Optional | Selects the day that the Windows Defender scan should run. Possible values are: userDefined, everyday, sunday, monday, tuesday, wednesday, thursday, friday, saturday, noScheduledScan. | userDefined / everyday / sunday / monday / tuesday / wednesday / thursday / friday / saturday / noScheduledScan' DefenderSecurityCenterDisableHardwareUI = 'Boolean | Optional | Used to disable the display of the hardware protection area.' FirewallPacketQueueingMethod = 'String | Optional | Configures how packet queueing should be applied in the tunnel gateway scenario. Possible values are: deviceDefault, disabled, queueInbound, queueOutbound, queueBoth. | deviceDefault / disabled / queueInbound / queueOutbound / queueBoth' DefenderUntrustedUSBProcessType = 'String | Optional | Value indicating response to untrusted and unsigned processes that run from USB. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' DefenderNetworkProtectionType = 'String | Optional | Value indicating the behavior of NetworkProtection. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' ApplicationGuardEnabledOptions = 'String | Optional | Enable Windows Defender Application Guard for newer Windows builds. Possible values are: notConfigured, enabledForEdge, enabledForOffice, enabledForEdgeAndOffice. | notConfigured / enabledForEdge / enabledForOffice / enabledForEdgeAndOffice' DefenderScanDirection = 'String | Optional | Controls which sets of files should be monitored. Possible values are: monitorAllFiles, monitorIncomingFilesOnly, monitorOutgoingFilesOnly. | monitorAllFiles / monitorIncomingFilesOnly / monitorOutgoingFilesOnly' BitLockerEncryptDevice = 'Boolean | Optional | Allows the admin to require encryption to be turned on using BitLocker.' DefenderAllowRealTimeMonitoring = 'Boolean | Optional | Allows or disallows Windows Defender Realtime Monitoring functionality.' FirewallIPSecExemptionsAllowNeighborDiscovery = 'Boolean | Optional | Configures IPSec exemptions to allow neighbor discovery IPv6 ICMP type-codes' DefenderOfficeAppsOtherProcessInjection = 'String | Optional | Value indicating the behavior of Office applications injecting into other processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' DefenderUntrustedExecutable = 'String | Optional | Value indicating response to executables that don''t meet a prevalence, age, or trusted list criteria. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' DisplayName = 'String | Required | Admin provided name of the device configuration.' DefenderGuardMyFoldersType = 'String | Optional | Value indicating the behavior of protected folders. Possible values are: userDefined, enable, auditMode, blockDiskModification, auditDiskModification. | userDefined / enable / auditMode / blockDiskModification / auditDiskModification' LocalSecurityOptionsInformationDisplayedOnLockScreen = 'String | Optional | Configure the user information that is displayed when the session is locked. If not configured, user display name, domain and username are shown. Possible values are: notConfigured, administrators, administratorsAndPowerUsers, administratorsAndInteractiveUsers. | notConfigured / administrators / administratorsAndPowerUsers / administratorsAndInteractiveUsers' DeviceGuardEnableSecureBootWithDMA = 'Boolean | Optional | This property will be deprecated in May 2019 and will be replaced with property DeviceGuardSecureBootWithDMA. Specifies whether Platform Security Level is enabled at next reboot.' DefenderOfficeAppsLaunchChildProcess = 'String | Optional | Value indicating the behavior of Office application launching child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' DefenderScheduledQuickScanTime = 'String | Optional | Selects the time of day that the Windows Defender quick scan should run. For example, a value of 0=12:00AM, a value of 60=1:00AM, a value of 120=2:00, and so on, up to a value of 1380=11:00PM. The default value is 120' ApplicationGuardAllowCameraMicrophoneRedirection = 'Boolean | Optional | Gets or sets whether applications inside Microsoft Defender Application Guard can access the devices camera and microphone.' ApplicationGuardAllowPrintToXPS = 'Boolean | Optional | Allow printing to XPS from Container' DeviceGuardLaunchSystemGuard = 'String | Optional | Allows the IT admin to configure the launch of System Guard. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' DefenderEnableScanMappedNetworkDrivesDuringFullScan = 'Boolean | Optional | Allows or disallows a full scan of mapped network drives.' LocalSecurityOptionsBlockRemoteOpticalDriveAccess = 'Boolean | Optional | Enabling this settings allows only interactively logged on user to access CD-ROM media.' DefenderUntrustedUSBProcess = 'String | Optional | Value indicating response to untrusted and unsigned processes that run from USB. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' LocalSecurityOptionsAllowUndockWithoutHavingToLogon = 'Boolean | Optional | Prevent a portable computer from being undocked without having to log in.' AppLockerApplicationControl = 'String | Optional | Enables the Admin to choose what types of app to allow on devices. Possible values are: notConfigured, enforceComponentsAndStoreApps, auditComponentsAndStoreApps, enforceComponentsStoreAppsAndSmartlocker, auditComponentsStoreAppsAndSmartlocker. | notConfigured / enforceComponentsAndStoreApps / auditComponentsAndStoreApps / enforceComponentsStoreAppsAndSmartlocker / auditComponentsStoreAppsAndSmartlocker' UserRightsRemoteShutdown = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } FirewallProfilePrivate = @{ PolicyRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging Firewall Rule policies from group policy with those from local store instead of ignoring the local store rules. When PolicyRulesFromGroupPolicyNotMerged and PolicyRulesFromGroupPolicyMerged are both true, PolicyRulesFromGroupPolicyMerged takes priority.' InboundNotificationsBlocked = 'Boolean | Optional | Prevents the firewall from displaying notifications when an application is blocked from listening on a port. When InboundNotificationsRequired and InboundNotificationsBlocked are both true, InboundNotificationsBlocked takes priority.' OutboundConnectionsRequired = 'Boolean | Optional | Configures the firewall to allow all outgoing connections by default. When OutboundConnectionsRequired and OutboundConnectionsBlocked are both true, OutboundConnectionsBlocked takes priority. This setting will get applied to Windows releases version 1809 and above.' GlobalPortRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging global port rules from group policy with those from local store instead of ignoring the local store rules. When GlobalPortRulesFromGroupPolicyNotMerged and GlobalPortRulesFromGroupPolicyMerged are both true, GlobalPortRulesFromGroupPolicyMerged takes priority.' ConnectionSecurityRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging connection security rules from group policy with those from local store instead of ignoring the local store rules. When ConnectionSecurityRulesFromGroupPolicyNotMerged and ConnectionSecurityRulesFromGroupPolicyMerged are both true, ConnectionSecurityRulesFromGroupPolicyMerged takes priority.' UnicastResponsesToMulticastBroadcastsRequired = 'Boolean | Optional | Configures the firewall to allow unicast responses to multicast broadcast traffic. When UnicastResponsesToMulticastBroadcastsRequired and UnicastResponsesToMulticastBroadcastsBlocked are both true, UnicastResponsesToMulticastBroadcastsBlocked takes priority.' PolicyRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge Firewall Rule policies from group policy with those from local store instead of ignoring the local store rules. When PolicyRulesFromGroupPolicyNotMerged and PolicyRulesFromGroupPolicyMerged are both true, PolicyRulesFromGroupPolicyMerged takes priority.' UnicastResponsesToMulticastBroadcastsBlocked = 'Boolean | Optional | Configures the firewall to block unicast responses to multicast broadcast traffic. When UnicastResponsesToMulticastBroadcastsRequired and UnicastResponsesToMulticastBroadcastsBlocked are both true, UnicastResponsesToMulticastBroadcastsBlocked takes priority.' IncomingTrafficRequired = 'Boolean | Optional | Configures the firewall to allow incoming traffic pursuant to other policy settings. When IncomingTrafficRequired and IncomingTrafficBlocked are both true, IncomingTrafficBlocked takes priority.' IncomingTrafficBlocked = 'Boolean | Optional | Configures the firewall to block all incoming traffic regardless of other policy settings. When IncomingTrafficRequired and IncomingTrafficBlocked are both true, IncomingTrafficBlocked takes priority.' ConnectionSecurityRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge connection security rules from group policy with those from local store instead of ignoring the local store rules. When ConnectionSecurityRulesFromGroupPolicyNotMerged and ConnectionSecurityRulesFromGroupPolicyMerged are both true, ConnectionSecurityRulesFromGroupPolicyMerged takes priority.' StealthModeRequired = 'Boolean | Optional | Allow the server to operate in stealth mode. When StealthModeRequired and StealthModeBlocked are both true, StealthModeBlocked takes priority.' InboundNotificationsRequired = 'Boolean | Optional | Allows the firewall to display notifications when an application is blocked from listening on a port. When InboundNotificationsRequired and InboundNotificationsBlocked are both true, InboundNotificationsBlocked takes priority.' AuthorizedApplicationRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge authorized application rules from group policy with those from local store instead of ignoring the local store rules. When AuthorizedApplicationRulesFromGroupPolicyNotMerged and AuthorizedApplicationRulesFromGroupPolicyMerged are both true, AuthorizedApplicationRulesFromGroupPolicyMerged takes priority.' InboundConnectionsBlocked = 'Boolean | Optional | Configures the firewall to block all incoming connections by default. When InboundConnectionsRequired and InboundConnectionsBlocked are both true, InboundConnectionsBlocked takes priority.' OutboundConnectionsBlocked = 'Boolean | Optional | Configures the firewall to block all outgoing connections by default. When OutboundConnectionsRequired and OutboundConnectionsBlocked are both true, OutboundConnectionsBlocked takes priority. This setting will get applied to Windows releases version 1809 and above.' StealthModeBlocked = 'Boolean | Optional | Prevent the server from operating in stealth mode. When StealthModeRequired and StealthModeBlocked are both true, StealthModeBlocked takes priority.' GlobalPortRulesFromGroupPolicyMerged = 'Boolean | Optional | Configures the firewall to merge global port rules from group policy with those from local store instead of ignoring the local store rules. When GlobalPortRulesFromGroupPolicyNotMerged and GlobalPortRulesFromGroupPolicyMerged are both true, GlobalPortRulesFromGroupPolicyMerged takes priority.' SecuredPacketExemptionBlocked = 'Boolean | Optional | Configures the firewall to block the host computer to respond to unsolicited network traffic of that traffic is secured by IPSec even when stealthModeBlocked is set to true. When SecuredPacketExemptionBlocked and SecuredPacketExemptionAllowed are both true, SecuredPacketExemptionAllowed takes priority.' SecuredPacketExemptionAllowed = 'Boolean | Optional | Configures the firewall to allow the host computer to respond to unsolicited network traffic of that traffic is secured by IPSec even when stealthModeBlocked is set to true. When SecuredPacketExemptionBlocked and SecuredPacketExemptionAllowed are both true, SecuredPacketExemptionAllowed takes priority.' InboundConnectionsRequired = 'Boolean | Optional | Configures the firewall to allow all incoming connections by default. When InboundConnectionsRequired and InboundConnectionsBlocked are both true, InboundConnectionsBlocked takes priority.' FirewallEnabled = 'String | Optional | Configures the host device to allow or block the firewall and advanced security enforcement for the network profile. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' AuthorizedApplicationRulesFromGroupPolicyNotMerged = 'Boolean | Optional | Configures the firewall to prevent merging authorized application rules from group policy with those from local store instead of ignoring the local store rules. When AuthorizedApplicationRulesFromGroupPolicyNotMerged and AuthorizedApplicationRulesFromGroupPolicyMerged are both true, AuthorizedApplicationRulesFromGroupPolicyMerged takes priority.' } ApplicationGuardAllowPrintToNetworkPrinters = 'Boolean | Optional | Allow printing to Network Printers from Container' LocalSecurityOptionsInformationShownOnLockScreen = 'String | Optional | Configure the user information that is displayed when the session is locked. If not configured, user display name, domain and username are shown. Possible values are: notConfigured, userDisplayNameDomainUser, userDisplayNameOnly, doNotDisplayUser. | notConfigured / userDisplayNameDomainUser / userDisplayNameOnly / doNotDisplayUser' DefenderOfficeAppsLaunchChildProcessType = 'String | Optional | Value indicating the behavior of Office application launching child processes. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' DeviceGuardSecureBootWithDMA = 'String | Optional | Specifies whether Platform Security Level is enabled at next reboot. Possible values are: notConfigured, withoutDMA, withDMA. | notConfigured / withoutDMA / withDMA' DefenderAllowCloudProtection = 'Boolean | Optional | To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.' LocalSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn = 'Boolean | Optional | This security setting determines whether a computer can be shut down without having to log on to Windows.' DefenderExploitProtectionXml = 'String | Optional | Xml content containing information regarding exploit protection details.' UserRightsRemoteDesktopServicesLogOn = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderProcessesToExclude = @( 'String | Optional | Processes to exclude from scans and real time protection.' ) LocalSecurityOptionsBlockRemoteLogonWithBlankPassword = 'Boolean | Optional | Enable Local accounts that are not password protected to log on from locations other than the physical device.Default is enabled' FirewallIPSecExemptionsAllowDHCP = 'Boolean | Optional | Configures IPSec exemptions to allow both IPv4 and IPv6 DHCP traffic' UserRightsLoadUnloadDrivers = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } UserRightsDenyLocalLogOn = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderScanType = 'String | Optional | Selects whether to perform a quick scan or full scan. Possible values are: userDefined, disabled, quick, full. | userDefined / disabled / quick / full' BitLockerSystemDrivePolicy = @{ PrebootRecoveryEnableMessageAndUrl = 'Boolean | Optional | Enable pre-boot recovery message and Url. If requireStartupAuthentication is false, this value does not affect.' StartupAuthenticationTpmPinUsage = 'String | Optional | Indicates if TPM startup pin is allowed/required/disallowed. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' EncryptionMethod = 'String | Optional | Select the encryption method for operating system drives. Possible values are: aesCbc128, aesCbc256, xtsAes128, xtsAes256. | aesCbc128 / aesCbc256 / xtsAes128 / xtsAes256' MinimumPinLength = 'UInt32 | Optional | Indicates the minimum length of startup pin. Valid values 4 to 20' PrebootRecoveryMessage = 'String | Optional | Defines a custom recovery message.' StartupAuthenticationTpmPinAndKeyUsage = 'String | Optional | Indicates if TPM startup pin key and key are allowed/required/disallowed. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' StartupAuthenticationRequired = 'Boolean | Optional | Require additional authentication at startup.' RecoveryOptions = @{ RecoveryInformationToStore = 'String | Optional | Configure what pieces of BitLocker recovery information are stored to AD DS. Possible values are: passwordAndKey, passwordOnly. | passwordAndKey / passwordOnly' HideRecoveryOptions = 'Boolean | Optional | Indicates whether or not to allow showing recovery options in BitLocker Setup Wizard for fixed or system disk.' BlockDataRecoveryAgent = 'Boolean | Optional | Indicates whether to block certificate-based data recovery agent.' RecoveryKeyUsage = 'String | Optional | Indicates whether users are allowed or required to generate a 256-bit recovery key for fixed or system disk. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' EnableBitLockerAfterRecoveryInformationToStore = 'Boolean | Optional | Indicates whether or not to enable BitLocker until recovery information is stored in AD DS.' EnableRecoveryInformationSaveToStore = 'Boolean | Optional | Indicates whether or not to allow BitLocker recovery information to store in AD DS.' RecoveryPasswordUsage = 'String | Optional | Indicates whether users are allowed or required to generate a 48-digit recovery password for fixed or system disk. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' } PrebootRecoveryUrl = 'String | Optional | Defines a custom recovery URL.' StartupAuthenticationTpmUsage = 'String | Optional | Indicates if TPM startup is allowed/required/disallowed. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' StartupAuthenticationTpmKeyUsage = 'String | Optional | Indicates if TPM startup key is allowed/required/disallowed. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' StartupAuthenticationBlockWithoutTpmChip = 'Boolean | Optional | Indicates whether to allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive).' } DefenderAllowBehaviorMonitoring = 'Boolean | Optional | Allows or disallows Windows Defender Behavior Monitoring functionality.' LocalSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares = 'Boolean | Optional | By default, this security setting restricts anonymous access to shares and pipes to the settings for named pipes that can be accessed anonymously and Shares that can be accessed anonymously' DefenderSecurityCenterDisableNotificationAreaUI = 'Boolean | Optional | Used to disable the display of the notification area control. The user needs to either sign out and sign in or reboot the computer for this setting to take effect.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DefenderDisableBehaviorMonitoring = 'Boolean | Optional | Allows or disallows Windows Defender Behavior Monitoring functionality.' DefenderAttackSurfaceReductionExcludedPaths = @( 'String | Optional | List of exe files and folders to be excluded from attack surface reduction rules' ) UserRightsManageVolumes = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } ApplicationGuardBlockClipboardSharing = 'String | Optional | Block clipboard to share data from Host to Container, or from Container to Host, or both ways, or neither ways. Possible values are: notConfigured, blockBoth, blockHostToContainer, blockContainerToHost, blockNone. | notConfigured / blockBoth / blockHostToContainer / blockContainerToHost / blockNone' DefenderDaysBeforeDeletingQuarantinedMalware = 'UInt32 | Optional | Time period (in days) that quarantine items will be stored on the system. Valid values 0 to 90' DefenderDisableScanRemovableDrivesDuringFullScan = 'Boolean | Optional | Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.' LocalSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees = 'Boolean | Optional | This security setting determines whether the SMB client attempts to negotiate SMB packet signing.' ApplicationGuardEnabled = 'Boolean | Optional | Enable Windows Defender Application Guard' LocalSecurityOptionsHideUsernameAtSignIn = 'Boolean | Optional | Do not display the username of the person signing in to this device after credentials are entered and before the devices desktop is shown.' DefenderAllowScanDownloads = 'Boolean | Optional | Allows or disallows Windows Defender IOAVP Protection functionality.' DefenderUntrustedExecutableType = 'String | Optional | Value indicating response to executables that don''t meet a prevalence, age, or trusted list criteria. Possible values are: userDefined, block, auditMode, warn, disable. | userDefined / block / auditMode / warn / disable' DefenderSecurityCenterDisableHealthUI = 'Boolean | Optional | Used to disable the display of the device performance and health area.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' FirewallCertificateRevocationListCheckMethod = 'String | Optional | Specify how the certificate revocation list is to be enforced. Possible values are: deviceDefault, none, attempt, require. | deviceDefault / none / attempt / require' DefenderSecurityCenterDisableFamilyUI = 'Boolean | Optional | Used to disable the display of the family options area.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UserRightsLockMemory = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } WindowsDefenderTamperProtection = 'String | Optional | Configure windows defender TamperProtection settings. Possible values are: notConfigured, enable, disable. | notConfigured / enable / disable' LocalSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees = 'Boolean | Optional | This security setting determines whether the SMB server will negotiate SMB packet signing with clients that request it.' UserRightsImpersonateClient = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderSecurityCenterITContactDisplay = 'String | Optional | Configure where to display IT contact information to end users. Possible values are: notConfigured, displayInAppAndInNotifications, displayOnlyInApp, displayOnlyInNotifications. | notConfigured / displayInAppAndInNotifications / displayOnlyInApp / displayOnlyInNotifications' DefenderAdvancedRansomewareProtectionType = 'String | Optional | Value indicating use of advanced protection against ransomeware. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' LocalSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser = 'String | Optional | Define who is allowed to format and eject removable NTFS media. Possible values are: notConfigured, administrators, administratorsAndPowerUsers, administratorsAndInteractiveUsers. | notConfigured / administrators / administratorsAndPowerUsers / administratorsAndInteractiveUsers' DefenderDisableScanArchiveFiles = 'Boolean | Optional | Allows or disallows scanning of archives.' LanManagerAuthenticationLevel = 'String | Optional | This security setting determines which challenge/response authentication protocol is used for network logons. Possible values are: lmAndNltm, lmNtlmAndNtlmV2, lmAndNtlmOnly, lmAndNtlmV2, lmNtlmV2AndNotLm, lmNtlmV2AndNotLmOrNtm. | lmAndNltm / lmNtlmAndNtlmV2 / lmAndNtlmOnly / lmAndNtlmV2 / lmNtlmV2AndNotLm / lmNtlmV2AndNotLmOrNtm' UserRightsActAsPartOfTheOperatingSystem = @{ State = 'String | Optional | Representing the current state of this user rights setting. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LocalUsersOrGroups = @( @{ Description = 'String | Optional | Admins description of this local user or group.' Name = 'String | Optional | The name of this local user or group.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SecurityIdentifier = 'String | Optional | The security identifier of this local user or group (e.g. S-1-5-32-544).' } ) } DefenderPreventCredentialStealingType = 'String | Optional | Value indicating if credential stealing from the Windows local security authority subsystem is permitted. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' LocalSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations = 'Boolean | Optional | Virtualize file and registry write failures to per user locations' } ) DeviceConfigurationFirmwareInterfacePoliciesWindows10 = @( @{ Description = 'String | Optional | Admin provided description of the Device Configuration.' RearCamera = 'String | Optional | Defines whether a user is allowed to enable rear camera. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) MicrophonesAndSpeakers = 'String | Optional | Defines whether built-in microphones or speakers are enabled. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UsbTypeAPort = 'String | Optional | Defines whether a user is allowed to enable USB Type A Port. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' WiFi = 'String | Optional | Defines whether a user is allowed to enable WiFi. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' WirelessWideAreaNetwork = 'String | Optional | Defines whether a user is allowed to enable Wireless Wide Area Network. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' BootFromBuiltInNetworkAdapters = 'String | Optional | Defines whether a user is allowed to boot from built-in network adapters. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' VirtualizationOfCpuAndIO = 'String | Optional | Defines whether CPU and IO virtualization is enabled. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' Bluetooth = 'String | Optional | Defines whether a user is allowed to enable Bluetooth. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' ChangeUefiSettingsPermission = 'String | Optional | Defines the permission level granted to users to change UEFI settings. Possible values are: notConfiguredOnly, none. | notConfiguredOnly / none' NearFieldCommunication = 'String | Optional | Defines whether a user is allowed to enable Near Field Communication. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' Cameras = 'String | Optional | Defines whether built-in cameras are enabled. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Radios = 'String | Optional | Defines whether built-in radios e.g. WIFI, NFC, Bluetooth, are enabled. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' BootFromExternalMedia = 'String | Optional | Defines whether a user is allowed to boot from external media. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' Id = 'String | Optional | The unique identifier for an entity. Read-only.' SdCard = 'String | Optional | Defines whether a user is allowed to enable SD Card Port. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' Microphone = 'String | Optional | Defines whether a user is allowed to enable Microphone. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' InfraredCamera = 'String | Optional | Defines whether a user is allowed to enable Infrared camera. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' FrontCamera = 'String | Optional | Defines whether a user is allowed to enable Front Camera. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' WindowsPlatformBinaryTable = 'String | Optional | Defines whether a user is allowed to enable Windows Platform Binary Table. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' SimultaneousMultiThreading = 'String | Optional | Defines whether a user is allowed to enable Simultaneous MultiThreading. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' WakeOnLAN = 'String | Optional | Defines whether a user is allowed to enable Wake on LAN. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' WakeOnPower = 'String | Optional | Defines whether a user is allowed to enable Wake On Power. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' } ) DeviceConfigurationHealthMonitoringConfigurationPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' ConfigDeviceHealthMonitoringScope = @( 'String | Optional | Specifies set of events collected from the device where health monitoring is enabled. Possible values are: undefined, healthMonitoring, bootPerformance, windowsUpdates, privilegeManagement. | undefined / healthMonitoring / bootPerformance / windowsUpdates / privilegeManagement' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Admin provided description of the Device Configuration.' AllowDeviceHealthMonitoring = 'String | Optional | Enables device health monitoring on the device. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' ConfigDeviceHealthMonitoringCustomScope = 'String | Optional | Specifies custom set of events collected from the device where health monitoring is enabled' DisplayName = 'String | Required | Admin provided name of the device configuration.' } ) DeviceConfigurationIdentityProtectionPoliciesWindows10 = @( @{ PinRecoveryEnabled = 'Boolean | Optional | Boolean value that enables a user to change their PIN by using the Windows Hello for Business PIN recovery service.' PinExpirationInDays = 'UInt32 | Optional | Integer value specifies the period (in days) that a PIN can be used before the system requires the user to change it. Valid values are 0 to 730 inclusive. Valid values 0 to 730' Description = 'String | Optional | Admin provided description of the Device Configuration.' UseSecurityKeyForSignin = 'Boolean | Optional | Boolean value used to enable the Windows Hello security key as a logon credential.' PinUppercaseCharactersUsage = 'String | Optional | This value configures the use of uppercase characters in the Windows Hello for Business PIN. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' DisplayName = 'String | Required | Admin provided name of the device configuration.' SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' PinPreviousBlockCount = 'UInt32 | Optional | Controls the ability to prevent users from using past PINs. This must be set between 0 and 50, inclusive, and the current PIN of the user is included in that count. If set to 0, previous PINs are not stored. PIN history is not preserved through a PIN reset. Valid values 0 to 50' UseCertificatesForOnPremisesAuthEnabled = 'Boolean | Optional | Boolean value that enables Windows Hello for Business to use certificates to authenticate on-premise resources.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' PinLowercaseCharactersUsage = 'String | Optional | This value configures the use of lowercase characters in the Windows Hello for Business PIN. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' SecurityDeviceRequired = 'Boolean | Optional | Controls whether to require a Trusted Platform Module (TPM) for provisioning Windows Hello for Business. A TPM provides an additional security benefit in that data stored on it cannot be used on other devices. If set to False, all devices can provision Windows Hello for Business even if there is not a usable TPM.' UnlockWithBiometricsEnabled = 'Boolean | Optional | Controls the use of biometric gestures, such as face and fingerprint, as an alternative to the Windows Hello for Business PIN. If set to False, biometric gestures are not allowed. Users must still configure a PIN as a backup in case of failures.' WindowsHelloForBusinessBlocked = 'Boolean | Optional | Boolean value that blocks Windows Hello for Business as a method for signing into Windows.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' PinSpecialCharactersUsage = 'String | Optional | Controls the ability to use special characters in the Windows Hello for Business PIN. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' PinMaximumLength = 'UInt32 | Optional | Integer value that sets the maximum number of characters allowed for the work PIN. Valid values are 4 to 127 inclusive and greater than or equal to the value set for the minimum PIN. Valid values 4 to 127' EnhancedAntiSpoofingForFacialFeaturesEnabled = 'Boolean | Optional | Boolean value used to enable enhanced anti-spoofing for facial feature recognition on Windows Hello face authentication.' PinMinimumLength = 'UInt32 | Optional | Integer value that sets the minimum number of characters required for the Windows Hello for Business PIN. Valid values are 4 to 127 inclusive and less than or equal to the value set for the maximum PIN. Valid values 4 to 127' } ) DeviceConfigurationImportedPfxCertificatePoliciesWindows10 = @( @{ SubjectAlternativeNameType = 'String | Optional | Certificate Subject Alternative Name Type. Possible values are: none, emailAddress, userPrincipalName, customAzureADAttribute, domainNameService, universalResourceIdentifier. | none / emailAddress / userPrincipalName / customAzureADAttribute / domainNameService / universalResourceIdentifier' Description = 'String | Optional | Admin provided description of the Device Configuration.' RenewalThresholdPercentage = 'UInt32 | Optional | Certificate renewal threshold percentage. Valid values 1 to 99' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CertificateValidityPeriodScale = 'String | Optional | Scale for the Certificate Validity Period. Possible values are: days, months, years. | days / months / years' KeyStorageProvider = 'String | Optional | Key Storage Provider (KSP). Possible values are: useTpmKspOtherwiseUseSoftwareKsp, useTpmKspOtherwiseFail, usePassportForWorkKspOtherwiseFail, useSoftwareKsp. | useTpmKspOtherwiseUseSoftwareKsp / useTpmKspOtherwiseFail / usePassportForWorkKspOtherwiseFail / useSoftwareKsp' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) CertificateValidityPeriodValue = 'UInt32 | Optional | Value for the Certificate Validity Period' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The unique identifier for an entity. Read-only.' SubjectNameFormat = 'String | Optional | Certificate Subject Name Format. Possible values are: commonName, commonNameIncludingEmail, commonNameAsEmail, custom, commonNameAsIMEI, commonNameAsSerialNumber, commonNameAsAadDeviceId, commonNameAsIntuneDeviceId, commonNameAsDurableDeviceId. | commonName / commonNameIncludingEmail / commonNameAsEmail / custom / commonNameAsIMEI / commonNameAsSerialNumber / commonNameAsAadDeviceId / commonNameAsIntuneDeviceId / commonNameAsDurableDeviceId' IntendedPurpose = 'String | Optional | Intended Purpose of the Certificate Profile - which could be Unassigned, SmimeEncryption, SmimeSigning etc. Possible values are: unassigned, smimeEncryption, smimeSigning, vpn, wifi. | unassigned / smimeEncryption / smimeSigning / vpn / wifi' } ) DeviceConfigurationKioskPoliciesWindows10 = @( @{ KioskBrowserBlockedUrlExceptions = @( 'String | Optional | Specify URLs that the kiosk browser is allowed to navigate to' ) Description = 'String | Optional | Admin provided description of the Device Configuration.' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) KioskBrowserEnableNavigationButtons = 'Boolean | Optional | Enable the kiosk browser''s navigation buttons(forward/back). By default, the navigation buttons are disabled.' KioskBrowserRestartOnIdleTimeInMinutes = 'UInt32 | Optional | Specify the number of minutes the session is idle until the kiosk browser restarts in a fresh state. Valid values are 1-1440. Valid values 1 to 1440' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) KioskBrowserDefaultUrl = 'String | Optional | Specify the default URL the browser should navigate to on launch.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' KioskProfiles = @( @{ ProfileId = 'String | Optional | Key of the entity.' UserAccountsConfiguration = @( @{ GroupId = 'String | Optional | The ID of the AzureAD group that will be locked to this kiosk configuration' UserName = 'String | Optional | The local user that will be locked to this kiosk configuration' UniqueId = 'String | Required | [Unique ID to identify this specific object]' UserPrincipalName = 'String | Optional | The user accounts that will be locked to this kiosk configuration' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsKioskActiveDirectoryGroup / #microsoft.graph.windowsKioskAutologon / #microsoft.graph.windowsKioskAzureADGroup / #microsoft.graph.windowsKioskAzureADUser / #microsoft.graph.windowsKioskLocalGroup / #microsoft.graph.windowsKioskLocalUser / #microsoft.graph.windowsKioskVisitor' GroupName = 'String | Optional | The name of the AD group that will be locked to this kiosk configuration' UserId = 'String | Optional | The ID of the AzureAD user that will be locked to this kiosk configuration' DisplayName = 'String | Optional | The display name of the AzureAD group that will be locked to this kiosk configuration' } ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' ProfileName = 'String | Optional | This is a friendly nameused to identify a group of applications, the layout of these apps on the start menu and the users to whom this kiosk configuration is assigned.' AppConfiguration = @{ UwpApp = @{ EdgeNoFirstRun = 'Boolean | Optional | Edge first run flag for Edge kiosk mode' Name = 'String | Optional | Represents the friendly name of an app' EdgeKiosk = 'String | Optional | Edge kiosk (url) for Edge kiosk mode' ClassicAppPath = 'String | Optional | This is the classicapppath to be used by v4 Win32 app while in Kiosk Mode' AppId = 'String | Optional | This references an Intune App that will be target to the same assignments as Kiosk configuration' AppUserModelId = 'String | Optional | This is the only Application User Model ID (AUMID) that will be available to launch use while in Kiosk Mode' EdgeKioskIdleTimeoutMinutes = 'UInt32 | Optional | Edge kiosk idle timeout in minutes for Edge kiosk mode. Valid values 0 to 1440' AutoLaunch = 'Boolean | Optional | Allow the app to be auto-launched in multi-app kiosk mode' StartLayoutTileSize = 'String | Optional | The app tile size for the start layout. Possible values are: hidden, small, medium, wide, large. | hidden / small / medium / wide / large' AppType = 'String | Optional | The app type. Possible values are: unknown, store, desktop, aumId. | unknown / store / desktop / aumId' EdgeKioskType = 'String | Optional | Edge kiosk type for Edge kiosk mode. Possible values are: publicBrowsing, fullScreen. | publicBrowsing / fullScreen' ContainedAppId = 'String | Optional | This references an contained App from an Intune App' DesktopApplicationId = 'String | Optional | Define the DesktopApplicationID of the app' DesktopApplicationLinkPath = 'String | Optional | Define the DesktopApplicationLinkPath of the app' Path = 'String | Optional | Define the path of a desktop app' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsKioskDesktopApp / #microsoft.graph.windowsKioskUWPApp / #microsoft.graph.windowsKioskWin32App' } Win32App = @{ EdgeNoFirstRun = 'Boolean | Optional | Edge first run flag for Edge kiosk mode' Name = 'String | Optional | Represents the friendly name of an app' EdgeKiosk = 'String | Optional | Edge kiosk (url) for Edge kiosk mode' ClassicAppPath = 'String | Optional | This is the classicapppath to be used by v4 Win32 app while in Kiosk Mode' EdgeKioskIdleTimeoutMinutes = 'UInt32 | Optional | Edge kiosk idle timeout in minutes for Edge kiosk mode. Valid values 0 to 1440' AppUserModelId = 'String | Optional | This is the only Application User Model ID (AUMID) that will be available to launch use while in Kiosk Mode' AppId = 'String | Optional | This references an Intune App that will be target to the same assignments as Kiosk configuration' AutoLaunch = 'Boolean | Optional | Allow the app to be auto-launched in multi-app kiosk mode' StartLayoutTileSize = 'String | Optional | The app tile size for the start layout. Possible values are: hidden, small, medium, wide, large. | hidden / small / medium / wide / large' AppType = 'String | Optional | The app type. Possible values are: unknown, store, desktop, aumId. | unknown / store / desktop / aumId' EdgeKioskType = 'String | Optional | Edge kiosk type for Edge kiosk mode. Possible values are: publicBrowsing, fullScreen. | publicBrowsing / fullScreen' ContainedAppId = 'String | Optional | This references an contained App from an Intune App' DesktopApplicationId = 'String | Optional | Define the DesktopApplicationID of the app' DesktopApplicationLinkPath = 'String | Optional | Define the DesktopApplicationLinkPath of the app' Path = 'String | Optional | Define the path of a desktop app' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsKioskDesktopApp / #microsoft.graph.windowsKioskUWPApp / #microsoft.graph.windowsKioskWin32App' } Apps = @( @{ EdgeNoFirstRun = 'Boolean | Optional | Edge first run flag for Edge kiosk mode' Name = 'String | Optional | Represents the friendly name of an app' EdgeKiosk = 'String | Optional | Edge kiosk (url) for Edge kiosk mode' ClassicAppPath = 'String | Optional | This is the classicapppath to be used by v4 Win32 app while in Kiosk Mode' AppId = 'String | Optional | This references an Intune App that will be target to the same assignments as Kiosk configuration' AppUserModelId = 'String | Optional | This is the only Application User Model ID (AUMID) that will be available to launch use while in Kiosk Mode' EdgeKioskIdleTimeoutMinutes = 'UInt32 | Optional | Edge kiosk idle timeout in minutes for Edge kiosk mode. Valid values 0 to 1440' UniqueId = 'String | Required | [Unique ID to identify this specific object]' AutoLaunch = 'Boolean | Optional | Allow the app to be auto-launched in multi-app kiosk mode' StartLayoutTileSize = 'String | Optional | The app tile size for the start layout. Possible values are: hidden, small, medium, wide, large. | hidden / small / medium / wide / large' AppType = 'String | Optional | The app type. Possible values are: unknown, store, desktop, aumId. | unknown / store / desktop / aumId' EdgeKioskType = 'String | Optional | Edge kiosk type for Edge kiosk mode. Possible values are: publicBrowsing, fullScreen. | publicBrowsing / fullScreen' ContainedAppId = 'String | Optional | This references an contained App from an Intune App' DesktopApplicationId = 'String | Optional | Define the DesktopApplicationID of the app' DesktopApplicationLinkPath = 'String | Optional | Define the DesktopApplicationLinkPath of the app' Path = 'String | Optional | Define the path of a desktop app' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsKioskDesktopApp / #microsoft.graph.windowsKioskUWPApp / #microsoft.graph.windowsKioskWin32App' } ) AllowAccessToDownloadsFolder = 'Boolean | Optional | This setting allows access to Downloads folder in file explorer.' ShowTaskBar = 'Boolean | Optional | This setting allows the admin to specify whether the Task Bar is shown or not.' DisallowDesktopApps = 'Boolean | Optional | This setting indicates that desktop apps are allowed. Default to true.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsKioskMultipleApps / #microsoft.graph.windowsKioskSingleUWPApp / #microsoft.graph.windowsKioskSingleWin32App' StartMenuLayoutXml = 'String | Optional | Allows admins to override the default Start layout and prevents the user from changing it.The layout is modified by specifying an XML file based on a layout modification schema. XML needs to be in Binary format.' } } ) WindowsKioskForceUpdateSchedule = @{ RunImmediatelyIfAfterStartDateTime = 'Boolean | Optional | If true, runs the task immediately if StartDateTime is in the past, else, runs at the next recurrence.' StartDateTime = 'String | Optional | The start time for the force restart.' DayofMonth = 'UInt32 | Optional | Day of month. Valid values 1 to 31' Recurrence = 'String | Optional | Recurrence schedule. Possible values are: none, daily, weekly, monthly. | none / daily / weekly / monthly' DayofWeek = 'String | Optional | Day of week. Possible values are: sunday, monday, tuesday, wednesday, thursday, friday, saturday. | sunday / monday / tuesday / wednesday / thursday / friday / saturday' } KioskBrowserBlockedURLs = @( 'String | Optional | Specify URLs that the kiosk browsers should not navigate to' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' EdgeKioskEnablePublicBrowsing = 'Boolean | Optional | Enable public browsing kiosk mode for the Microsoft Edge browser. The Default is false.' KioskBrowserEnableEndSessionButton = 'Boolean | Optional | Enable the kiosk browser''s end session button. By default, the end session button is disabled.' KioskBrowserEnableHomeButton = 'Boolean | Optional | Enable the kiosk browser''s home button. By default, the home button is disabled.' } ) DeviceConfigurationNetworkBoundaryPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Admin provided description of the Device Configuration.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' WindowsNetworkIsolationPolicy = @{ EnterpriseProxyServers = @( 'String | Optional | This is a list of proxy servers. Any server not on this list is considered non-enterprise.' ) EnterpriseInternalProxyServers = @( 'String | Optional | This is the comma-separated list of internal proxy servers. For example, ''157.54.14.28, 157.54.11.118, 10.202.14.167, 157.53.14.163, 157.69.210.59''. These proxies have been configured by the admin to connect to specific resources on the Internet. They are considered to be enterprise network locations. The proxies are only leveraged in configuring the EnterpriseCloudResources policy to force traffic to the matched cloud resources through these proxies.' ) EnterpriseIPRangesAreAuthoritative = 'Boolean | Optional | Boolean value that tells the client to accept the configured list and not to use heuristics to attempt to find other subnets. Default is false.' EnterpriseCloudResources = @( @{ Proxy = 'String | Optional | Proxy IP or FQDN' UniqueId = 'String | Required | [Unique ID to identify this specific object]' IpAddressOrFQDN = 'String | Optional | The IP address or FQDN' } ) EnterpriseProxyServersAreAuthoritative = 'Boolean | Optional | Boolean value that tells the client to accept the configured list of proxies and not try to detect other work proxies. Default is false' EnterpriseNetworkDomainNames = @( 'String | Optional | This is the list of domains that comprise the boundaries of the enterprise. Data from one of these domains that is sent to a device will be considered enterprise data and protected. These locations will be considered a safe destination for enterprise data to be shared to.' ) EnterpriseIPRanges = @( @{ CidrAddress = 'String | Optional | IPv4 address in CIDR notation. Not nullable.' UpperAddress = 'String | Optional | Upper address.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' LowerAddress = 'String | Optional | Lower address.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.iPv4CidrRange / #microsoft.graph.iPv6CidrRange / #microsoft.graph.iPv4Range / #microsoft.graph.iPv6Range' } ) NeutralDomainResources = @( 'String | Optional | List of domain names that can used for work or personal resource.' ) } DisplayName = 'String | Required | Admin provided name of the device configuration.' } ) DeviceConfigurationPkcsCertificatePoliciesWindows10 = @( @{ SubjectAlternativeNameType = 'String | Optional | Certificate Subject Alternative Name Type. Possible values are: none, emailAddress, userPrincipalName, customAzureADAttribute, domainNameService, universalResourceIdentifier. | none / emailAddress / userPrincipalName / customAzureADAttribute / domainNameService / universalResourceIdentifier' Description = 'String | Optional | Admin provided description of the Device Configuration.' RenewalThresholdPercentage = 'UInt32 | Optional | Certificate renewal threshold percentage. Valid values 1 to 99' DisplayName = 'String | Required | Admin provided name of the device configuration.' SubjectAlternativeNameFormatString = 'String | Optional | Custom String that defines the AAD Attribute.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CertificationAuthorityName = 'String | Optional | PKCS Certification Authority Name' KeyStorageProvider = 'String | Optional | Key Storage Provider (KSP). Possible values are: useTpmKspOtherwiseUseSoftwareKsp, useTpmKspOtherwiseFail, usePassportForWorkKspOtherwiseFail, useSoftwareKsp. | useTpmKspOtherwiseUseSoftwareKsp / useTpmKspOtherwiseFail / usePassportForWorkKspOtherwiseFail / useSoftwareKsp' CertificationAuthority = 'String | Optional | PKCS Certification Authority' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) CertificateValidityPeriodValue = 'UInt32 | Optional | Value for the Certificate Validity Period' CertificateTemplateName = 'String | Optional | PKCS Certificate Template Name' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' CertificateValidityPeriodScale = 'String | Optional | Scale for the Certificate Validity Period. Possible values are: days, months, years. | days / months / years' SubjectNameFormatString = 'String | Optional | Custom format to use with SubjectNameFormat = Custom. Example: CN=EmailAddress}},E=EmailAddress}},OU=Enterprise Users,O=Contoso Corporation,L=Redmond,ST=WA,C=US' Id = 'String | Optional | The unique identifier for an entity. Read-only.' SubjectNameFormat = 'String | Optional | Certificate Subject Name Format. Possible values are: commonName, commonNameIncludingEmail, commonNameAsEmail, custom, commonNameAsIMEI, commonNameAsSerialNumber, commonNameAsAadDeviceId, commonNameAsIntuneDeviceId, commonNameAsDurableDeviceId. | commonName / commonNameIncludingEmail / commonNameAsEmail / custom / commonNameAsIMEI / commonNameAsSerialNumber / commonNameAsAadDeviceId / commonNameAsIntuneDeviceId / commonNameAsDurableDeviceId' CertificateStore = 'String | Optional | Target store certificate. Possible values are: user, machine. | user / machine' ExtendedKeyUsages = @( @{ ObjectIdentifier = 'String | Optional | Extended Key Usage Object Identifier' Name = 'String | Optional | Extended Key Usage Name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) CustomSubjectAlternativeNames = @( @{ Name = 'String | Optional | Custom SAN Name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SanType = 'String | Optional | Custom SAN Type. Possible values are: none, emailAddress, userPrincipalName, customAzureADAttribute, domainNameService, universalResourceIdentifier. | none / emailAddress / userPrincipalName / customAzureADAttribute / domainNameService / universalResourceIdentifier' } ) } ) DeviceConfigurationPlatformScriptMacOSs = @( @{ BlockExecutionNotifications = 'Boolean | Optional | Does not notify the user a script is being executed' ExecutionFrequency = 'String | Optional | The interval for script to run. If not defined the script will run once' DisplayName = 'String | Required | Name of the device management script.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RoleScopeTagIds = @( 'String | Optional | List of Scope Tag IDs for this PowerShellScript instance.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' RetryCount = 'UInt32 | Optional | Number of times for the script to be retried if it fails' Description = 'String | Optional | Optional description for the device management script.' Id = 'String | Required | The unique identifier for an entity. Read-only.' RunAsAccount = 'String | Optional | Indicates the type of execution context. Possible values are: system, user. | system / user' FileName = 'String | Optional | The script file name.' ScriptContent = 'String | Optional | The script content in Base64.' } ) DeviceConfigurationPlatformScriptWindowss = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) ScriptContent = 'String | Optional | The script content in Base64.' Id = 'String | Required | The unique identifier for an entity. Read-only.' FileName = 'String | Optional | The script file name.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' EnforceSignatureCheck = 'Boolean | Optional | Indicate whether the script signature needs be checked.' RunAs32Bit = 'Boolean | Optional | A value indicating whether the PowerShell script should run as 32-bit' RunAsAccount = 'String | Optional | Indicates the type of execution context. Possible values are: system, user. | system / user' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Optional description for the device management script.' RoleScopeTagIds = @( 'String | Optional | List of Scope Tag IDs for this PowerShellScript instance.' ) DisplayName = 'String | Required | Name of the device management script.' } ) DeviceConfigurationPoliciesAndroidDeviceAdministrator = @( @{ PowerOffBlocked = 'Boolean | Optional | Block user from powering off device. If this setting is disabled the setting ''Number of sign-in failures before wiping device'' does not function.' VoiceAssistantBlocked = 'Boolean | Optional | Block voice assistant (Samsung KNOX Standard 4.0+).' AppsBlockCopyPaste = 'Boolean | Optional | Block copy and paste functionality.' StorageRequireDeviceEncryption = 'Boolean | Optional | Require encryption on device. Not all devices support encryption.' LocationServicesBlocked = 'Boolean | Optional | Location services blocked' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) NfcBlocked = 'Boolean | Optional | Block Near Field Communication (NFC) technology (Samsung KNOX Standard 4.0+).' DiagnosticDataBlockSubmission = 'Boolean | Optional | Block submitting diagnostic data from device.' DisplayName = 'String | Required | Display name of the Intune policy.' CellularBlockDataRoaming = 'Boolean | Optional | Block data roaming over the cellular network (Samsung KNOX Standard 4.0+).' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RequiredPasswordComplexity = 'String | Optional | Define the password complexity. | none / low / medium / high' GooglePlayStoreBlocked = 'Boolean | Optional | Block Google Play store (Samsung KNOX Standard 4.0+).' PasswordBlockTrustAgents = 'Boolean | Optional | Block Smart Lock or other trust agents from adjusting lock screen settings (Samsung KNOX Standard 5.0+).' StorageBlockGoogleBackup = 'Boolean | Optional | Block sync with Google backup.' CameraBlocked = 'Boolean | Optional | Block use of camera' DeviceSharingAllowed = 'Boolean | Optional | Allow multiple users to log into the Company Portal using their AAD credentials (Samsung KNOX Standard 4.0+).' WebBrowserBlockJavaScript = 'Boolean | Optional | Block JavaScript in the browser.' KioskModeBlockVolumeButtons = 'Boolean | Optional | Kiosk mode block volume buttons' VoiceDialingBlocked = 'Boolean | Optional | Block voice dialing (Samsung KNOX Standard 4.0+).' CompliantAppListType = 'String | Optional | Device compliance can be viewed in the Restricted Apps Compliance report. | none / appsInListCompliant / appsNotInListCompliant' AppsInstallAllowList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) WebBrowserBlockPopups = 'Boolean | Optional | Block pop-ups in web browser.' SecurityRequireVerifyApps = 'Boolean | Optional | Security require verify apps' BluetoothBlocked = 'Boolean | Optional | Block Bluetooth (Samsung KNOX Standard 4.0+).' GoogleAccountBlockAutoSync = 'Boolean | Optional | Block Google account auto sync functionality on device.' ScreenCaptureBlocked = 'Boolean | Optional | Block capturing contents of screen as an image.' WebBrowserCookieSettings = 'String | Optional | Allow or block browser cookies | browserDefault / blockAlways / allowCurrentWebSite / allowFromWebsitesVisited / allowAlways' PasswordExpirationDays = 'UInt32 | Optional | Number of days until device password must be changed. (1-365)' StorageBlockRemovableStorage = 'Boolean | Optional | Block removable storage usage (Samsung KNOX Standard 4.0+).' CellularBlockMessaging = 'Boolean | Optional | Block SMS/MMS messaging functionality (Samsung KNOX Standard 4.0+).' PasswordBlockFingerprintUnlock = 'Boolean | Optional | Block using fingerprint to unlock device.' KioskModeBlockSleepButton = 'Boolean | Optional | Kiosk mode block sleep button' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AppsLaunchBlockList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) Description = 'String | Optional | Description of the Intune policy.' PasswordRequired = 'Boolean | Optional | Require password to access device.' PasswordMinimumLength = 'UInt32 | Optional | Minimum number of digits or characters in password. (4-16)' PasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | Number of consecutive times an incorrect password can be entered before device is wiped of all data.' WebBrowserBlocked = 'Boolean | Optional | Block web browser on device.' WiFiBlocked = 'Boolean | Optional | Block Wi-Fi (Samsung KNOX Standard 4.0+).' AppsHideList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) PasswordMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Maximum minutes of inactivity until screen locks. Ignored by device if new time is longer than what''s currently set on device. If set to Immediately, devices will use the minimum possible value per device.' CellularBlockWiFiTethering = 'Boolean | Optional | Block Wi-Fi tethering (Samsung KNOX Standard 4.0+).' Id = 'String | Optional | Id of the Intune policy.' FactoryResetBlocked = 'Boolean | Optional | Block factory reset on device.' AppsBlockClipboardSharing = 'Boolean | Optional | Block clipboard sharing between apps (Samsung KNOX Standard 4.0+).' WebBrowserBlockAutofill = 'Boolean | Optional | Block autofill.' DateAndTimeBlockChanges = 'Boolean | Optional | Block user from changing date and time on device (Samsung KNOX).' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | Number of new passwords that must be used until an old one can be reused.' CompliantAppsList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) PasswordRequiredType = 'String | Optional | Specify the type of password required. | deviceDefault / alphabetic / alphanumeric / alphanumericWithSymbols / lowSecurityBiometric / numeric / numericComplex / any' StorageRequireRemovableStorageEncryption = 'Boolean | Optional | Storage cards must be encrypted. Not all devices support storage card encryption. For more information, see the device and mobile operating system documentation.' AppsBlockYouTube = 'Boolean | Optional | Block YouTube (Samsung KNOX Standard 4.0+).' KioskModeApps = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) CellularBlockVoiceRoaming = 'Boolean | Optional | Block voice roaming over the cellular network (Samsung KNOX Standard 4.0+).' } ) DeviceConfigurationPoliciesAndroidDeviceOwner = @( @{ KioskModeVirtualHomeButtonEnabled = 'Boolean | Optional | Enable IT administrators to temporarily leave multi-app kiosk mode to make changes on the device.' VolumeBlockAdjustment = 'Boolean | Optional | Block changes to volume.' KioskModeUseManagedHomeScreenApp = 'String | Optional | Whether or not to use single app kiosk mode or multi-app kiosk mode. | notConfigured / singleAppMode / multiAppMode' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AzureAdSharedDeviceDataClearApps = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) KioskModeAppPositions = @( @{ position = 'UInt32 | Optional | Position of the item on the grid. Valid values 0 to 9999999.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' item = @{ folderName = 'String | Optional | The folder name.' folderIdentifier = 'String | Optional | The folder identifier.' items = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' link = 'String | Optional | The link of the item.' className = 'String | Optional | The class name of the item.' label = 'String | Optional | The label of the item.' package = 'String | Optional | The package of the item.' odataType = 'String | Optional | The type of the item. | #microsoft.graph.androidDeviceOwnerKioskModeApp / #microsoft.graph.androidDeviceOwnerKioskModeWeblink' } ) label = 'String | Optional | The label of the item.' link = 'String | Optional | The link of the item.' package = 'String | Optional | The package of the item.' odataType = 'String | Optional | Type of the item. | #microsoft.graph.androidDeviceOwnerKioskModeApp / #microsoft.graph.androidDeviceOwnerKioskModeWeblink / #microsoft.graph.androidDeviceOwnerKioskModeManagedFolder' className = 'String | Optional | The class name of the item.' } } ) KioskModeManagedHomeScreenPinRequired = 'Boolean | Optional | Whether or not require user to set a PIN for sign-in session for Managed Home Screen.' MicrosoftLauncherConfigurationEnabled = 'Boolean | Optional | Indicates whether or not to you want configure Microsoft Launcher.' SystemUpdateWindowStartMinutesAfterMidnight = 'UInt32 | Optional | Beginning of the maintenance window in the device''s time zone.?' PlayStoreMode = 'String | Optional | Users get access to all apps, except the ones you''ve required uninstall in Client Apps. If you choose ''Not configured'' for this setting, users can only access the apps you''ve listed as available or required in Client Apps. | notConfigured / allowList / blockList' FactoryResetBlocked = 'Boolean | Optional | Block factory resetting from settings.' KioskModeManagedHomeScreenSignInBackground = 'String | Optional | Custom URL background for sign-in screen for Managed Home Screen.' ScreenCaptureBlocked = 'Boolean | Optional | Block screen capture' KioskModeManagedHomeScreenSignInEnabled = 'Boolean | Optional | Whether or not show sign-in screen for Managed Home Screen.' PasswordRequiredType = 'String | Optional | Set the password''s complexity requirements. Additional password requirements will become available based on your selection. | deviceDefault / required / numeric / numericComplex / alphabetic / alphanumeric / alphanumericWithSymbols / lowSecurityBiometric / customPassword' AppsRecommendSkippingFirstUseHints = 'Boolean | Optional | Enable a suggestion to apps that they skip their user tutorials and any introductory hints when they first start up, if applicable.' UsersBlockAdd = 'Boolean | Optional | Blocks users from adding and signing in to personal accounts while on the device.' PersonalProfileAppsAllowInstallFromUnknownSources = 'Boolean | Optional | Indicates whether the user can install apps from unknown sources on the personal profile.' KioskModeWiFiConfigurationEnabled = 'Boolean | Optional | Enable end-users to connect to different Wi-Fi networks.' BluetoothBlockContactSharing = 'Boolean | Optional | Block access to work contacts from another device such as a car system when an Android device is paired via Bluetooth.' KioskModeAppsInFolderOrderedByName = 'Boolean | Optional | Whether or not to alphabetize applications within a folder in Kiosk Mode.' MicrosoftLauncherCustomWallpaperImageUrl = 'String | Optional | Indicates the URL for the image file to use as the wallpaper on the targeted devices.' KioskModeMediaVolumeConfigurationEnabled = 'Boolean | Optional | Whether or not to allow a user to change the media volume in Kiosk Mode.' FactoryResetDeviceAdministratorEmails = @( 'String | Optional | Email addresses of device admins for factory reset protection. When a device is factory reset, it will require that one of these admins log in with their Google account to unlock the device. If none are specified, factory reset protection is not enabled.' ) KioskCustomizationPowerButtonActionsBlocked = 'Boolean | Optional | Whether the power menu is shown when a user long presses the Power button of a device in Kiosk Mode.' PersonalProfileScreenCaptureBlocked = 'Boolean | Optional | Indicates whether to disable the capability to take screenshots on the personal profile.' AppsAllowInstallFromUnknownSources = 'Boolean | Optional | When allowed, users can enable the ''unknown sources'' setting to install apps from sources other than the Google Play Store.' KioskModeWallpaperUrl = 'String | Optional | Customize the appearance of the screen background for assigned groups.' KioskModeScreenSaverConfigurationEnabled = 'Boolean | Optional | Start screen saver when the device screen times out or locks.' StorageBlockUsbFileTransfer = 'Boolean | Optional | Block transfer of files over USB.' PasswordMinimumLowerCaseCharacters = 'UInt32 | Optional | Indicates the minimum number of lower case characters required for device password. Valid values 1 to 16' VpnAlwaysOnPackageIdentifier = 'String | Optional | Android app package name for app that will handle an always-on VPN connection.' KioskModeManagedFolders = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' folderName = 'String | Optional | The folder name.' folderIdentifier = 'String | Optional | The folder identifier.' items = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' link = 'String | Optional | The link of the item.' className = 'String | Optional | The class name of the item.' label = 'String | Optional | The label of the item.' package = 'String | Optional | The package of the item.' odataType = 'String | Optional | The type of the item. | #microsoft.graph.androidDeviceOwnerKioskModeApp / #microsoft.graph.androidDeviceOwnerKioskModeWeblink' } ) } ) WorkProfilePasswordMinimumNumericCharacters = 'UInt32 | Optional | Indicates the minimum number of lower-case characters required for the work profile password. Valid values 1 to 16' KioskCustomizationDeviceSettingsBlocked = 'Boolean | Optional | Indicates whether a user can access the device''s Settings app while in Kiosk Mode.' KioskModeManagedHomeScreenInactiveSignOutDelayInSeconds = 'UInt32 | Optional | Number of seconds to give user notice before automatically signing them out for Managed Home Screen. Valid values 0 to 9999999.' CrossProfilePoliciesAllowCopyPaste = 'Boolean | Optional | Indicates whether or not text copied from one profile (personal or work) can be pasted in the other.' PasswordMinimumNonLetterCharacters = 'UInt32 | Optional | Indicates the minimum number of non-letter characters required for device password. Valid values 1 to 16' PasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | Number of consecutive times an incorrect password can be entered before device is wiped of all data. (4-11)' EnrollmentProfile = 'String | Optional | Represents the enrollment profile type. | notConfigured / dedicatedDevice / fullyManaged' PasswordBlockKeyguardFeatures = @( 'String | Optional | These features are accessible to users when the device is locked. Users will not be able to see or access disabled features. | notConfigured / camera / notifications / unredactedNotifications / trustAgents / fingerprint / remoteInput / allFeatures / face / iris / biometrics' ) PasswordMinimumLetterCharacters = 'UInt32 | Optional | Indicates the minimum number of letter characters required for device password. Valid values 1 to 16' SystemUpdateWindowEndMinutesAfterMidnight = 'UInt32 | Optional | End of the maintenance window in the device''s time zone.?' WorkProfilePasswordMinimumLength = 'UInt32 | Optional | Indicates the minimum length of the work profile password. Valid values 4 to 16' PasswordBlockKeyguard = 'Boolean | Optional | Disable lock screen' PersonalProfilePersonalApplications = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) KioskModeManagedHomeScreenAutoSignout = 'Boolean | Optional | Whether or not to automatically sign-out of MHS and Shared device mode applications after inactive for Managed Home Screen.' KioskModeLockHomeScreen = 'Boolean | Optional | Whether or not to lock home screen to the end user in Kiosk Mode.' NfcBlockOutgoingBeam = 'Boolean | Optional | Block usage of NFC to beam data from apps.' DateTimeConfigurationBlocked = 'Boolean | Optional | Block user from manually setting the date and time.' VpnAlwaysOnLockdownMode = 'Boolean | Optional | Enabling this forces all network traffic through the VPN tunnel. If a connection to the VPN can''t be established, no network traffic will be allowed.' MicrosoftLauncherSearchBarPlacementConfiguration = 'String | Optional | Indicates whether or not you want to configure the device dock. | notConfigured / top / bottom / hide' DisplayName = 'String | Required | The display name of hte policy.' KioskModeApps = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) StayOnModes = @( 'String | Optional | The battery plugged in modes for which the device stays on. When using this setting, it is recommended to clear the Time to lock screen setting so that the device doesn''t lock itself while it stays on. | notConfigured / ac / usb / wireless' ) MicrosoftLauncherDockPresenceConfiguration = 'String | Optional | Indicates whether or not you want to configure the device dock. | notConfigured / show / hide / disabled' KioskModeFlashlightConfigurationEnabled = 'Boolean | Optional | Whether or not to allow a user to use the flashlight in Kiosk Mode.' KioskModeScreenSaverImageUrl = 'String | Optional | URL for an image that will be the device''s screen saver in Kiosk Mode.' AppsAutoUpdatePolicy = 'String | Optional | Devices check for app updates daily. The default behavior is to let device users decide. They''ll be able to set their preferences in the managed Google Play app. | notConfigured / userChoice / never / wiFiOnly / always' KioskModeIconSize = 'String | Optional | Icon size configuration for managed home screen in Kiosk Mode. | notConfigured / smallest / small / regular / large / largest' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' CellularBlockWiFiTethering = 'Boolean | Optional | Block tethering and access to portable hotspots.' KioskModeManagedHomeScreenPinRequiredToResume = 'Boolean | Optional | Whether or not required user to enter session PIN if screensaver has appeared for Managed Home Screen.' KioskModeManagedSettingsEntryDisabled = 'Boolean | Optional | Whether or not to use single app kiosk mode or multi-app kiosk mode.' WorkProfilePasswordMinimumNonLetterCharacters = 'UInt32 | Optional | Indicates the minimum number of letter characters required for the work profile password. Valid values 1 to 16' PasswordExpirationDays = 'UInt32 | Optional | Number of days until device password must be changed. (1-365)' MicrosoftLauncherDockPresenceAllowUserModification = 'Boolean | Optional | Indicates whether or not the user can modify the device dock configuration on the device.' MicrosoftLauncherFeedAllowUserModification = 'Boolean | Optional | Indicates whether or not the user can modify the launcher feed on the device.' KioskCustomizationSystemErrorWarnings = 'Boolean | Optional | Indicates whether system error dialogs for crashed or unresponsive apps are shown in Kiosk Mode.' Description = 'String | Optional | The description of the policy.' SystemUpdateInstallType = 'String | Optional | When over-the-air updates are available for this device, they will be installed based on this policy.? | deviceDefault / postpone / windowed / automatic' StorageAllowUsb = 'Boolean | Optional | Allow USB storage.' UsersBlockRemove = 'Boolean | Optional | Block removal of users.' DetailedHelpText = @{ localizedMessages = @( @{ Name = 'String | Optional | Name of the message localizedMessages.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Value of the message localizedMessages.' } ) defaultMessage = 'String | Optional | The default message displayed if the user''s locale doesn''t match with any of the localized messages.' } CrossProfilePoliciesAllowDataSharing = 'String | Optional | Indicates whether data from one profile (personal or work) can be shared with apps in the other profile. | notConfigured / crossProfileDataSharingBlocked / dataSharingFromWorkToPersonalBlocked / crossProfileDataSharingAllowed / unkownFutureValue' PasswordMinimumNumericCharacters = 'UInt32 | Optional | Indicates the minimum number of numeric characters required for device password. Valid values 1 to 16' MicrophoneForceMute = 'Boolean | Optional | Block unmuting the microphone and adjusting the microphone volume.' KioskModeWifiAllowedSsids = @( 'String | Optional | The restricted set of WIFI SSIDs available for the user to configure in Kiosk Mode. This collection can contain a maximum of 500 elements.' ) KioskModeScreenSaverDisplayTimeInSeconds = 'UInt32 | Optional | The number of seconds that the device will display the screen saver for in Kiosk Mode. Valid values 0 to 9999999' AppsDefaultPermissionPolicy = 'String | Optional | Define the default permission policy for requests for runtime permissions. | deviceDefault / prompt / autoGrant / autoDeny' Id = 'String | Optional | The Id of the policy.' GoogleAccountsBlocked = 'Boolean | Optional | Blocking prevents users from adding their personal Google account to their device.' WorkProfilePasswordPreviousPasswordCountToBlock = 'UInt32 | Optional | Indicates the length of the work profile password history, where the user will not be able to enter a new password that is the same as any password in the history. Valid values 0 to 24' CrossProfilePoliciesShowWorkContactsInPersonalProfile = 'Boolean | Optional | Indicates whether or not contacts stored in work profile are shown in personal profile contact searches/incoming calls.' PasswordRequireUnlock = 'String | Optional | Indicates the timeout period after which a device must be unlocked using a form of strong authentication. | deviceDefault / daily / unkownFutureValue' PersonalProfileCameraBlocked = 'Boolean | Optional | Indicates whether to disable the use of the camera on the personal profile.' KioskModeScreenSaverDetectMediaDisabled = 'Boolean | Optional | Whether or not the device screen should show the screen saver if audio/video is playing in Kiosk Mode.' WorkProfilePasswordMinimumSymbolCharacters = 'UInt32 | Optional | Indicates the minimum number of upper-case letter characters required for the work profile password. Valid values 1 to 16' BluetoothBlockConfiguration = 'Boolean | Optional | Block configuring Bluetooth.' PasswordMinimumLength = 'UInt32 | Optional | Indicates the minimum length of the password required on the device. Valid values 4 to 16' NetworkEscapeHatchAllowed = 'Boolean | Optional | Whether the network escape hatch is enabled. If a network connection can''t be made at boot time, the escape hatch prompts the user to temporarily connect to a network in order to refresh the device policy. After applying policy, the temporary network will be forgotten and the device will continue booting. This prevents being unable to connect to a network if there is no suitable network in the last policy and the device boots into an app in lock task mode, or the user is otherwise unable to reach device settings.' SystemWindowsBlocked = 'Boolean | Optional | Disable window notifications such as toasts, incoming calls, outgoing calls, system alerts, and system errors.?' KioskModeShowAppNotificationBadge = 'Boolean | Optional | Whether or not to display application notification badges in Kiosk Mode.' KioskModeShowDeviceInfo = 'Boolean | Optional | Whether or not to allow a user to access basic device information.' KioskModeVirtualHomeButtonType = 'String | Optional | Enable a soft-key button that returns users to the Managed Home Screen. Choose between a persistent, floating button or a button activated by a swipe-up gesture. | notConfigured / swipeUp / floating' GlobalProxy = @{ excludedHosts = @( 'String | Optional | The excluded hosts.' ) host = 'String | Optional | The host name.' port = 'UInt32 | Optional | The port.' proxyAutoConfigURL = 'String | Optional | The proxy auto-config URL.' odataType = 'String | Optional | The type of the global proxy. | #microsoft.graph.androidDeviceOwnerGlobalProxyAutoConfig / #microsoft.graph.androidDeviceOwnerGlobalProxyDirect' } WorkProfilePasswordMinimumLowerCaseCharacters = 'UInt32 | Optional | Indicates the minimum number of non-letter characters required for the work profile password. Valid values 1 to 16' DeviceOwnerLockScreenMessage = @{ localizedMessages = @( @{ Name = 'String | Optional | Name of the message localizedMessages.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Value of the message localizedMessages.' } ) defaultMessage = 'String | Optional | The default message displayed if the user''s locale doesn''t match with any of the localized messages.' } SecurityDeveloperSettingsEnabled = 'Boolean | Optional | Indicates whether or not the user is allowed to access developer settings like developer options and safe boot on the device.' SystemUpdateFreezePeriods = @( @{ endMonth = 'UInt32 | Optional | The month of the end date of the freeze period. Valid values 1 to 12.' startMonth = 'UInt32 | Optional | The month of the start date of the freeze period. Valid values 1 to 12.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' startDay = 'UInt32 | Optional | The day of the start date of the freeze period. Valid values 1 to 31.' endDay = 'UInt32 | Optional | The day of the end date of the freeze period. Valid values 1 to 31.' } ) WorkProfilePasswordRequireUnlock = 'String | Optional | Indicates the timeout period after which a work profile must be unlocked using a form of strong authentication. | deviceDefault / daily / unkownFutureValue' WorkProfilePasswordRequiredType = 'String | Optional | Indicates the minimum password quality required on the work profile password. | deviceDefault / required / numeric / numericComplex / alphabetic / alphanumeric / alphanumericWithSymbols / lowSecurityBiometric / customPassword' StorageBlockExternalMedia = 'Boolean | Optional | Block mounting of external media.' KioskModeBluetoothConfigurationEnabled = 'Boolean | Optional | Enable end-users to configure and pair devices over Bluetooth.' PasswordMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Maximum time after which the device will lock. Can disable screen lock as well so that it never times out.' AccountsBlockModification = 'Boolean | Optional | Block modification of accounts. Only supported on Dedicated devices.' WifiBlockEditConfigurations = 'Boolean | Optional | Block user creation or editing of any Wi-Fi configurations.' KioskModeGridHeight = 'UInt32 | Optional | Number of rows for Managed Home Screen grid with app ordering enabled in Kiosk Mode. Valid values 1 to 9999999.' PasswordMinimumUpperCaseCharacters = 'UInt32 | Optional | Indicates the minimum number of upper case letter characters required for device password. Valid values 1 to 16' KioskModeManagedHomeScreenPinComplexity = 'String | Optional | Complexity of PIN for sign-in session for Managed Home Screen. | notConfigured / simple / complex' KioskModeFolderIcon = 'String | Optional | Folder icon configuration for managed home screen in Kiosk Mode. | notConfigured / darkSquare / darkCircle / lightSquare / lightCircle' KioskCustomizationSystemNavigation = 'String | Optional | Indicates which navigation features are enabled in Kiosk Mode. | notConfigured / navigationEnabled / homeButtonOnly' DataRoamingBlocked = 'Boolean | Optional | Block data roaming.' WorkProfilePasswordMinimumLetterCharacters = 'UInt32 | Optional | Indicates the minimum number of numeric characters required for the work profile password. Valid values 1 to 16' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) CameraBlocked = 'Boolean | Optional | Block all cameras on the device' KioskModeManagedHomeScreenInactiveSignOutNoticeInSeconds = 'UInt32 | Optional | Number of seconds device is inactive before automatically signing user out for Managed Home Screen. Valid values 0 to 9999999.' KioskModeScreenOrientation = 'String | Optional | Screen orientation configuration for managed home screen in Kiosk Mode. | notConfigured / portrait / landscape / autoRotate' PasswordMinimumSymbolCharacters = 'UInt32 | Optional | Indicates the minimum number of symbol characters required for device password. Valid values 1 to 16' WifiBlockEditPolicyDefinedConfigurations = 'Boolean | Optional | Block changes to Wi-Fi configurations created by the device owner. Users can create their own Wi-Fi configurations.' KioskModeDebugMenuEasyAccessEnabled = 'Boolean | Optional | Whether or not to allow a user to easy access to the debug menu in Kiosk Mode' KioskModeManagedHomeScreenSignInBrandingLogo = 'String | Optional | Custom URL branding logo for sign-in screen and session pin page for Managed Home Screen.' SecurityRequireVerifyApps = 'Boolean | Optional | Enable Google Play Protect to scan apps before and after they''re installed. If it detects a threat, it might warn the user to remove the app from the device. Required by default.' WorkProfilePasswordExpirationDays = 'UInt32 | Optional | Indicates the number of days that a work profile password can be set before it expires and a new password will be required. Valid values 1 to 365' KioskModeExitCode = 'String | Optional | The 4-6 digit PIN will be the code an IT administrator enters on a multi-app dedicated device to pause kiosk mode.' StatusBarBlocked = 'Boolean | Optional | Block access to the status bar, including notifications and quick settings.' PasswordPreviousPasswordCountToBlock = 'UInt32 | Optional | Enter the number of unique passwords required before a user can reuse an old one. (1-24)' KioskCustomizationStatusBar = 'String | Optional | Indicates whether system info and notifications are disabled in Kiosk Mode | notConfigured / notificationsAndSystemInfoEnabled / systemInfoOnly' ShortHelpText = @{ localizedMessages = @( @{ Name = 'String | Optional | Name of the message localizedMessages.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Value of the message localizedMessages.' } ) defaultMessage = 'String | Optional | The default message displayed if the user''s locale doesn''t match with any of the localized messages.' } PersonalProfilePlayStoreMode = 'String | Optional | Used together with PersonalProfilePersonalApplications to control how apps in the personal profile are allowed or blocked | notConfigured / blockedApps / allowedApps' KioskModeGridWidth = 'UInt32 | Optional | Number of columns for Managed Home Screen grid with app ordering enabled in Kiosk Mode. Valid values 1 to 9999999.' SecurityCommonCriteriaModeEnabled = 'Boolean | Optional | Represents the security common criteria mode enabled provided to users when they attempt to modify managed settings on their device.' WorkProfilePasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | Indicates the number of times a user can enter an incorrect work profile password before the device is wiped. Valid values 4 to 11' WorkProfilePasswordMinimumUpperCaseCharacters = 'UInt32 | Optional | Indicates the minimum number of symbol characters required for the work profile password. Valid values 1 to 16' MicrosoftLauncherFeedEnabled = 'Boolean | Optional | Indicates whether or not the user can modify the launcher feed on the device.' MicrosoftLauncherCustomWallpaperEnabled = 'Boolean | Optional | Indicates whether or not to configure the wallpaper on the targeted devices.' KioskModeAppOrderEnabled = 'Boolean | Optional | Whether or not to enable app ordering in Kiosk Mode.' KioskModeScreenSaverStartDelayInSeconds = 'UInt32 | Optional | The number of seconds the device needs to be inactive for before the screen saver is shown in Kiosk Mode. Valid values 1 to 9999999' MicrosoftLauncherCustomWallpaperAllowUserModification = 'Boolean | Optional | Indicates whether or not the user can modify the wallpaper to personalize their device.' CertificateCredentialConfigurationDisabled = 'Boolean | Optional | Blocks users from making any changes to credentials associated with certificates associated with certificates assigned to them.' } ) DeviceConfigurationPoliciesAndroidOpenSourceProject = @( @{ ScreenCaptureBlocked = 'Boolean | Optional | Prevent screen capture.' Description = 'String | Optional | Description of the Intune policy.' PasswordMinimumLength = 'UInt32 | Optional | Minimum number of characters required for the password.' DisplayName = 'String | Required | Display name of the Intune policy.' BluetoothBlocked = 'Boolean | Optional | Prevents using Bluetooth on devices.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) CameraBlocked = 'Boolean | Optional | Prevents access to the device camera.' AppsBlockInstallFromUnknownSources = 'Boolean | Optional | Prevent applications from unknown sources.' FactoryResetBlocked = 'Boolean | Optional | Prevent factory reset.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' PasswordRequiredType = 'String | Optional | Set password complexity. | deviceDefault / required / numeric / numericComplex / alphabetic / alphanumeric / alphanumericWithSymbols / lowSecurityBiometric / customPassword' PasswordMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Maximum minutes of inactivity until screen locks.' StorageBlockUsbFileTransfer = 'Boolean | Optional | Prevent USB file transfer.' WifiBlockEditConfigurations = 'Boolean | Optional | Prevent Wifi configuration edit.' Id = 'String | Optional | Id of the Intune policy.' PasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | Number of sign-in failures before wiping device.' SecurityAllowDebuggingFeatures = 'Boolean | Optional | Enable debugging features.' StorageBlockExternalMedia = 'Boolean | Optional | Prevent external media.' BluetoothBlockConfiguration = 'Boolean | Optional | Prevent bluetooth configuration.' } ) DeviceConfigurationPoliciesAndroidWorkProfile = @( @{ WorkProfilePasswordBlockIrisUnlock = 'Boolean | Optional | Indicates whether or not to block iris unlock in work profile.' WorkProfilePasswordBlockTrustAgents = 'Boolean | Optional | Indicates whether or not to block Smart Lock and other trust agents for work profile' RequiredPasswordComplexity = 'String | Optional | Indicates the required device password complexity on Android. One of: NONE, LOW, MEDIUM, HIGH. | none / low / medium / high' WorkProfileBlockNotificationsWhileDeviceLocked = 'Boolean | Optional | Indicates whether or not to block notifications while device locked' Description = 'String | Optional | Description of the device general configuration policy for Android WorkProfile' UniqueId = 'String | Required | Unique ID to identify this specific object' WorkProfileRequirePassword = 'Boolean | Optional | Password is required or not for work profile' WorkProfilePasswordMinNumericCharacters = 'UInt32 | Optional | Minimum count of numeric characters required in work profile password' DisplayName = 'String | Required | Display name of the device general configuration policy for Android WorkProfile.' PasswordBlockFingerprintUnlock = 'Boolean | Optional | Indicates whether or not to block fingerprint unlock' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) WorkProfilePasswordBlockFingerprintUnlock = 'Boolean | Optional | Indicates whether or not to block fingerprint unlock in work profile' WorkProfilePasswordMinLowerCaseCharacters = 'UInt32 | Optional | Minimum count of lower-case characters required in work profile password' VpnEnableAlwaysOnLockdownMode = 'Boolean | Optional | Enable lockdown mode for always-on VPN.' passwordBlockTrustAgents = 'Boolean | Optional | Indicates whether or not to block Smart Lock and other trust agents.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) WorkProfileBlockCrossProfileCopyPaste = 'Boolean | Optional | Boolean that indicates if the setting disallow cross profile copy paste is enabled' PasswordBlockFaceUnlock = 'Boolean | Optional | Indicates whether or not to block face unlock.' WorkProfilePasswordMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Minutes of inactivity before the screen times out' WorkProfileBlockCrossProfileContactsSearch = 'Boolean | Optional | Block work profile contacts availability in personal profile' SecurityRequireVerifyApps = 'Boolean | Optional | Require the Android Verify apps feature is turned on' PasswordRequiredType = 'String | Optional | Type of password that is required | deviceDefault / lowSecurityBiometric / required / atLeastNumeric / numericComplex / atLeastAlphabetic / atLeastAlphanumeric / alphanumericWithSymbols' WorkProfileAllowAppInstallsFromUnknownSources = 'Boolean | Optional | Indicates whether to allow installation of apps from unknown sources.' WorkProfilePasswordRequiredType = 'String | Optional | Type of work profile password that is required | deviceDefault / lowSecurityBiometric / required / atLeastNumeric / numericComplex / atLeastAlphabetic / atLeastAlphanumeric / alphanumericWithSymbols' WorkProfilePasswordBlockFaceUnlock = 'Boolean | Optional | Indicates whether or not to block face unlock in work profile.' PasswordExpirationDays = 'UInt32 | Optional | Number of days before the password expires' WorkProfileBluetoothEnableContactSharing = 'Boolean | Optional | Allow bluetooth devices to access enterprise contacts' WorkProfileDataSharingType = 'String | Optional | Type of data sharing that is allowed | deviceDefault / preventAny / allowPersonalToWork / noRestrictions' WorkProfilePasswordMinSymbolCharacters = 'UInt32 | Optional | Minimum count of symbols required in work profile password' WorkProfilePasswordMinUpperCaseCharacters = 'UInt32 | Optional | Minimum count of upper-case characters required in work profile password' Ensure = 'String | Optional | Present ensures the site collection exists, absent ensures it is removed | Present / Absent' WorkProfileBlockScreenCapture = 'Boolean | Optional | Block screen capture in work profile' WorkProfilePasswordMinimumLength = 'UInt32 | Optional | Minimum length of work profile password' WorkProfilePasswordPreviousPasswordBlockCount = 'UInt32 | Optional | Number of previous work profile passwords to block' PasswordMinimumLength = 'UInt32 | Optional | Minimum length of passwords' PasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | Number of sign in failures allowed before factory reset' WorkProfilePasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | Number of sign in failures allowed before work profile is removed and all corporate data deleted' PasswordMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Minutes of inactivity before the screen times out' WorkProfileBlockAddingAccounts = 'Boolean | Optional | Block users from adding/removing accounts in work profile' WorkProfilePasswordMinLetterCharacters = 'UInt32 | Optional | Minimum count of letter characters required in work profile password' WorkProfileRequiredPasswordComplexity = 'String | Optional | Indicates the required device password complexity on Android. One of: NONE, LOW, MEDIUM, HIGH in work profile. | none / low / medium / high' WorkProfileBlockCrossProfileCallerId = 'Boolean | Optional | Block display work profile caller ID in personal profile' WorkProfileBlockCamera = 'Boolean | Optional | Block work profile camera' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | Number of previous passwords to block' WorkProfileAllowWidgets = 'Boolean | Optional | Allow widgets from work profile apps.' VpnAlwaysOnPackageIdentifier = 'String | Optional | Package identifier for always-on VPN.' WorkProfilePasswordExpirationDays = 'UInt32 | Optional | Number of days before the work profile password expires' WorkProfileBlockPersonalAppInstallsFromUnknownSources = 'Boolean | Optional | Prevent app installations from unknown sources in the personal profile.' WorkProfileDefaultAppPermissionPolicy = 'String | Optional | Type of password that is required | deviceDefault / prompt / autoGrant / autoDeny' WorkProfilePasswordMinNonLetterCharacters = 'UInt32 | Optional | Minimum count of non-letter characters required in work profile password' PasswordBlockIrisUnlock = 'Boolean | Optional | Indicates whether or not to block iris unlock.' } ) DeviceConfigurationPoliciesiOS = @( @{ EmailInDomainSuffixes = @( 'String | Optional | Emails that the user sends or receives which don''t match the domains you specify here will be marked as untrusted.' ) DocumentsBlockUnmanagedDocumentsInManagedApps = 'Boolean | Optional | Indicates whether or not to block the user from viewing unmanaged documents in managed apps.' FaceTimeBlocked = 'Boolean | Optional | Indicates whether or not to block the user from using FaceTime. Requires a supervised device for iOS 13 and later.' OnDeviceOnlyDictationForced = 'Boolean | Optional | Indicates whether or not to enforce on device only dictation.' NetworkUsageRules = @( @{ cellularDataBlockWhenRoaming = 'Boolean | Optional | If set to true, corresponding managed apps will not be allowed to use cellular data when roaming.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' managedApps = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) cellularDataBlocked = 'Boolean | Optional | If set to true, corresponding managed apps will not be allowed to use cellular data at any time.' } ) ICloudBlockActivityContinuation = 'Boolean | Optional | Handoff lets users start work on one iOS device, and continue it on another MacOS or iOS device.' SoftwareUpdatesEnforcedDelayInDays = 'UInt32 | Optional | Delay the user''s software update for this many days. The maximum is 90 days. (1-90)' AppsSingleAppModeList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) ICloudBlockPhotoLibrary = 'Boolean | Optional | Any photos not fully downloaded from iCloud Photo Library to device will be removed from local storage.' PrivacyForceLimitAdTracking = 'Boolean | Optional | Disables device advertising identifier' CameraBlocked = 'Boolean | Optional | Indicates whether or not to block the user from accessing the camera of the device. Requires a supervised device for iOS 13 and later.' MediaContentRatingGermany = @{ movieRating = 'String | Optional | Movies rating selected for Germany | allAllowed / allBlocked / general / agesAbove6 / agesAbove12 / agesAbove16 / adults' tvRating = 'String | Optional | TV rating selected for Germany | allAllowed / allBlocked / general / agesAbove6 / agesAbove12 / agesAbove16 / adults' } KeyboardBlockShortcuts = 'Boolean | Optional | Indicates whether or not to block keyboard shortcuts when the device is in supervised mode (iOS 9.0 and later).' FilesUsbDriveAccessBlocked = 'Boolean | Optional | Devices with access can connect to and open files on a USB drive. Available for devices running iOS and iPadOS, versions 13.0 and later.' MediaContentRatingUnitedKingdom = @{ movieRating = 'String | Optional | Movies rating selected for UK | allAllowed / allBlocked / general / universalChildren / parentalGuidance / agesAbove12Video / agesAbove12Cinema / agesAbove15 / adults' tvRating = 'String | Optional | TV rating selected for UK | allAllowed / allBlocked / caution' } AppStoreBlocked = 'Boolean | Optional | For supervised devices as of iOS 13.0.' KioskModeRequireColorInversion = 'Boolean | Optional | Indicates whether or not to enforce color inversion while in Kiosk Mode.' ICloudPrivateRelayBlocked = 'Boolean | Optional | Block iCloud private relay.' KeychainBlockCloudSync = 'Boolean | Optional | Disables syncing credentials stored in the Keychain to iCloud.' SharedDeviceBlockTemporarySessions = 'Boolean | Optional | Indicates whether or not to block temporary sessions on shared devices.' SafariBlocked = 'Boolean | Optional | Indicates whether or not to block Safari. For supervised devices as of iOS 13.0.' ICloudBlockSharedPhotoStream = 'Boolean | Optional | Block shared photo streaming. Blocking can cause data loss.' EnterpriseBookBlockMetadataSync = 'Boolean | Optional | Indicates whether or not to sync enterprise book metadata.' AirDropBlocked = 'Boolean | Optional | Indicates whether or not to allow AirDrop when the device is in supervised mode.' DeviceBlockEnableRestrictions = 'Boolean | Optional | On iOS 12.0 and later, this blocks users from setting their own Screen Time settings, which includes device restrictions. On iOS 11.4.1 and earlier, this blocks the user from enabling restrictions in the device settings. The blocking effect is the same on any supervised iOS device.' KioskModeBlockRingerSwitch = 'Boolean | Optional | Indicates whether or not to block the ringer switch while in Kiosk Mode.' KioskModeEnableVoiceControl = 'Boolean | Optional | Indicates whether or not to enable the voice control while in Kiosk Mode.' KioskModeBlockSleepButton = 'Boolean | Optional | Indicates whether or not to block the sleep button while in Kiosk Mode.' AppStoreBlockInAppPurchases = 'Boolean | Optional | Block AppStore in-app purchases.' ApplePersonalizedAdsBlocked = 'Boolean | Optional | Block Apple PersonalizedAdsBlocked' KioskModeBlockAutoLock = 'Boolean | Optional | Indicates whether or not to block the auto-lock while in Kiosk Mode.' ClassroomAppBlockRemoteScreenObservation = 'Boolean | Optional | Block remote screen observation by Classroom app. To use this setting, the device must be in supervised mode (iOS 9.3+).' PasscodeBlockFingerprintModification = 'Boolean | Optional | Block users from adding, changing, or removing fingerprints and faces. Face ID is avaliable in iOS 11.0 and later.' FindMyDeviceInFindMyAppBlocked = 'Boolean | Optional | A Find My app feature. Available for iOS/iPadOS 13.0 and later.' IBooksStoreBlocked = 'Boolean | Optional | Indicates whether or not to block the user from using the iBooks Store when the device is in supervised mode.' KioskModeRequireVoiceOver = 'Boolean | Optional | Indicates whether or not to enforce voice control while in Kiosk Mode.' SafariManagedDomains = @( 'String | Optional | Documents downloaded from the URLs you specify here will be considered managed (Safari only).' ) AirDropForceUnmanagedDropTarget = 'Boolean | Optional | Force AirDrop to be considered an unmanaged drop target.' SafariBlockAutofill = 'Boolean | Optional | Indicates whether or not to block Safari autofill.' PasscodeSignInFailureCountBeforeWipe = 'UInt32 | Optional | Number of consecutive times an incorrect password can be entered before device is wiped of all data. (2-11)' ContinuousPathKeyboardBlocked = 'Boolean | Optional | QuickPath enables continuous input on the device keyboard. Available for iOS/iPadOS 13.0 and later.' AppleWatchForceWristDetection = 'Boolean | Optional | Force paired Apple watch to use wrist detection.' PasscodeMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Set to 0 to use the device''s minimum possible value. This number (0-60) overrides the number currently set on the device. If set to Immediately, devices will use the minimum possible value per device.' KioskModeAllowVoiceControlModification = 'Boolean | Optional | Indicates whether or not to allow the user to toggle voice control in kiosk mode.' MediaContentRatingUnitedStates = @{ movieRating = 'String | Optional | Movies rating selected for USA | allAllowed / allBlocked / general / parentalGuidance / parentalGuidance13 / restricted / adults' tvRating = 'String | Optional | TV rating selected for USA | allAllowed / allBlocked / childrenAll / childrenAbove7 / general / parentalGuidance / childrenAbove14 / adults' } KioskModeBlockVolumeButtons = 'Boolean | Optional | Indicates whether or not to block the volume buttons while in Kiosk Mode.' HostPairingBlocked = 'Boolean | Optional | Host pairing allows you to control which devices the device can pair with.' AppClipsBlocked = 'Boolean | Optional | Block app clips.' OnDeviceOnlyTranslationForced = 'Boolean | Optional | Indicates whether or not to enforce on device only translation.' AccountBlockModification = 'Boolean | Optional | Indicates whether or not to allow account modification when the device is in supervised mode.' CellularBlockPlanModification = 'Boolean | Optional | Indicates whether or not to allow users to change the settings of the cellular plan on a supervised device.' AirPrintBlocked = 'Boolean | Optional | Blocks AirPrint request.' EnterpriseBookBlockBackup = 'Boolean | Optional | Indicates whether or not to backup enterprise book.' KioskModeAllowZoomSettings = 'Boolean | Optional | Users can turn zoom on or off.' PasswordBlockAirDropSharing = 'Boolean | Optional | Indicates whether or not to block AirDrop password sharing' CellularBlockPersonalHotspotModification = 'Boolean | Optional | For devices running iOS 12.2 and later. Users can''t turn Personal Hotspot on or off. If you block this setting and block Personal Hotspot, Personal Hotspot will be turned off.' NotificationsBlockSettingsModification = 'Boolean | Optional | Indicates whether or not to allow notifications settings modification (iOS 9.3 and later).' CertificatesBlockUntrustedTlsCertificates = 'Boolean | Optional | Block untrusted Transport Layer Security (TLS) certificates.' DateAndTimeForceSetAutomatically = 'Boolean | Optional | Forces device to Set Date & Time Automatically. The device''s time zone will only be updated when the device has cellular connections or wifi with location services enabled.' FilesNetworkDriveAccessBlocked = 'Boolean | Optional | Using the Server Message Block (SMB) protocol, devices can access files or other resources on a network server. Available for devices running iOS and iPadOS, versions 13.0 and later.' SafariPasswordAutoFillDomains = @( 'String | Optional | Users can save passwords in Safari only from URLs matching the patterns you specify here. To use this setting, the device must be in supervised mode and not configured for multiple users. (iOS 9.3+)' ) KeyboardBlockSpellCheck = 'Boolean | Optional | Indicates whether or not to block keyboard spell-checking when the device is in supervised mode (iOS 8.1.3 and later).' PasscodeMinimumCharacterSetCount = 'UInt32 | Optional | Minimum number (0-4) of non-alphanumeric characters, such as #, %, !, etc., required in the password. The default value is 0.' KioskModeAllowScreenRotation = 'Boolean | Optional | Kiosk mode allow screen rotation' WiFiConnectToAllowedNetworksOnlyForced = 'Boolean | Optional | Require devices to use Wi-Fi networks set up via configuration profiles. Available for devices running iOS and iPadOS versions 14.5 and later.' KioskModeAllowColorInversionSettings = 'Boolean | Optional | Users can turn invert colors on or off.' PasscodeMinutesOfInactivityBeforeLock = 'UInt32 | Optional | Set to 0 to require a password immediately. There is no maximum number of minutes, and this number overrides the number currently set on the device. (This compliance check is supported for devices with OS versions iOS 8.0 and above)' EnterpriseAppBlockTrust = 'Boolean | Optional | Removes the Trust Enterprise Developer button in Settings->General->Profiles & Device Management.' DiagnosticDataBlockSubmission = 'Boolean | Optional | Block the device from sending diagnostic and usage telemetry data.' GamingBlockMultiplayer = 'Boolean | Optional | For supervised devices as of iOS 13.0.' KioskModeManagedAppId = 'String | Optional | Add managed Intune apps from the Software Node.' KioskModeRequireAssistiveTouch = 'Boolean | Optional | Indicates whether or not to enforce assistive touch while in Kiosk Mode.' AppStoreBlockUIAppInstallation = 'Boolean | Optional | Block App Store from Home Screen. Users may continue to use iTunes or Apple Configurator to install or update apps.' ITunesBlockExplicitContent = 'Boolean | Optional | Block explicit iTunes music, podcast, and news content from iTunes. For supervised devices as of 13.0.' DeviceBlockEraseContentAndSettings = 'Boolean | Optional | Block the use of the erase all content and settings option on the device.' UsbRestrictedModeBlocked = 'Boolean | Optional | Blocks USB Restricted mode. USB Restricted mode blocks USB accessories from exchanging data with a device that has been locked over an hour.' SafariBlockJavaScript = 'Boolean | Optional | Indicates whether or not to block javascript in Safari.' Description = 'String | Optional | Description of the Intune policy.' AppRemovalBlocked = 'Boolean | Optional | Block app removal.' ClassroomForceUnpromptedAppAndDeviceLock = 'Boolean | Optional | Teachers can lock an app open or lock the device without first prompting the user.' PodcastsBlocked = 'Boolean | Optional | Indicates whether or not to block podcasts.' ClassroomForceRequestPermissionToLeaveClasses = 'Boolean | Optional | Requires a student enrolled in an unmanaged course via Classroom to request permission from the teacher when attempting to leave the course. Only available in iOS 11.3+' AppsVisibilityList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) KioskModeAppStoreUrl = 'String | Optional | URL of app for kiosk mode, e.g. https://itunes.apple.com/us/app/work-folders/id950878067?mt=8' MediaContentRatingFrance = @{ movieRating = 'String | Optional | Movies rating selected for France | allAllowed / allBlocked / agesAbove10 / agesAbove12 / agesAbove16 / agesAbove18' tvRating = 'String | Optional | TV rating selected for France | allAllowed / allBlocked / agesAbove10 / agesAbove12 / agesAbove16 / agesAbove18' } BlockSystemAppRemoval = 'Boolean | Optional | Blocking disables the ability to remove system apps from the device.' AppsVisibilityListType = 'String | Optional | Set whether the list is a list of apps to hide or a list of apps to make visible. | none / appsInListCompliant / appsNotInListCompliant' EsimBlockModification = 'Boolean | Optional | Indicates whether or not to allow the addition or removal of cellular plans on the eSIM of a supervised device.' ContactsAllowUnmanagedToManagedRead = 'Boolean | Optional | An unmanaged app, such as the device''s built-in contacts app, can access contact info in a managed app, such as Outlook.' KioskModeAllowVoiceOverSettings = 'Boolean | Optional | Users can turn VoiceOver on or off.' SiriBlocked = 'Boolean | Optional | Indicates whether or not to block Siri.' KioskModeBlockScreenRotation = 'Boolean | Optional | Indicates whether or not to block the screen rotation while in Kiosk Mode.' NfcBlocked = 'Boolean | Optional | Indicates whether or not to block the user from using nfc on the supervised device.' MediaContentRatingJapan = @{ movieRating = 'String | Optional | Movies rating selected for Japan | allAllowed / allBlocked / general / parentalGuidance / agesAbove15 / agesAbove18' tvRating = 'String | Optional | TV rating selected for Japan | allAllowed / allBlocked / explicitAllowed' } PasswordBlockAutoFill = 'Boolean | Optional | Indicates whether or not to block password autofill.' CompliantAppsList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | Define the name of the app.' appId = 'String | Optional | Kiosk mode managed app id' appStoreUrl = 'String | Optional | Define the app store URL.' odataType = 'String | Optional | odatatype of the item. | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | Define the publisher of the app.' } ) LockScreenBlockNotificationView = 'Boolean | Optional | Indicates whether or not to block the user from using the notification view on the lock screen.' ScreenCaptureBlocked = 'Boolean | Optional | Indicates whether or not to block the user from taking Screenshots' KioskModeAllowTouchscreen = 'Boolean | Optional | Kiosk mode allow touchscreen' ICloudRequireEncryptedBackup = 'Boolean | Optional | Require encryption on device backup.' CellularBlockDataRoaming = 'Boolean | Optional | Block data roaming over the cellular network. This won''t show in the device''s management profile, but a block will be enforced for data roaming every time the device checks in (typically every 8 hours).' ICloudBlockDocumentSync = 'Boolean | Optional | Blocks iCloud from syncing documents and data.' ITunesBlockRadio = 'Boolean | Optional | Indicates whether or not to block the user from using iTunes Radio when the device is in supervised mode (iOS 9.3 and later).' KioskModeAppType = 'String | Optional | Indicates type of app in kiosk mode. | notConfigured / appStoreApp / managedApp / builtInApp' KioskModeAllowVolumeButtons = 'Boolean | Optional | Kiosk mode allow volume buttons' SiriBlockUserGeneratedContent = 'Boolean | Optional | Block Siri from querying user-generated content from the internet.' VoiceDialingBlocked = 'Boolean | Optional | Indicates whether or not to block voice dialing.' PasscodeMinimumLength = 'UInt32 | Optional | Minimum number of digits or characters in password. (4-14)' ActivationLockAllowWhenSupervised = 'Boolean | Optional | Activation Lock makes it harder for a lost or stolen device to be reactivated.' CellularBlockVoiceRoaming = 'Boolean | Optional | Block voice roaming over the cellular network.' MediaContentRatingIreland = @{ movieRating = 'String | Optional | Movies rating selected for Ireland | allAllowed / allBlocked / general / parentalGuidance / agesAbove12 / agesAbove15 / agesAbove16 / adults' tvRating = 'String | Optional | TV rating selected for Ireland | allAllowed / allBlocked / general / children / youngAdults / parentalSupervision / mature' } Id = 'String | Optional | Id of the Intune policy.' KeyboardBlockDictation = 'Boolean | Optional | Indicates whether or not to block the user from using dictation input when the device is in supervised mode.' PasscodeBlockModification = 'Boolean | Optional | Block passcode from being added, changed or removed. Changes to passcode restrictions will be ignored on supervised devices after blocking passcode modification.' AutoUnlockBlocked = 'Boolean | Optional | Block auto unlock.' PasswordBlockProximityRequests = 'Boolean | Optional | Indicates whether or not to block password proximity requests.' MediaContentRatingAustralia = @{ movieRating = 'String | Optional | Movies rating selected for Australia | allAllowed / allBlocked / general / parentalGuidance / mature / agesAbove15 / agesAbove18' tvRating = 'String | Optional | TV rating selected for Australia | allAllowed / allBlocked / preschoolers / children / general / parentalGuidance / mature / agesAbove15 / agesAbove15AdultViolence' } DiagnosticDataBlockSubmissionModification = 'Boolean | Optional | Block the modification of the diagnostic submission and app analytics settings in the Diagnostics and Usage pane in Settings. To use this setting, the device must be in supervised mode (iOS 9.3.2+).' SafariRequireFraudWarning = 'Boolean | Optional | Indicates whether or not to require fraud warning in Safari.' ManagedPasteboardRequired = 'Boolean | Optional | Indicates whether or not to enforce managed pasteboard.' ProximityBlockSetupToNewDevice = 'Boolean | Optional | Block user''s from using their Apple devices to set up and configure other Apple devices.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | Display name of the Intune policy.' SiriBlockedWhenLocked = 'Boolean | Optional | Indicates whether or not to block Siri when locked.' MessagesBlocked = 'Boolean | Optional | Indicates whether or not to block the user from using the Messages app on the supervised device.' MediaContentRatingCanada = @{ movieRating = 'String | Optional | Movies rating selected for Canada | allAllowed / allBlocked / general / parentalGuidance / agesAbove14 / agesAbove18 / restricted' tvRating = 'String | Optional | TV rating selected for Canada | allAllowed / allBlocked / children / childrenAbove8 / general / parentalGuidance / agesAbove14 / agesAbove18' } ICloudBlockPhotoStreamSync = 'Boolean | Optional | Block photo stream syncing to iCloud.' KeyboardBlockPredictive = 'Boolean | Optional | Indicates whether or not to block predictive keyboards when device is in supervised mode (iOS 8.1.3 and later).' SafariBlockPopups = 'Boolean | Optional | Indicates whether or not to block popups on Safari.' GameCenterBlocked = 'Boolean | Optional | Indicates whether or not to block the user from using Game Center when the device is in supervised mode.' PasscodeBlockSimple = 'Boolean | Optional | Block simple password sequences, such as 1234 or 1111.' ITunesBlocked = 'Boolean | Optional | Block iTunes.' FindMyFriendsInFindMyAppBlocked = 'Boolean | Optional | A Find My app feature. Used to locate family and friends from an Apple device or iCloud.com. Available for iOS/iPadOS 13.0 and later.' LockScreenBlockPassbook = 'Boolean | Optional | Indicates whether or not to block the user from using passbook when the device is locked.' KioskModeAllowSleepButton = 'Boolean | Optional | Kiosk mode allow sleep button' PasscodeRequired = 'Boolean | Optional | In addition to requiring a password on all devices, this setting enforces a non-simple, 6-digit password requirement (regardless of other password settings you configure) on devices that are enrolled with Apple user enrollment.' EnterpriseAppBlockTrustModification = 'Boolean | Optional | Block the changing of enterprise app trust settings.' AirPlayForcePairingPasswordForOutgoingRequests = 'Boolean | Optional | Force requiring a pairing password for outgoing AirPlay requests.' KeyboardBlockAutoCorrect = 'Boolean | Optional | Indicates whether or not to block keyboard auto-correction when the device is in supervised mode (iOS 8.1.3 and later).' AirPrintBlockiBeaconDiscovery = 'Boolean | Optional | Blocking prevents malicious AirPrint Bluetooth beacons phishing for network traffic.' SpotlightBlockInternetResults = 'Boolean | Optional | Blocks Spotlight from returning any results from an Internet search.' IBooksStoreBlockErotica = 'Boolean | Optional | User will not be able to download media from the iBook store that has been tagged as erotica.' KioskModeAllowRingerSwitch = 'Boolean | Optional | Kiosk mode allow ringer switch' VpnBlockCreation = 'Boolean | Optional | Blocks the creation of VPN configurations' PkiBlockOTAUpdates = 'Boolean | Optional | Allows your users to receive software updates without connecting their devices to a computer' CellularBlockGlobalBackgroundFetchWhileRoaming = 'Boolean | Optional | Block global background fetch while roaming over the cellular network.' CellularBlockPersonalHotspot = 'Boolean | Optional | This value is available only with certain carriers. This won''t show in the device''s management profile, but a block will be enforced for personal hotspot every time the device checks in (typically every 8 hours). Block modification of personal hotspot in addition to this setting to ensure personal hotspot will always be blocked.' DocumentsBlockManagedDocumentsInUnmanagedApps = 'Boolean | Optional | Indicates whether or not to block the user from viewing managed documents in unmanaged apps.' KioskModeBuiltInAppId = 'String | Optional | To see a list of bundle IDs for common built-in iOS apps, see the Intune documentation.' AppleWatchBlockPairing = 'Boolean | Optional | Indicates whether or not to allow Apple Watch pairing when the device is in supervised mode (iOS 9.0 and later).' AirPrintForceTrustedTLS = 'Boolean | Optional | Forces trusted certificates for TLS printing communication' WallpaperBlockModification = 'Boolean | Optional | Block wallpaper from being changed.' SiriRequireProfanityFilter = 'Boolean | Optional | Prevents Siri from dictating, or speaking profane language.' PasscodeBlockFingerprintUnlock = 'Boolean | Optional | Face ID is avaliable on iOS 11.0 and later.' ITunesBlockMusicService = 'Boolean | Optional | Block Music service. If true, Music app reverts to classic mode and Music service is disabled.' KioskModeAllowAssistiveSpeak = 'Boolean | Optional | Indicates whether or not to allow assistive speak while in kiosk mode.' UnpairedExternalBootToRecoveryAllowed = 'Boolean | Optional | Allow users to boot devices into recovery mode with unpaired devices. Available for devices running iOS and iPadOS versions 14.5 and later.' DefinitionLookupBlocked = 'Boolean | Optional | Indicates whether or not to block definition lookup when the device is in supervised mode (iOS 8.1.3 and later ).' FindMyFriendsBlocked = 'Boolean | Optional | Block changes to the Find My Friends app settings.' AppStoreRequirePassword = 'Boolean | Optional | Users must enter Apple ID password for each in-app and iTunes purchase.' ICloudBlockManagedAppsSync = 'Boolean | Optional | Block managed apps from syncing to cloud.' LockScreenBlockTodayView = 'Boolean | Optional | Indicates whether or not to block the user from using the Today View on the lock screen.' BluetoothBlockModification = 'Boolean | Optional | Block modification of Bluetooth settings. To use this setting, the device must be in supervised mode (iOS 10.0+).' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) SoftwareUpdatesForceDelayed = 'Boolean | Optional | Delay user visibility of Software Updates. This does not impact any scheduled updates. It represents days before software updates are visible to end users after release.' ConfigurationProfileBlockChanges = 'Boolean | Optional | Indicates whether or not to block the user from installing configuration profiles and certificates interactively when the device is in supervised mode.' AppStoreBlockAutomaticDownloads = 'Boolean | Optional | Blocks automatic downloading of apps purchased on other devices. Does not affect updates to existing apps.' WiFiConnectOnlyToConfiguredNetworks = 'Boolean | Optional | Force the device to use only Wi-Fi networks set up through configuration profiles.' MediaContentRatingNewZealand = @{ movieRating = 'String | Optional | Movies rating selected for New Zealand | allAllowed / allBlocked / general / parentalGuidance / mature / agesAbove13 / agesAbove15 / agesAbove16 / agesAbove18 / restricted / agesAbove16Restricted' tvRating = 'String | Optional | TV rating selected for New Zealand | allAllowed / allBlocked / general / parentalGuidance / adults' } KioskModeRequireMonoAudio = 'Boolean | Optional | Indicates whether or not to enforce mono audio while in Kiosk Mode.' AppleNewsBlocked = 'Boolean | Optional | Block Apple News' MediaContentRatingApps = 'String | Optional | Media content rating settings for apps. | allAllowed / allBlocked / agesAbove4 / agesAbove9 / agesAbove12 / agesAbove17' LockScreenBlockControlCenter = 'Boolean | Optional | Indicates whether or not to block the user from using control center on the lock screen.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' CellularBlockPerAppDataModification = 'Boolean | Optional | Block changes to app cellular data usage settings.' ClassroomForceAutomaticallyJoinClasses = 'Boolean | Optional | Students can join a class without prompting the teacher.' ClassroomAppForceUnpromptedScreenObservation = 'Boolean | Optional | Student devices enrolled in a class via the Classroom app will automatically give permission to that course''s teacher to silently observe the student''s screen.' SafariCookieSettings = 'String | Optional | Cookie settings for Safari. | browserDefault / blockAlways / allowCurrentWebSite / allowFromWebsitesVisited / allowAlways' DeviceBlockNameModification = 'Boolean | Optional | Indicates whether or not to allow device name modification when the device is in supervised mode (iOS 9.0 and later).' GamingBlockGameCenterFriends = 'Boolean | Optional | Block adding Game Center friends. For supervised devices as of iOS 13.0.' WifiPowerOnForced = 'Boolean | Optional | Wi-Fi can''t be turned off in the Settings app or in the Control Center, even when the device is in airplane mode. Available for iOS/iPadOS 13.0 and later.' ContactsAllowManagedToUnmanagedWrite = 'Boolean | Optional | Users can sync and add their managed contacts (including business and corporate ones) to an unmanaged app, such as the device''s built-in contacts app.' AirPrintBlockCredentialsStorage = 'Boolean | Optional | Blocks keychain storage of username and password for outgoing AirPrint request.' KioskModeAllowAssistiveTouchSettings = 'Boolean | Optional | Users can turn AssistiveTouch on or off.' PasscodeRequiredType = 'String | Optional | Type of passcode that is required. | deviceDefault / alphanumeric / numeric' PasscodePreviousPasscodeBlockCount = 'UInt32 | Optional | Number of new passwords that must be used until an old one can be reused. (1-24)' AutoFillForceAuthentication = 'Boolean | Optional | Require Touch ID or Face ID before passwords or credit card information can be auto filled in Safari and Apps. Available with iOS 12.0 and later.' CompliantAppListType = 'String | Optional | Device compliance can be viewed in the Restricted Apps Compliance report. | none / appsInListCompliant / appsNotInListCompliant' PasscodeExpirationDays = 'UInt32 | Optional | Number of days until device password must be changed. (1-65535)' ICloudBlockBackup = 'Boolean | Optional | Block backing up device to iCloud.' KioskModeAllowAutoLock = 'Boolean | Optional | Kiosk mode allow auto lock' KioskModeBlockTouchscreen = 'Boolean | Optional | Indicates whether or not to block the touchscreen while in Kiosk Mode.' KioskModeRequireZoom = 'Boolean | Optional | Indicates whether or not to enforce zoom while in Kiosk Mode.' } ) DeviceConfigurationPoliciesMacOS = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ICloudBlockActivityContinuation = 'Boolean | Optional | Handoff lets users start work on one MacOS device, and continue it on another MacOS or iOS device. Available for macOS 10.15 and later.' AppleWatchBlockAutoUnlock = 'Boolean | Optional | Blocks users from unlocking their Mac with Apple Watch.' CameraBlocked = 'Boolean | Optional | Blocks users from taking photographs and videos.' ITunesBlockMusicService = 'Boolean | Optional | Configures whether or not to block files from being transferred using iTunes.' SoftwareUpdateMajorOSDeferredInstallDelayInDays = 'UInt32 | Optional | Specify the number of days (1-90) to delay visibility of major OS software updates. Available for devices running macOS versions 11.3 and later. Valid values 0 to 90' UpdateDelayPolicy = @( 'String | Optional | Configures whether to delay OS and/or app updates for macOS. | none / delayOSUpdateVisibility / delayAppUpdateVisibility / unknownFutureValue / delayMajorOsUpdateVisibility' ) PasswordRequiredType = 'String | Optional | Specify the type of password required. | deviceDefault / alphanumeric / numeric' ICloudBlockPhotoLibrary = 'Boolean | Optional | Any photos not fully downloaded from iCloud Photo Library to device will be removed from local storage.' SafariBlockAutofill = 'Boolean | Optional | Blocks Safari from remembering what users enter in web forms.' KeychainBlockCloudSync = 'Boolean | Optional | Disables syncing credentials stored in the Keychain to iCloud' ClassroomForceUnpromptedAppAndDeviceLock = 'Boolean | Optional | Teachers can lock a student''s device or app without the student''s approval.' ICloudBlockCalendar = 'Boolean | Optional | Blocks iCloud from syncing calendars.' GameCenterBlocked = 'Boolean | Optional | Configured if the Game Center icon is removed from the Home screen. Available for devices running macOS versions 10.13 and later.' CompliantAppListType = 'String | Optional | Device compliance can be viewed in the Restricted Apps Compliance report. | none / appsInListCompliant / appsNotInListCompliant' TouchIdTimeoutInHours = 'UInt32 | Optional | Configures the maximum hours after which the user must enter their password to unlock the device instead of using Touch ID. Available for devices running macOS 12 and later. Valid values 0 to 2147483647' MultiplayerGamingBlocked = 'Boolean | Optional | Configures whether multiplayer gaming when using Game Center is blocked. Available for devices running macOS versions 10.13 and later.' ICloudBlockMail = 'Boolean | Optional | Blocks iCloud from syncing mail.' AirDropBlocked = 'Boolean | Optional | Configures whether or not to allow AirDrop.' EraseContentAndSettingsBlocked = 'Boolean | Optional | Configures the reset option on supervised devices. Available for devices running macOS versions 12.0 and later.' PasswordMaximumAttemptCount = 'UInt32 | Optional | Configures the number of allowed failed attempts to enter the passcode at the device''s lock screen. Valid values 2 to 11' EmailInDomainSuffixes = @( 'String | Optional | Emails that the user sends or receives which don''t match the domains you specify here will be marked as untrusted. ' ) Id = 'String | Optional | Id of the Intune policy.' ClassroomAppBlockRemoteScreenObservation = 'Boolean | Optional | Blocks AirPlay, screen sharing to other devices, and a Classroom app feature used by teachers to view their students'' screens. This setting isn''t available if you''ve blocked screenshots.' SoftwareUpdateMinorOSDeferredInstallDelayInDays = 'UInt32 | Optional | Specify the number of days (1-90) to delay visibility of minor OS software updates. Available for devices running macOS versions 11.3 and later. Valid values 0 to 90' ICloudDesktopAndDocumentsBlocked = 'Boolean | Optional | Configures if the synchronization of cloud desktop and documents is blocked. Available for devices running macOS 10.12.4 and later.' PasswordBlockModification = 'Boolean | Optional | Blocks user from changing the set passcode.' ICloudBlockReminders = 'Boolean | Optional | Blocks iCloud from syncing reminders.' ICloudBlockDocumentSync = 'Boolean | Optional | Blocks iCloud from syncing documents and data.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' SpotlightBlockInternetResults = 'Boolean | Optional | Blocks Spotlight from returning any results from an Internet search' SoftwareUpdatesEnforcedDelayInDays = 'UInt32 | Optional | Delay the user''s software update for this many days. The maximum is 90 days. (1-90)' PasswordExpirationDays = 'UInt32 | Optional | Number of days until device password must be changed. (1-65535)' Description = 'String | Optional | Description of the Intune policy.' ClassroomForceRequestPermissionToLeaveClasses = 'Boolean | Optional | Students enrolled in an unmanaged Classroom course must get teacher consent to leave the course.' PasswordBlockProximityRequests = 'Boolean | Optional | Configures whether or not to block requesting passwords from nearby devices.' WallpaperModificationBlocked = 'Boolean | Optional | Configures whether the wallpaper can be changed. Available for devices running macOS versions 10.13 and later.' PasswordMinutesUntilFailedLoginReset = 'UInt32 | Optional | Configures the number of minutes before the login is reset after the maximum number of unsuccessful login attempts is reached.' ITunesBlockFileSharing = 'Boolean | Optional | Blocks files from being transferred using iTunes.' KeyboardBlockDictation = 'Boolean | Optional | Block dictation, which is a feature that converts the user''s voice to text.' CompliantAppsList = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' name = 'String | Optional | The application name' appId = 'String | Optional | The application or bundle identifier of the application' appStoreUrl = 'String | Optional | The Store URL of the application' odataType = 'String | Optional | Specify the odataType | #microsoft.graph.appleAppListItem' publisher = 'String | Optional | The publisher of the application' } ) PasswordMinimumCharacterSetCount = 'UInt32 | Optional | Minimum number (0-4) of non-alphanumeric characters, such as #, %, !, etc., required in the password. The default value is 0.' PasswordBlockAutoFill = 'Boolean | Optional | Configures whether or not to block the AutoFill Passwords feature.' DisplayName = 'String | Required | Display name of the Intune policy.' PasswordMinimumLength = 'UInt32 | Optional | Minimum number of digits or characters in password (4-16).' PasswordBlockSimple = 'Boolean | Optional | Block simple password sequences, such as 1234 or 1111.' ICloudBlockAddressBook = 'Boolean | Optional | Blocks iCloud from syncing contacts.' PasswordRequired = 'Boolean | Optional | Specify the type of password required.' PasswordBlockFingerprintUnlock = 'Boolean | Optional | Requires user to set a non-biometric passcode or password to unlock the device.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) PasswordMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | Set to 0 to use the device''s minimum possible value. This number (0-60 minutes) overrides the number currently set on the device.' ScreenCaptureBlocked = 'Boolean | Optional | Configures whether or not to block the user from taking Screenshots.' ICloudPrivateRelayBlocked = 'Boolean | Optional | Configures if iCloud private relay is blocked or not. Available for devices running macOS 12 and later.' ContentCachingBlocked = 'Boolean | Optional | Configures whether or not to allow content caching.' AddingGameCenterFriendsBlocked = 'Boolean | Optional | Configures users from adding friends to Game Center. Available for devices running macOS versions 10.13 and later.' ICloudBlockNotes = 'Boolean | Optional | Blocks iCloud from syncing notes.' ClassroomForceAutomaticallyJoinClasses = 'Boolean | Optional | Students can join a class without prompting the teacher.' ICloudBlockBookmarks = 'Boolean | Optional | Blocks iCloud from syncing bookmarks.' PrivacyAccessControls = @( @{ photos = 'String | Optional | Allow or block access to images managed by Photos. | notConfigured / enabled / disabled' systemPolicySystemAdminFiles = 'String | Optional | Allow app or process to access files used in system administration. | notConfigured / enabled / disabled' systemPolicyAllFiles = 'String | Optional | Control access to all protected files on a device. Files might be in locations such as emails, messages, apps, and administrative settings. Apply this setting with caution. | notConfigured / enabled / disabled' systemPolicyNetworkVolumes = 'String | Optional | Allow or block access to network volumes. Requires macOS 10.15 or later. | notConfigured / enabled / disabled' displayName = 'String | Optional | The display name of the app, process, or executable.' reminders = 'String | Optional | Allow or block access to information managed by Reminders. | notConfigured / enabled / disabled' systemPolicyRemovableVolumes = 'String | Optional | Control access to removable volumes on the device, such as an external hard drive. Requires macOS 10.15 or later. | notConfigured / enabled / disabled' calendar = 'String | Optional | Allow or block access to event information managed by Calendar. | notConfigured / enabled / disabled' postEvent = 'String | Optional | Control access to CoreGraphics APIs, which are used to send CGEvents to the system event stream. | notConfigured / enabled / disabled' systemPolicyDownloadsFolder = 'String | Optional | Allow or block access to Downloads folder. | notConfigured / enabled / disabled' speechRecognition = 'String | Optional | Allow or block access to system speech recognition facility. | notConfigured / enabled / disabled' appleEventsAllowedReceivers = @( @{ identifierType = 'String | Optional | Use bundle ID for an app or path for a process or executable that receives the Apple Event. | bundleID / path' identifier = 'String | Optional | Bundle ID of the app or file path of the process or executable that receives the Apple Event.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' allowed = 'Boolean | Optional | Allow or block this app from receiving Apple events.' codeRequirement = 'String | Optional | Code requirement for the app or binary that receives the Apple Event.' } ) blockCamera = 'Boolean | Optional | Block access to camera app.' blockListenEvent = 'Boolean | Optional | Block the app or process from listening to events from input devices such as mouse, keyboard, and trackpad.Requires macOS 10.15 or later.' identifier = 'String | Optional | The bundle ID or path of the app, process, or executable.' fileProviderPresence = 'String | Optional | Allow the app or process to access files managed by another app''s file provider extension. Requires macOS 10.15 or later. | notConfigured / enabled / disabled' systemPolicyDocumentsFolder = 'String | Optional | Allow or block access to Documents folder. | notConfigured / enabled / disabled' accessibility = 'String | Optional | Allow the app or process to control the Mac via the Accessibility subsystem. | notConfigured / enabled / disabled' codeRequirement = 'String | Optional | Enter the code requirement, which can be obtained with the command ''codesign -display -r -'' in the Terminal app. Include everything after ''=>''.' systemPolicyDesktopFolder = 'String | Optional | Allow or block access to Desktop folder. | notConfigured / enabled / disabled' blockScreenCapture = 'Boolean | Optional | Block app from capturing contents of system display. Requires macOS 10.15 or later.' staticCodeValidation = 'Boolean | Optional | Statically validates the code requirement. Use this setting if the process invalidates its dynamic code signature.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' addressBook = 'String | Optional | Allow or block access to contact information managed by Contacts. | notConfigured / enabled / disabled' mediaLibrary = 'String | Optional | Allow or block access to music and the media library. | notConfigured / enabled / disabled' blockMicrophone = 'Boolean | Optional | Block access to microphone.' identifierType = 'String | Optional | A bundle ID is used to identify an app. A path is used to identify a process or executable. | bundleID / path' } ) ClassroomAppForceUnpromptedScreenObservation = 'Boolean | Optional | Unprompted observation means that teachers can view screens without warning students first. This setting isn''t available if you''ve blocked screenshots.' PasswordBlockAirDropSharing = 'Boolean | Optional | Configures whether or not to block sharing passwords with the AirDrop passwords feature.' PasswordMinutesOfInactivityBeforeLock = 'UInt32 | Optional | Set to 0 to require a password immediately. There is no maximum number of minutes, and this number overrides the number currently set on the device.' SoftwareUpdateNonOSDeferredInstallDelayInDays = 'UInt32 | Optional | Specify the number of days (1-90) to delay visibility of non-OS software updates. Available for devices running macOS versions 11.3 and later. Valid values 0 to 90' DefinitionLookupBlocked = 'Boolean | Optional | Block look up, a feature that looks up the definition of a highlighted word.' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | Number of new passwords that must be used until an old one can be reused. (1-24)' } ) DeviceConfigurationPoliciesWindows10 = @( @{ EnterpriseCloudPrintResourceIdentifier = 'String | Optional | OAuth resource URI for print service as configured in the Azure portal.' DataProtectionBlockDirectMemoryAccess = 'Boolean | Optional | This policy setting allows you to block direct memory access (DMA) for all hot pluggable PCI downstream ports until a user logs into Windows.' ExperienceBlockDeviceDiscovery = 'Boolean | Optional | Indicates whether or not to enable device discovery UX.' InkWorkspaceAccessState = 'String | Optional | Controls the user access to the ink workspace, from the desktop and from above the lock screen. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' BluetoothBlocked = 'Boolean | Optional | Whether or not to Block the user from using bluetooth.' PowerLidCloseActionOnBattery = 'String | Optional | This setting specifies the action that Windows takes when a user closes the lid on a mobile PC while on battery. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown. | notConfigured / noAction / sleep / hibernate / shutdown' ExperienceDoNotSyncBrowserSettings = 'String | Optional | Allow or prevent the syncing of Microsoft Edge Browser settings. Option for IT admins to prevent syncing across devices, but allow user override. Possible values are: notConfigured, blockedWithUserOverride, blocked. | notConfigured / blockedWithUserOverride / blocked' ExperienceBlockErrorDialogWhenNoSIM = 'Boolean | Optional | Indicates whether or not to allow the error dialog from displaying if no SIM card is detected.' DefenderScanMaxCpu = 'UInt32 | Optional | Max CPU usage percentage during scan. Valid values 0 to 100' MessagingBlockSync = 'Boolean | Optional | Indicates whether or not to block text message back up and restore and Messaging Everywhere.' CortanaBlocked = 'Boolean | Optional | Whether or not to Block the user from using Cortana.' StartMenuPinnedFolderMusic = 'String | Optional | Enforces the visibility (Show/Hide) of the Music folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' DefenderScanNetworkFiles = 'Boolean | Optional | Indicates whether or not to scan files opened from a network folder.' PasswordRequired = 'Boolean | Optional | Indicates whether or not to require the user to have a password.' InkWorkspaceAccess = 'String | Optional | Controls the user access to the ink workspace, from the desktop and from above the lock screen. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' EdgeBlockAccessToAboutFlags = 'Boolean | Optional | Indicates whether or not to prevent access to about flags on Edge browser.' EdgeKioskModeRestriction = 'String | Optional | Controls how the Microsoft Edge settings are restricted based on the configure kiosk mode. Possible values are: notConfigured, digitalSignage, normalMode, publicBrowsingSingleApp, publicBrowsingMultiApp. | notConfigured / digitalSignage / normalMode / publicBrowsingSingleApp / publicBrowsingMultiApp' EdgeBlockDeveloperTools = 'Boolean | Optional | Indicates whether or not to block developer tools in the Edge browser.' AppsAllowTrustedAppsSideloading = 'String | Optional | Indicates whether apps from AppX packages signed with a trusted certificate can be side loaded. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' SmartScreenEnableAppInstallControl = 'Boolean | Optional | This property will be deprecated in July 2019 and will be replaced by property SmartScreenAppInstallControl. Allows IT Admins to control whether users are allowed to install apps from places other than the Store.' EdgeBlockFullScreenMode = 'Boolean | Optional | Allow or prevent Edge from entering the full screen mode.' DefenderDisableCatchupQuickScan = 'Boolean | Optional | When blocked, catch-up scans for scheduled quick scans will be turned off.' SettingsBlockChangeSystemTime = 'Boolean | Optional | Indicates whether or not to block the user from changing date and time settings.' WindowsSpotlightConfigureOnLockScreen = 'String | Optional | Specifies the type of Spotlight. Possible values are: notConfigured, disabled, enabled. | notConfigured / disabled / enabled' LockScreenBlockActionCenterNotifications = 'Boolean | Optional | Indicates whether or not to block action center notifications over lock screen.' StartMenuHideRecentJumpLists = 'Boolean | Optional | Enabling this policy hides recent jump lists from appearing on the start menu/taskbar and disables the corresponding toggle in the Settings app.' StartMenuAppListVisibility = 'String | Optional | Setting the value of this collapses the app list, removes the app list entirely, or disables the corresponding toggle in the Settings app. Possible values are: userDefined, collapse, remove, disableSettingsApp. | userDefined / collapse / remove / disableSettingsApp' DeviceManagementBlockManualUnenroll = 'Boolean | Optional | Indicates whether or not to Block the user from doing manual un-enrollment from device management.' EdgeBlockSearchEngineCustomization = 'Boolean | Optional | Indicates whether or not to block the user from adding new search engine or changing the default search engine.' PowerSleepButtonActionOnBattery = 'String | Optional | This setting specifies the action that Windows takes when a user presses the Sleep button while on battery. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown. | notConfigured / noAction / sleep / hibernate / shutdown' EdgeBlockSendingIntranetTrafficToInternetExplorer = 'Boolean | Optional | Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer. Note: the name of this property is misleading the property is obsolete, use EdgeSendIntranetTrafficToInternetExplorer instead.' EdgeBlockEditFavorites = 'Boolean | Optional | Indicates whether or not to Block the user from making changes to Favorites.' PasswordBlockSimple = 'Boolean | Optional | Specify whether PINs or passwords such as ''1111'' or ''1234'' are allowed. For Windows 10 desktops, it also controls the use of picture passwords.' StartMenuHideSignOut = 'Boolean | Optional | Enabling this policy hides sign out from appearing in the user tile in the start menu.' SearchBlockWebResults = 'Boolean | Optional | Indicates whether or not to block the web search.' CellularBlockDataWhenRoaming = 'Boolean | Optional | Whether or not to Block the user from using data over cellular while roaming.' StartMenuPinnedFolderPersonalFolder = 'String | Optional | Enforces the visibility (Show/Hide) of the PersonalFolder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' EnergySaverOnBatteryThresholdPercentage = 'UInt32 | Optional | This setting allows you to specify battery charge level at which Energy Saver is turned on. While on battery, Energy Saver is automatically turned on at (and below) the specified battery charge level. Valid input range (0-100). Valid values 0 to 100' StartMenuHideHibernate = 'Boolean | Optional | Enabling this policy hides hibernate from appearing in the power button in the start menu.' EdgePreventCertificateErrorOverride = 'Boolean | Optional | Allow or prevent users from overriding certificate errors.' PersonalizationLockScreenImageUrl = 'String | Optional | A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image.' DefenderCloudBlockLevel = 'String | Optional | Specifies the level of cloud-delivered protection. Possible values are: notConfigured, high, highPlus, zeroTolerance. | notConfigured / high / highPlus / zeroTolerance' AuthenticationPreferredAzureADTenantDomainName = 'String | Optional | Specifies the preferred domain among available domains in the Azure AD tenant.' WindowsStoreEnablePrivateStoreOnly = 'Boolean | Optional | Indicates whether or not to enable Private Store Only.' EdgeBlockCompatibilityList = 'Boolean | Optional | Block Microsoft compatibility list in Microsoft Edge. This list from Microsoft helps Edge properly display sites with known compatibility issues.' SearchEnableRemoteQueries = 'Boolean | Optional | Indicates whether or not to block remote queries of this computers index.' DefenderCloudExtendedTimeout = 'UInt32 | Optional | Timeout extension for file scanning by the cloud. Valid values 0 to 50' WirelessDisplayBlockUserInputFromReceiver = 'Boolean | Optional | Indicates whether or not to allow user input from wireless display receiver.' BluetoothBlockPromptedProximalConnections = 'Boolean | Optional | Whether or not to block the users from using Swift Pair and other proximity based scenarios.' SecurityBlockAzureADJoinedDevicesAutoEncryption = 'Boolean | Optional | Specify whether to allow automatic device encryption during OOBE when the device is Azure AD joined (desktop only).' EdgeBlockPrinting = 'Boolean | Optional | Configure Edge to allow or block printing.' EnterpriseCloudPrintMopriaDiscoveryResourceIdentifier = 'String | Optional | OAuth resource URI for printer discovery service as configured in Azure portal.' StartMenuPinnedFolderHomeGroup = 'String | Optional | Enforces the visibility (Show/Hide) of the HomeGroup folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' StartMenuMode = 'String | Optional | Allows admins to decide how the Start menu is displayed. Possible values are: userDefined, fullScreen, nonFullScreen. | userDefined / fullScreen / nonFullScreen' PowerButtonActionPluggedIn = 'String | Optional | This setting specifies the action that Windows takes when a user presses the Power button while plugged in. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown. | notConfigured / noAction / sleep / hibernate / shutdown' SettingsBlockEditDeviceName = 'Boolean | Optional | Indicates whether or not to block the user from editing the device name.' StartMenuPinnedFolderSettings = 'String | Optional | Enforces the visibility (Show/Hide) of the Settings folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' StartMenuPinnedFolderNetwork = 'String | Optional | Enforces the visibility (Show/Hide) of the Network folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' SmartScreenAppInstallControl = 'String | Optional | Added in Windows 10, version 1703. Allows IT Admins to control whether users are allowed to install apps from places other than the Store. Possible values are: notConfigured, anywhere, storeOnly, recommendations, preferStore. | notConfigured / anywhere / storeOnly / recommendations / preferStore' SettingsBlockGamingPage = 'Boolean | Optional | Indicates whether or not to block access to Gaming in Settings app.' SettingsBlockDevicesPage = 'Boolean | Optional | Indicates whether or not to block access to Devices in Settings app.' SettingsBlockUpdateSecurityPage = 'Boolean | Optional | Indicates whether or not to block access to Update & Security in Settings app.' WindowsSpotlightBlockConsumerSpecificFeatures = 'Boolean | Optional | Allows IT admins to block experiences that are typically for consumers only, such as Start suggestions, Membership notifications, Post-OOBE app install and redirect tiles.' EdgeOpensWith = 'String | Optional | Specify what kind of pages are open at start. Possible values are: notConfigured, startPage, newTabPage, previousPages, specificPages. | notConfigured / startPage / newTabPage / previousPages / specificPages' DefenderCloudExtendedTimeoutInSeconds = 'UInt32 | Optional | Timeout extension for file scanning by the cloud. Valid values 0 to 50' DefenderSignatureUpdateIntervalInHours = 'UInt32 | Optional | The signature update interval in hours. Specify 0 not to check. Valid values 0 to 24' WindowsSpotlightBlocked = 'Boolean | Optional | Allows IT admins to turn off all Windows Spotlight features' AppsBlockWindowsStoreOriginatedApps = 'Boolean | Optional | Indicates whether or not to disable the launch of all apps from Windows Store that came pre-installed or were downloaded.' SettingsBlockPrivacyPage = 'Boolean | Optional | Indicates whether or not to block access to Privacy in Settings app.' DefenderDetectedMalwareActions = @{ LowSeverity = 'String | Optional | Indicates a Defender action to take for low severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' SevereSeverity = 'String | Optional | Indicates a Defender action to take for severe severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' ModerateSeverity = 'String | Optional | Indicates a Defender action to take for moderate severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' HighSeverity = 'String | Optional | Indicates a Defender action to take for high severity Malware threat detected. Possible values are: deviceDefault, clean, quarantine, remove, allow, userDefined, block. | deviceDefault / clean / quarantine / remove / allow / userDefined / block' } StartMenuHideSleep = 'Boolean | Optional | Enabling this policy hides sleep from appearing in the power button in the start menu.' SettingsBlockChangeRegion = 'Boolean | Optional | Indicates whether or not to block the user from changing the region settings.' SettingsBlockSettingsApp = 'Boolean | Optional | Indicates whether or not to block access to Settings app.' EdgeFirstRunUrl = 'String | Optional | The first run URL for when Edge browser is opened for the first time.' CryptographyAllowFipsAlgorithmPolicy = 'Boolean | Optional | Specify whether to allow or disallow the Federal Information Processing Standard (FIPS) policy.' EdgeHomeButtonConfiguration = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.edgeHomeButtonHidden / #microsoft.graph.edgeHomeButtonLoadsStartPage / #microsoft.graph.edgeHomeButtonOpensCustomURL / #microsoft.graph.edgeHomeButtonOpensNewTab' HomeButtonCustomURL = 'String | Optional | The specific URL to load.' } SearchEnableAutomaticIndexSizeManangement = 'Boolean | Optional | Specifies minimum amount of hard drive space on the same drive as the index location before indexing stops.' DefenderProcessesToExclude = @( 'String | Optional | Processes to exclude from scans and real time protection.' ) BluetoothBlockAdvertising = 'Boolean | Optional | Whether or not to Block the user from using bluetooth advertising.' DefenderScheduledScanTime = 'String | Optional | The defender time for the system scan.' CellularData = 'String | Optional | Whether or not to allow the cellular data channel on the device. If not configured, the cellular data channel is allowed and the user can turn it off. Possible values are: blocked, required, allowed, notConfigured. | blocked / required / allowed / notConfigured' SearchDisableIndexingEncryptedItems = 'Boolean | Optional | Indicates whether or not to block indexing of WIP-protected items to prevent them from appearing in search results for Cortana or Explorer.' PasswordMinimumCharacterSetCount = 'UInt32 | Optional | The number of character sets required in the password.' SettingsBlockAppsPage = 'Boolean | Optional | Indicates whether or not to block access to Apps in Settings app.' ConfigureTimeZone = 'String | Optional | Specifies the time zone to be applied to the device. This is the standard Windows name for the target time zone.' StorageRestrictAppDataToSystemVolume = 'Boolean | Optional | Indicates whether application data is restricted to the system drive.' ExperienceBlockTaskSwitcher = 'Boolean | Optional | Indicates whether or not to enable task switching on the device.' SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' AppManagementMSIAlwaysInstallWithElevatedPrivileges = 'Boolean | Optional | This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system.' StartBlockUnpinningAppsFromTaskbar = 'Boolean | Optional | Indicates whether or not to block the user from unpinning apps from taskbar.' StartMenuHideUserTile = 'Boolean | Optional | Enabling this policy hides the user tile from appearing in the start menu.' MessagingBlockRichCommunicationServices = 'Boolean | Optional | Indicates whether or not to block the RCS send/receive functionality on the device.' CellularBlockVpnWhenRoaming = 'Boolean | Optional | Whether or not to Block the user from using VPN when roaming over cellular.' PasswordSignInFailureCountBeforeFactoryReset = 'UInt32 | Optional | The number of sign in failures before factory reset. Valid values 0 to 999' AccountsBlockAddingNonMicrosoftAccountEmail = 'Boolean | Optional | Indicates whether or not to Block the user from adding email accounts to the device that are not associated with a Microsoft account.' EdgeRequiredExtensionPackageFamilyNames = @( 'String | Optional | Specify the list of package family names of browser extensions that are required and cannot be turned off by the user.' ) EdgeFavoritesBarVisibility = 'String | Optional | Get or set a value that specifies whether to set the favorites bar to always be visible or hidden on any page. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' MicrosoftAccountBlockSettingsSync = 'Boolean | Optional | Indicates whether or not to Block Microsoft account settings sync.' UninstallBuiltInApps = 'Boolean | Optional | Indicates whether or not to uninstall a fixed list of built-in Windows apps.' StartMenuPinnedFolderFileExplorer = 'String | Optional | Enforces the visibility (Show/Hide) of the FileExplorer shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' EdgeBlockSendingDoNotTrackHeader = 'Boolean | Optional | Indicates whether or not to Block the user from sending the do not track header.' PasswordExpirationDays = 'UInt32 | Optional | The password expiration in days. Valid values 0 to 730' EdgeHomepageUrls = @( 'String | Optional | The list of URLs for homepages shodwn on MDM-enrolled devices on Edge browser.' ) StartMenuPinnedFolderPictures = 'String | Optional | Enforces the visibility (Show/Hide) of the Pictures folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' PasswordRequireWhenResumeFromIdleState = 'Boolean | Optional | Indicates whether or not to require a password upon resuming from an idle state.' WindowsStoreBlockAutoUpdate = 'Boolean | Optional | Indicates whether or not to block automatic update of apps from Windows Store.' DefenderScheduleScanEnableLowCpuPriority = 'Boolean | Optional | When enabled, low CPU priority will be used during scheduled scans.' EdgeBlockPrelaunch = 'Boolean | Optional | Decide whether Microsoft Edge is prelaunched at Windows startup.' MessagingBlockMMS = 'Boolean | Optional | Indicates whether or not to block the MMS send/receive functionality on the device.' WindowsStoreBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from using the Windows store.' WiFiBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from using Wi-Fi.' Description = 'String | Optional | Admin provided description of the Device Configuration.' CertificatesBlockManualRootCertificateInstallation = 'Boolean | Optional | Whether or not to Block the user from doing manual root certificate installation.' StartMenuPinnedFolderDocuments = 'String | Optional | Enforces the visibility (Show/Hide) of the Documents folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' EdgeSyncFavoritesWithInternetExplorer = 'Boolean | Optional | Enable favorites sync between Internet Explorer and Microsoft Edge. Additions, deletions, modifications and order changes to favorites are shared between browsers.' StartMenuLayoutEdgeAssetsXml = 'String | Optional | This policy setting allows you to import Edge assets to be used with startMenuLayoutXml policy. Start layout can contain secondary tile from Edge app which looks for Edge local asset file. Edge local asset would not exist and cause Edge secondary tile to appear empty in this case. This policy only gets applied when startMenuLayoutXml policy is modified. The value should be a UTF-8 Base64 encoded byte array.' EdgeBlockWebContentOnNewTabPage = 'Boolean | Optional | Configure to load a blank page in Edge instead of the default New tab page and prevent users from changing it.' EdgeFavoritesListLocation = 'String | Optional | The location of the favorites list to provision. Could be a local file, local network or http location.' DefenderPromptForSampleSubmission = 'String | Optional | The configuration for how to prompt user for sample submission. Possible values are: userDefined, alwaysPrompt, promptBeforeSendingPersonalData, neverSendData, sendAllDataWithoutPrompting. | userDefined / alwaysPrompt / promptBeforeSendingPersonalData / neverSendData / sendAllDataWithoutPrompting' DefenderDaysBeforeDeletingQuarantinedMalware = 'UInt32 | Optional | Number of days before deleting quarantined malware. Valid values 0 to 90' PrivacyBlockActivityFeed = 'Boolean | Optional | Blocks the usage of cloud based speech services for Cortana, Dictation, or Store applications.' StorageBlockRemovableStorage = 'Boolean | Optional | Indicates whether or not to Block the user from using removable storage.' LockScreenAllowTimeoutConfiguration = 'Boolean | Optional | Specify whether to show a user-configurable setting to control the screen timeout while on the lock screen of Windows 10 Mobile devices. If this policy is set to Allow, the value set by lockScreenTimeoutInSeconds is ignored.' EnterpriseCloudPrintDiscoveryMaxLimit = 'UInt32 | Optional | Maximum number of printers that should be queried from a discovery endpoint. This is a mobile only setting. Valid values 1 to 65535' WebRtcBlockLocalhostIpAddress = 'Boolean | Optional | Indicates whether or not user''s localhost IP address is displayed while making phone calls using the WebRTC' PrivacyDisableLaunchExperience = 'Boolean | Optional | This policy prevents the privacy experience from launching during user logon for new and upgraded users.' CameraBlocked = 'Boolean | Optional | Whether or not to Block the user from accessing the camera of the device.' SafeSearchFilter = 'String | Optional | Specifies what filter level of safe search is required. Possible values are: userDefined, strict, moderate. | userDefined / strict / moderate' SearchDisableIndexingRemovableDrive = 'Boolean | Optional | Indicates whether or not to allow users to add locations on removable drives to libraries and to be indexed.' SearchBlockDiacritics = 'Boolean | Optional | Specifies if search can use diacritics.' SettingsBlockRemoveProvisioningPackage = 'Boolean | Optional | Indicates whether or not to block the runtime configuration agent from removing provisioning packages.' StartMenuPinnedFolderDownloads = 'String | Optional | Enforces the visibility (Show/Hide) of the Downloads folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' NetworkProxyServer = @{ UseForLocalAddresses = 'Boolean | Optional | Specifies whether the proxy server should be used for local (intranet) addresses.' Exceptions = @( 'String | Optional | Addresses that should not use the proxy server. The system will not use the proxy server for addresses beginning with what is specified in this node.' ) Address = 'String | Optional | Address to the proxy server. Specify an address in the format '':''' } EdgeNewTabPageURL = 'String | Optional | Specify the page opened when new tabs are created.' EdgeBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from using the Edge browser.' PasswordRequiredType = 'String | Optional | The required password type. Possible values are: deviceDefault, alphanumeric, numeric. | deviceDefault / alphanumeric / numeric' DefenderSubmitSamplesConsentType = 'String | Optional | Checks for the user consent level in Windows Defender to send data. Possible values are: sendSafeSamplesAutomatically, alwaysPrompt, neverSend, sendAllSamplesAutomatically. | sendSafeSamplesAutomatically / alwaysPrompt / neverSend / sendAllSamplesAutomatically' StartMenuHideChangeAccountSettings = 'Boolean | Optional | Enabling this policy hides the change account setting from appearing in the user tile in the start menu.' PasswordMinimumLength = 'UInt32 | Optional | The minimum password length. Valid values 4 to 16' SettingsBlockSystemPage = 'Boolean | Optional | Indicates whether or not to block access to System in Settings app.' LocationServicesBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from location services.' NfcBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from using near field communication.' TenantLockdownRequireNetworkDuringOutOfBoxExperience = 'Boolean | Optional | Whether the device is required to connect to the network.' StartMenuHidePowerButton = 'Boolean | Optional | Enabling this policy hides the power button from appearing in the start menu.' EdgeEnterpriseModeSiteListLocation = 'String | Optional | Indicates the enterprise mode site list location. Could be a local file, local network or http location.' DefenderDisableCatchupFullScan = 'Boolean | Optional | When blocked, catch-up scans for scheduled full scans will be turned off.' DefenderScanScriptsLoadedInInternetExplorer = 'Boolean | Optional | Indicates whether or not to scan scripts loaded in Internet Explorer browser.' PrinterBlockAddition = 'Boolean | Optional | Prevent user installation of additional printers from printers settings.' PasswordMinutesOfInactivityBeforeScreenTimeout = 'UInt32 | Optional | The minutes of inactivity before the screen times out.' EdgeKioskResetAfterIdleTimeInMinutes = 'UInt32 | Optional | Specifies the time in minutes from the last user activity before Microsoft Edge kiosk resets. Valid values are 0-1440. The default is 5. 0 indicates no reset. Valid values 0 to 1440' DefenderScanRemovableDrivesDuringFullScan = 'Boolean | Optional | Indicates whether or not to scan removable drives during full scan.' MicrosoftAccountBlocked = 'Boolean | Optional | Indicates whether or not to Block a Microsoft account.' DiagnosticsDataSubmissionMode = 'String | Optional | Gets or sets a value allowing the device to send diagnostic and usage telemetry data, such as Watson. Possible values are: userDefined, none, basic, enhanced, full. | userDefined / none / basic / enhanced / full' SettingsBlockChangePowerSleep = 'Boolean | Optional | Indicates whether or not to block the user from changing power and sleep settings.' SharedUserAppDataAllowed = 'Boolean | Optional | Indicates whether or not to block multiple users of the same app to share data.' EdgeBlockPasswordManager = 'Boolean | Optional | Indicates whether or not to Block password manager.' WiFiScanInterval = 'UInt32 | Optional | Specify how often devices scan for Wi-Fi networks. Supported values are 1-500, where 100 = default, and 500 = low frequency. Valid values 1 to 500' DefenderBlockOnAccessProtection = 'Boolean | Optional | Allows or disallows Windows Defender On Access Protection functionality.' EdgeBlockTabPreloading = 'Boolean | Optional | Configure whether Edge preloads the new tab page at Windows startup.' CopyPasteBlocked = 'Boolean | Optional | Whether or not to Block the user from using copy paste.' DefenderScheduledQuickScanTime = 'String | Optional | The time to perform a daily quick scan.' VoiceRecordingBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from voice recording.' WindowsSpotlightBlockTailoredExperiences = 'Boolean | Optional | Block personalized content in Windows spotlight based on users device usage.' LockScreenBlockToastNotifications = 'Boolean | Optional | Indicates whether to allow toast notifications above the device lock screen.' Windows10AppsForceUpdateSchedule = @{ RunImmediatelyIfAfterStartDateTime = 'Boolean | Optional | If true, runs the task immediately if StartDateTime is in the past, else, runs at the next recurrence.' Recurrence = 'String | Optional | Recurrence schedule. Possible values are: none, daily, weekly, monthly. | none / daily / weekly / monthly' StartDateTime = 'String | Optional | The start time for the force restart.' } AppManagementMSIAllowUserControlOverInstall = 'Boolean | Optional | This policy setting permits users to change installation options that typically are available only to system administrators.' LockScreenActivateAppsWithVoice = 'String | Optional | This policy setting specifies whether Windows apps can be activated by voice while the system is locked. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' PrivacyAdvertisingId = 'String | Optional | Enables or disables the use of advertising ID. Added in Windows 10, version 1607. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' StartMenuHideLock = 'Boolean | Optional | Enabling this policy hides lock from appearing in the user tile in the start menu.' PrivacyBlockInputPersonalization = 'Boolean | Optional | Indicates whether or not to block the usage of cloud based speech services for Cortana, Dictation, or Store applications.' CellularBlockVpn = 'Boolean | Optional | Whether or not to Block the user from using VPN over cellular.' AppManagementPackageFamilyNamesToLaunchAfterLogOn = @( 'String | Optional | List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are to be launched after logon.' ) BluetoothBlockDiscoverableMode = 'Boolean | Optional | Whether or not to Block the user from using bluetooth discoverable mode.' DefenderFileExtensionsToExclude = @( 'String | Optional | File extensions to exclude from scans and real time protection.' ) WiFiBlockManualConfiguration = 'Boolean | Optional | Indicates whether or not to Block the user from using Wi-Fi manual configuration.' AntiTheftModeBlocked = 'Boolean | Optional | Indicates whether or not to block the user from selecting an AntiTheft mode preference (Windows 10 Mobile only).' PrinterNames = @( 'String | Optional | Automatically provision printers based on their names (network host names).' ) SettingsBlockChangeLanguage = 'Boolean | Optional | Indicates whether or not to block the user from changing the language settings.' ActivateAppsWithVoice = 'String | Optional | Specifies if Windows apps can be activated by voice. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' EdgeBlockInPrivateBrowsing = 'Boolean | Optional | Indicates whether or not to block InPrivate browsing on corporate networks, in the Edge browser.' WindowsSpotlightBlockThirdPartyNotifications = 'Boolean | Optional | Block third party content delivered via Windows Spotlight' DeveloperUnlockSetting = 'String | Optional | Indicates whether or not to allow developer unlock. Possible values are: notConfigured, blocked, allowed. | notConfigured / blocked / allowed' LockScreenTimeoutInSeconds = 'UInt32 | Optional | Set the duration (in seconds) from the screen locking to the screen turning off for Windows 10 Mobile devices. Supported values are 11-1800. Valid values 11 to 1800' AuthenticationWebSignIn = 'String | Optional | Indicates whether or not Web Credential Provider will be enabled. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' DefenderPotentiallyUnwantedAppActionSetting = 'String | Optional | Gets or sets Defenders action to take on Potentially Unwanted Application (PUA), which includes software with behaviors of ad-injection, software bundling, persistent solicitation for payment or subscription, etc. Defender alerts user when PUA is being downloaded or attempts to install itself. Added in Windows 10 for desktop. Possible values are: userDefined, enable, auditMode, warn, notConfigured. | userDefined / enable / auditMode / warn / notConfigured' Id = 'String | Optional | The unique identifier for an entity. Read-only.' SearchDisableIndexerBackoff = 'Boolean | Optional | Indicates whether or not to disable the search indexer backoff feature.' EnableAutomaticRedeployment = 'Boolean | Optional | Allow users with administrative rights to delete all user data and settings using CTRL + Win + R at the device lock screen so that the device can be automatically re-configured and re-enrolled into management.' SearchDisableLocation = 'Boolean | Optional | Specifies if search can use location information.' MicrosoftAccountSignInAssistantSettings = 'String | Optional | Controls the Microsoft Account Sign-In Assistant (wlidsvc) NT service. Possible values are: notConfigured, disabled. | notConfigured / disabled' StartMenuHideSwitchAccount = 'Boolean | Optional | Enabling this policy hides switch account from appearing in the user tile in the start menu.' DefenderBlockEndUserAccess = 'Boolean | Optional | Whether or not to block end user access to Defender.' EdgeBlockSearchSuggestions = 'Boolean | Optional | Indicates whether or not to block the user from using the search suggestions in the address bar.' DefenderRequireNetworkInspectionSystem = 'Boolean | Optional | Indicates whether or not to require network inspection system.' TaskManagerBlockEndTask = 'Boolean | Optional | Specify whether non-administrators can use Task Manager to end tasks.' SmartScreenBlockPromptOverrideForFiles = 'Boolean | Optional | Indicates whether or not users can override the SmartScreen Filter warnings about downloading unverified files' PowerLidCloseActionPluggedIn = 'String | Optional | This setting specifies the action that Windows takes when a user closes the lid on a mobile PC while plugged in. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown. | notConfigured / noAction / sleep / hibernate / shutdown' PowerHybridSleepOnBattery = 'String | Optional | This setting allows you to turn off hybrid sleep while on battery. If you set this setting to disable, a hiberfile is not generated when the system transitions to sleep (Stand By). If you set this setting to enable or do not configure this policy setting, users control this setting. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' DefenderFilesAndFoldersToExclude = @( 'String | Optional | Files and folder to exclude from scans and real time protection.' ) ResetProtectionModeBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from reset protection mode.' BluetoothAllowedServices = @( 'String | Optional | Specify a list of allowed Bluetooth services and profiles in hex formatted strings.' ) DefenderScanArchiveFiles = 'Boolean | Optional | Indicates whether or not to scan archive files.' DisplayAppListWithGdiDPIScalingTurnedOff = @( 'String | Optional | List of legacy applications that have GDI DPI Scaling turned off.' ) DefenderScanIncomingMail = 'Boolean | Optional | Indicates whether or not to scan incoming mail messages.' EdgeDisableFirstRunPage = 'Boolean | Optional | Block the Microsoft web page that opens on the first use of Microsoft Edge. This policy allows enterprises, like those enrolled in zero emissions configurations, to block this page.' LockScreenBlockCortana = 'Boolean | Optional | Indicates whether or not the user can interact with Cortana using speech while the system is locked.' StartMenuHideRecentlyAddedApps = 'Boolean | Optional | Enabling this policy hides recently added apps from appearing on the start menu and disables the corresponding toggle in the Settings app.' PowerButtonActionOnBattery = 'String | Optional | This setting specifies the action that Windows takes when a user presses the Power button while on battery. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown. | notConfigured / noAction / sleep / hibernate / shutdown' DefenderPotentiallyUnwantedAppAction = 'String | Optional | Gets or sets Defenders action to take on Potentially Unwanted Application (PUA), which includes software with behaviors of ad-injection, software bundling, persistent solicitation for payment or subscription, etc. Defender alerts user when PUA is being downloaded or attempts to install itself. Added in Windows 10 for desktop. Possible values are: deviceDefault, block, audit. | deviceDefault / block / audit' ScreenCaptureBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from taking Screenshots.' DeviceManagementBlockFactoryResetOnMobile = 'Boolean | Optional | Indicates whether or not to Block the user from resetting their phone.' EdgeBlockJavaScript = 'Boolean | Optional | Indicates whether or not to Block the user from using JavaScript.' EnterpriseCloudPrintDiscoveryEndPoint = 'String | Optional | Endpoint for discovering cloud printers.' DisplayName = 'String | Required | Admin provided name of the device configuration.' EdgeRequireSmartScreen = 'Boolean | Optional | Indicates whether or not to Require the user to use the smart screen filter.' AuthenticationAllowSecondaryDevice = 'Boolean | Optional | Allows secondary authentication devices to work with Windows.' PasswordMinimumAgeInDays = 'UInt32 | Optional | This security setting determines the period of time (in days) that a password must be used before the user can change it. Valid values 0 to 998' SettingsBlockNetworkInternetPage = 'Boolean | Optional | Indicates whether or not to block access to Network & Internet in Settings app.' UsbBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from USB connection.' SystemTelemetryProxyServer = 'String | Optional | Gets or sets the fully qualified domain name (FQDN) or IP address of a proxy server to forward Connected User Experiences and Telemetry requests.' OneDriveDisableFileSync = 'Boolean | Optional | Gets or sets a value allowing IT admins to prevent apps and features from working with files on OneDrive.' EnterpriseCloudPrintOAuthAuthority = 'String | Optional | Authentication endpoint for acquiring OAuth tokens.' StartMenuLayoutXml = 'String | Optional | Allows admins to override the default Start menu layout and prevents the user from changing it. The layout is modified by specifying an XML file based on a layout modification schema. XML needs to be in a UTF8 encoded byte array format.' DisplayAppListWithGdiDPIScalingTurnedOn = @( 'String | Optional | List of legacy applications that have GDI DPI Scaling turned on.' ) EdgeSendIntranetTrafficToInternetExplorer = 'Boolean | Optional | Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer.' WirelessDisplayBlockProjectionToThisDevice = 'Boolean | Optional | Indicates whether or not to allow other devices from discovering this PC for projection.' EdgeBlockLiveTileDataCollection = 'Boolean | Optional | Block the collection of information by Microsoft for live tile creation when users pin a site to Start from Microsoft Edge.' NetworkProxyApplySettingsDeviceWide = 'Boolean | Optional | If set, proxy settings will be applied to all processes and accounts in the device. Otherwise, it will be applied to the user account thats enrolled into MDM.' StartMenuHideRestartOptions = 'Boolean | Optional | Enabling this policy hides ''Restart/Update and Restart'' from appearing in the power button in the start menu.' SearchDisableAutoLanguageDetection = 'Boolean | Optional | Specifies whether to use automatic language detection when indexing content and properties.' EdgeAllowStartPagesModification = 'Boolean | Optional | Allow users to change Start pages on Edge. Use the EdgeHomepageUrls to specify the Start pages that the user would see by default when they open Edge.' PrinterDefaultName = 'String | Optional | Name (network host name) of an installed printer.' DefenderRequireRealTimeMonitoring = 'Boolean | Optional | Indicates whether or not to require real time monitoring.' EdgeBlockAutofill = 'Boolean | Optional | Indicates whether or not to block auto fill.' SettingsBlockAddProvisioningPackage = 'Boolean | Optional | Indicates whether or not to block the user from installing provisioning packages.' NetworkProxyDisableAutoDetect = 'Boolean | Optional | Disable automatic detection of settings. If enabled, the system will try to find the path to a proxy auto-config (PAC) script.' SearchDisableUseLocation = 'Boolean | Optional | Specifies if search can use location information.' LogonBlockFastUserSwitching = 'Boolean | Optional | Disables the ability to quickly switch between users that are logged on simultaneously without logging off.' PowerHybridSleepPluggedIn = 'String | Optional | This setting allows you to turn off hybrid sleep while plugged in. If you set this setting to disable, a hiberfile is not generated when the system transitions to sleep (Stand By). If you set this setting to enable or do not configure this policy setting, users control this setting. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' EdgeTelemetryForMicrosoft365Analytics = 'String | Optional | Specifies what type of telemetry data (none, intranet, internet, both) is sent to Microsoft 365 Analytics. Possible values are: notConfigured, intranet, internet, intranetAndInternet. | notConfigured / intranet / internet / intranetAndInternet' GameDvrBlocked = 'Boolean | Optional | Indicates whether or not to block DVR and broadcasting.' EdgeClearBrowsingDataOnExit = 'Boolean | Optional | Clear browsing data on exiting Microsoft Edge.' EdgeBlockSideloadingExtensions = 'Boolean | Optional | Indicates whether the user can sideload extensions.' DefenderScanType = 'String | Optional | The defender system scan type. Possible values are: userDefined, disabled, quick, full. | userDefined / disabled / quick / full' InkWorkspaceBlockSuggestedApps = 'Boolean | Optional | Specify whether to show recommended app suggestions in the ink workspace.' EnterpriseCloudPrintOAuthClientIdentifier = 'String | Optional | GUID of a client application authorized to retrieve OAuth tokens from the OAuth Authority.' SmartScreenBlockPromptOverride = 'Boolean | Optional | Indicates whether or not users can override SmartScreen Filter warnings about potentially malicious websites.' DefenderScanMappedNetworkDrivesDuringFullScan = 'Boolean | Optional | Indicates whether or not to scan mapped network drives during full scan.' EnergySaverPluggedInThresholdPercentage = 'UInt32 | Optional | This setting allows you to specify battery charge level at which Energy Saver is turned on. While plugged in, Energy Saver is automatically turned on at (and below) the specified battery charge level. Valid input range (0-100). Valid values 0 to 100' SettingsBlockAccountsPage = 'Boolean | Optional | Indicates whether or not to block access to Accounts in Settings app.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) StorageRestrictAppInstallToSystemVolume = 'Boolean | Optional | Indicates whether the installation of applications is restricted to the system drive.' StartMenuHideShutDown = 'Boolean | Optional | Enabling this policy hides shut down/update and shut down from appearing in the power button in the start menu.' WindowsSpotlightBlockWelcomeExperience = 'Boolean | Optional | Block Windows Spotlight Windows welcome experience' DefenderMonitorFileActivity = 'String | Optional | Value for monitoring file activity. Possible values are: userDefined, disable, monitorAllFiles, monitorIncomingFilesOnly, monitorOutgoingFilesOnly. | userDefined / disable / monitorAllFiles / monitorIncomingFilesOnly / monitorOutgoingFilesOnly' PrivacyBlockPublishUserActivities = 'Boolean | Optional | Blocks the shared experiences/discovery of recently used resources in task switcher etc.' DefenderScanDownloads = 'Boolean | Optional | Indicates whether or not to scan downloads.' WindowsSpotlightBlockOnActionCenter = 'Boolean | Optional | Block suggestions from Microsoft that show after each OS clean install, upgrade or in an on-going basis to introduce users to what is new or changed' SettingsBlockTimeLanguagePage = 'Boolean | Optional | Indicates whether or not to block access to Time & Language in Settings app.' EdgeBlockPopups = 'Boolean | Optional | Indicates whether or not to block popups.' PrivacyAutoAcceptPairingAndConsentPrompts = 'Boolean | Optional | Indicates whether or not to allow the automatic acceptance of the pairing and privacy user consent dialog when launching apps.' StartMenuPinnedFolderVideos = 'String | Optional | Enforces the visibility (Show/Hide) of the Videos folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. | notConfigured / hide / show' EdgeShowMessageWhenOpeningInternetExplorerSites = 'String | Optional | Controls the message displayed by Edge before switching to Internet Explorer. Possible values are: notConfigured, disabled, enabled, keepGoing. | notConfigured / disabled / enabled / keepGoing' WiFiBlockAutomaticConnectHotspots = 'Boolean | Optional | Indicating whether or not to block automatically connecting to Wi-Fi hotspots. Has no impact if Wi-Fi is blocked.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DefenderRequireBehaviorMonitoring = 'Boolean | Optional | Indicates whether or not to require behavior monitoring.' WindowsSpotlightBlockWindowsTips = 'Boolean | Optional | Allows IT admins to turn off the popup of Windows Tips.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DefenderSystemScanSchedule = 'String | Optional | Defender day of the week for the system scan. Possible values are: userDefined, everyday, sunday, monday, tuesday, wednesday, thursday, friday, saturday, noScheduledScan. | userDefined / everyday / sunday / monday / tuesday / wednesday / thursday / friday / saturday / noScheduledScan' SettingsBlockPersonalizationPage = 'Boolean | Optional | Indicates whether or not to block access to Personalization in Settings app.' PersonalizationDesktopImageUrl = 'String | Optional | A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Desktop Image or a file Url to a local image on the file system that needs to used as the Desktop Image.' EdgeHomeButtonConfigurationEnabled = 'Boolean | Optional | Enable the Home button configuration.' DefenderRequireCloudProtection = 'Boolean | Optional | Indicates whether or not to require cloud protection.' NetworkProxyAutomaticConfigurationUrl = 'String | Optional | Address to the proxy auto-config (PAC) script you want to use.' WirelessDisplayRequirePinForPairing = 'Boolean | Optional | Indicates whether or not to require a PIN for new devices to initiate pairing.' PasswordPreviousPasswordBlockCount = 'UInt32 | Optional | The number of previous passwords to prevent reuse of. Valid values 0 to 50' InternetSharingBlocked = 'Boolean | Optional | Indicates whether or not to Block the user from using internet sharing.' PowerSleepButtonActionPluggedIn = 'String | Optional | This setting specifies the action that Windows takes when a user presses the Sleep button while plugged in. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown. | notConfigured / noAction / sleep / hibernate / shutdown' BluetoothBlockPrePairing = 'Boolean | Optional | Whether or not to block specific bundled Bluetooth peripherals to automatically pair with the host device.' StartMenuHideFrequentlyUsedApps = 'Boolean | Optional | Enabling this policy hides the most used apps from appearing on the start menu and disables the corresponding toggle in the Settings app.' FindMyFiles = 'String | Optional | Controls if the user can configure search to Find My Files mode, which searches files in secondary hard drives and also outside of the user profile. Find My Files does not allow users to search files or locations to which they do not have access. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' EdgeCookiePolicy = 'String | Optional | Indicates which cookies to block in the Edge browser. Possible values are: userDefined, allow, blockThirdParty, blockAll. | userDefined / allow / blockThirdParty / blockAll' EdgeBlockAddressBarDropdown = 'Boolean | Optional | Block the address bar dropdown functionality in Microsoft Edge. Disable this settings to minimize network connections from Microsoft Edge to Microsoft services.' EdgeBlockExtensions = 'Boolean | Optional | Indicates whether or not to block extensions in the Edge browser.' ConnectedDevicesServiceBlocked = 'Boolean | Optional | Whether or not to block Connected Devices Service which enables discovery and connection to other devices, remote messaging, remote app sessions and other cross-device experiences.' StorageRequireMobileDeviceEncryption = 'Boolean | Optional | Indicating whether or not to require encryption on a mobile device.' EdgeBlockSavingHistory = 'Boolean | Optional | Configure Edge to allow browsing history to be saved or to never save browsing history.' SettingsBlockEaseOfAccessPage = 'Boolean | Optional | Indicates whether or not to block access to Ease of Access in Settings app.' EdgeSearchEngine = @{ EdgeSearchEngineOpenSearchXmlUrl = 'String | Optional | Points to a https link containing the OpenSearch xml file that contains, at minimum, the short name and the URL to the search Engine.' EdgeSearchEngineType = 'String | Optional | Allows IT admins to set a predefined default search engine for MDM-Controlled devices. Possible values are: default, bing. | default / bing' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.edgeSearchEngine / #microsoft.graph.edgeSearchEngineCustom' } } ) DeviceConfigurationSCEPCertificatePoliciesWindows10 = @( @{ SubjectAlternativeNameType = 'String | Optional | Certificate Subject Alternative Name Type. Possible values are: none, emailAddress, userPrincipalName, customAzureADAttribute, domainNameService, universalResourceIdentifier. | none / emailAddress / userPrincipalName / customAzureADAttribute / domainNameService / universalResourceIdentifier' Id = 'String | Optional | The unique identifier for an entity. Read-only.' KeyUsage = @( 'String | Optional | SCEP Key Usage. Possible values are: keyEncipherment, digitalSignature. | keyEncipherment / digitalSignature' ) DisplayName = 'String | Required | Admin provided name of the device configuration.' SubjectAlternativeNameFormatString = 'String | Optional | Custom String that defines the AAD Attribute.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CustomSubjectAlternativeNames = @( @{ Name = 'String | Optional | Custom SAN Name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SanType = 'String | Optional | Custom SAN Type. Possible values are: none, emailAddress, userPrincipalName, customAzureADAttribute, domainNameService, universalResourceIdentifier. | none / emailAddress / userPrincipalName / customAzureADAttribute / domainNameService / universalResourceIdentifier' } ) RootCertificateDisplayName = 'String | Optional | Trusted Root Certificate DisplayName' ScepServerUrls = @( 'String | Optional | SCEP Server Url(s).' ) RootCertificateId = 'String | Optional | Trusted Root Certificate Id' CertificateValidityPeriodValue = 'UInt32 | Optional | Value for the Certificate Validity Period' CertificateValidityPeriodScale = 'String | Optional | Scale for the Certificate Validity Period. Possible values are: days, months, years. | days / months / years' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' KeyStorageProvider = 'String | Optional | Key Storage Provider (KSP). Possible values are: useTpmKspOtherwiseUseSoftwareKsp, useTpmKspOtherwiseFail, usePassportForWorkKspOtherwiseFail, useSoftwareKsp. | useTpmKspOtherwiseUseSoftwareKsp / useTpmKspOtherwiseFail / usePassportForWorkKspOtherwiseFail / useSoftwareKsp' HashAlgorithm = 'String | Optional | SCEP Hash Algorithm. Possible values are: sha1, sha2. | sha1 / sha2' RenewalThresholdPercentage = 'UInt32 | Optional | Certificate renewal threshold percentage. Valid values 1 to 99' KeySize = 'String | Optional | SCEP Key Size. Possible values are: size1024, size2048, size4096. | size1024 / size2048 / size4096' Description = 'String | Optional | Admin provided description of the Device Configuration.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) SubjectNameFormat = 'String | Optional | Certificate Subject Name Format. Possible values are: commonName, commonNameIncludingEmail, commonNameAsEmail, custom, commonNameAsIMEI, commonNameAsSerialNumber, commonNameAsAadDeviceId, commonNameAsIntuneDeviceId, commonNameAsDurableDeviceId. | commonName / commonNameIncludingEmail / commonNameAsEmail / custom / commonNameAsIMEI / commonNameAsSerialNumber / commonNameAsAadDeviceId / commonNameAsIntuneDeviceId / commonNameAsDurableDeviceId' CertificateStore = 'String | Optional | Target store certificate. Possible values are: user, machine. | user / machine' ExtendedKeyUsages = @( @{ ObjectIdentifier = 'String | Optional | Extended Key Usage Object Identifier' Name = 'String | Optional | Extended Key Usage Name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) SubjectNameFormatString = 'String | Optional | Custom format to use with SubjectNameFormat = Custom. Example: CN={{UserName}},E={{EmailAddress}},OU=Enterprise Users,O=Contoso Corporation,L=Redmond,ST=WA,C=US' } ) DeviceConfigurationSecureAssessmentPoliciesWindows10 = @( @{ AllowScreenCapture = 'Boolean | Optional | Indicates whether or not to allow screen capture capability during a test.' Description = 'String | Optional | Admin provided description of the Device Configuration.' DisplayName = 'String | Required | Admin provided name of the device configuration.' AllowTextSuggestion = 'Boolean | Optional | Indicates whether or not to allow text suggestions during the test.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AssessmentAppUserModelId = 'String | Optional | Specifies the application user model ID of the assessment app launched when a user signs in to a secure assessment with a local guest account. Important notice: this property must be set with localGuestAccountName in order to make the local guest account sign-in experience work properly for secure assessments.' ConfigurationAccountType = 'String | Optional | The account type used to by ConfigurationAccount. Possible values are: azureADAccount, domainAccount, localAccount, localGuestAccount. | azureADAccount / domainAccount / localAccount / localGuestAccount' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' LaunchUri = 'String | Optional | Url link to an assessment that''s automatically loaded when the secure assessment browser is launched. It has to be a valid Url (https://msdn.microsoft.com/).' LocalGuestAccountName = 'String | Optional | Specifies the display text for the local guest account shown on the sign-in screen. Typically is the name of an assessment. When the user clicks the local guest account on the sign-in screen, an assessment app is launched with a specified assessment URL. Secure assessments can only be configured with local guest account sign-in on devices running Windows 10, version 1903 or later. Important notice: this property must be set with assessmentAppUserModelID in order to make the local guest account sign-in experience work properly for secure assessments.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' ConfigurationAccount = 'String | Optional | The account used to configure the Windows device for taking the test. The user can be a domain account (domain/user), an AAD account (usernametenant.com) or a local account (username).' AllowPrinting = 'Boolean | Optional | Indicates whether or not to allow the app from printing during the test.' } ) DeviceConfigurationSharedMultiDevicePoliciesWindows10 = @( @{ MaintenanceStartTime = 'String | Optional | Specifies the daily start time of maintenance hour.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' IdleTimeBeforeSleepInSeconds = 'UInt32 | Optional | Specifies the time in seconds that a device must sit idle before the PC goes to sleep. Setting this value to 0 prevents the sleep timeout from occurring.' SignInOnResume = 'String | Optional | Specifies the requirement to sign in whenever the device wakes up from sleep mode. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' DisplayName = 'String | Required | Admin provided name of the device configuration.' KioskAppDisplayName = 'String | Optional | Specifies the display text for the account shown on the sign-in screen which launches the app specified by SetKioskAppUserModelId. Only applies when KioskAppUserModelId is set.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowLocalStorage = 'Boolean | Optional | Specifies whether local storage is allowed on a shared PC.' SetPowerPolicies = 'String | Optional | Specifies whether the default shared PC power policies should be enabled/disabled. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' AllowedAccounts = @( 'String | Optional | Indicates which type of accounts are allowed to use on a shared PC. Possible values are: notConfigured, guest, domain. | notConfigured / guest / domain' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' KioskAppUserModelId = 'String | Optional | Specifies the application user model ID of the app to use with assigned access.' DisablePowerPolicies = 'Boolean | Optional | Specifies whether the default shared PC power policies should be disabled.' SetEduPolicies = 'String | Optional | Specifies whether the default shared PC education environment policies should be enabled/disabled/not configured. For Windows 10 RS2 and later, this policy will be applied without setting Enabled to true. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' DisableSignInOnResume = 'Boolean | Optional | Disables the requirement to sign in whenever the device wakes up from sleep mode.' Description = 'String | Optional | Admin provided description of the Device Configuration.' AccountManagerPolicy = @{ InactiveThresholdDays = 'UInt32 | Optional | Specifies when the accounts will start being deleted when they have not been logged on during the specified period, given as number of days. Only applies when AccountDeletionPolicy is DiskSpaceThreshold or DiskSpaceThresholdOrInactiveThreshold.' CacheAccountsAboveDiskFreePercentage = 'UInt32 | Optional | Sets the percentage of available disk space a PC should have before it stops deleting cached shared PC accounts. Only applies when AccountDeletionPolicy is DiskSpaceThreshold or DiskSpaceThresholdOrInactiveThreshold. Valid values 0 to 100' AccountDeletionPolicy = 'String | Optional | Configures when accounts are deleted. Possible values are: immediate, diskSpaceThreshold, diskSpaceThresholdOrInactiveThreshold. | immediate / diskSpaceThreshold / diskSpaceThresholdOrInactiveThreshold' RemoveAccountsBelowDiskFreePercentage = 'UInt32 | Optional | Sets the percentage of disk space remaining on a PC before cached accounts will be deleted to free disk space. Accounts that have been inactive the longest will be deleted first. Only applies when AccountDeletionPolicy is DiskSpaceThresholdOrInactiveThreshold. Valid values 0 to 100' } Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisableAccountManager = 'Boolean | Optional | Disables the account manager for shared PC mode.' Enabled = 'Boolean | Optional | Enables shared PC mode and applies the shared pc policies.' DisableEduPolicies = 'Boolean | Optional | Specifies whether the default shared PC education environment policies should be disabled. For Windows 10 RS2 and later, this policy will be applied without setting Enabled to true.' FastFirstSignIn = 'String | Optional | Specifies whether to auto connect new non-admin Azure AD accounts to pre-configured candidate local accounts. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' LocalStorage = 'String | Optional | Specifies whether local storage is allowed on a shared PC. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' SetAccountManager = 'String | Optional | Disables the account manager for shared PC mode. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' } ) DeviceConfigurationTrustedCertificatePoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' DestinationStore = 'String | Optional | Destination store location for the Trusted Root Certificate. Possible values are: computerCertStoreRoot, computerCertStoreIntermediate, userCertStoreIntermediate. | computerCertStoreRoot / computerCertStoreIntermediate / userCertStoreIntermediate' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Admin provided description of the Device Configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TrustedRootCertificate = 'String | Optional | Trusted Root Certificate' CertFileName = 'String | Optional | File name to display in UI.' DisplayName = 'String | Required | Admin provided name of the device configuration.' } ) DeviceConfigurationVpnPoliciesWindows10 = @( @{ Description = 'String | Optional | Admin provided description of the Device Configuration.' RememberUserCredentials = 'Boolean | Optional | Remember user credentials.' ProfileTarget = 'String | Optional | Profile target type. Possible values are: user, device, autoPilotDevice. | user / device / autoPilotDevice' SingleSignOnIssuerHash = 'String | Optional | Single sign-on issuer hash.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) CustomXml = 'String | Optional | Custom XML commands that configures the VPN connection. (UTF8 encoded byte array)' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TrustedNetworkDomains = @( 'String | Optional | Trusted Network Domains' ) CryptographySuite = @{ CipherTransformConstants = 'String | Optional | Cipher Transform Constants. Possible values are: aes256, des, tripleDes, aes128, aes128Gcm, aes256Gcm, aes192, aes192Gcm, chaCha20Poly1305. | aes256 / des / tripleDes / aes128 / aes128Gcm / aes256Gcm / aes192 / aes192Gcm / chaCha20Poly1305' EncryptionMethod = 'String | Optional | Encryption Method. Possible values are: aes256, des, tripleDes, aes128, aes128Gcm, aes256Gcm, aes192, aes192Gcm, chaCha20Poly1305. | aes256 / des / tripleDes / aes128 / aes128Gcm / aes256Gcm / aes192 / aes192Gcm / chaCha20Poly1305' PfsGroup = 'String | Optional | Perfect Forward Secrecy Group. Possible values are: pfs1, pfs2, pfs2048, ecp256, ecp384, pfsMM, pfs24. | pfs1 / pfs2 / pfs2048 / ecp256 / ecp384 / pfsMM / pfs24' DhGroup = 'String | Optional | Diffie Hellman Group. Possible values are: group1, group2, group14, ecp256, ecp384, group24. | group1 / group2 / group14 / ecp256 / ecp384 / group24' IntegrityCheckMethod = 'String | Optional | Integrity Check Method. Possible values are: sha2_256, sha1_96, sha1_160, sha2_384, sha2_512, md5. | sha2_256 / sha1_96 / sha1_160 / sha2_384 / sha2_512 / md5' AuthenticationTransformConstants = 'String | Optional | Authentication Transform Constants. Possible values are: md5_96, sha1_96, sha_256_128, aes128Gcm, aes192Gcm, aes256Gcm. | md5_96 / sha1_96 / sha_256_128 / aes128Gcm / aes192Gcm / aes256Gcm' } OnlyAssociatedAppsCanUseConnection = 'Boolean | Optional | Only associated Apps can use connection (per-app VPN).' SingleSignOnEku = @{ ObjectIdentifier = 'String | Optional | Extended Key Usage Object Identifier' Name = 'String | Optional | Extended Key Usage Name' } AuthenticationMethod = 'String | Optional | Authentication method. Possible values are: certificate, usernameAndPassword, customEapXml, derivedCredential. | certificate / usernameAndPassword / customEapXml / derivedCredential' MicrosoftTunnelSiteId = 'String | Optional | ID of the Microsoft Tunnel site associated with the VPN profile.' Routes = @( @{ PrefixSize = 'UInt32 | Optional | Prefix size. (1-32). Valid values 1 to 32' DestinationPrefix = 'String | Optional | Destination prefix (IPv4/v6 address).' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) EapXml = 'String | Optional | Extensible Authentication Protocol (EAP) XML. (UTF8 encoded byte array)' AssociatedApps = @( @{ AppType = 'String | Optional | Application type. Possible values are: desktop, universal. | desktop / universal' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Identifier = 'String | Optional | Identifier.' } ) EnableSplitTunneling = 'Boolean | Optional | Enable split tunneling.' EnableConditionalAccess = 'Boolean | Optional | Enable conditional access.' DnsSuffixes = @( 'String | Optional | Specify DNS suffixes to add to the DNS search list to properly route short names.' ) ProxyServer = @{ BypassProxyServerForLocalAddress = 'Boolean | Optional | Bypass proxy server for local address.' Address = 'String | Optional | Address.' AutomaticConfigurationScriptUrl = 'String | Optional | Proxy''s automatic configuration script url.' AutomaticallyDetectProxySettings = 'Boolean | Optional | Automatically detect proxy settings.' Port = 'UInt32 | Optional | Port. Valid values 0 to 65535' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windows10VpnProxyServer / #microsoft.graph.windows81VpnProxyServer' } ServerCollection = @( @{ IsDefaultServer = 'Boolean | Optional | Default server.' Description = 'String | Optional | Description.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Address = 'String | Optional | Address (IP address, FQDN or URL)' } ) EnableDeviceTunnel = 'Boolean | Optional | Enable device tunnel.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' TrafficRules = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Name = 'String | Optional | Name.' AppId = 'String | Optional | App identifier, if this traffic rule is triggered by an app.' LocalPortRanges = @( @{ LowerNumber = 'UInt32 | Optional | Lower number.' UpperNumber = 'UInt32 | Optional | Upper number.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) AppType = 'String | Optional | App type, if this traffic rule is triggered by an app. Possible values are: none, desktop, universal. | none / desktop / universal' LocalAddressRanges = @( @{ CidrAddress = 'String | Optional | IPv4 address in CIDR notation. Not nullable.' UpperAddress = 'String | Optional | Upper address.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' LowerAddress = 'String | Optional | Lower address.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.iPv4CidrRange / #microsoft.graph.iPv6CidrRange / #microsoft.graph.iPv4Range / #microsoft.graph.iPv6Range' } ) RemotePortRanges = @( @{ LowerNumber = 'UInt32 | Optional | Lower number.' UpperNumber = 'UInt32 | Optional | Upper number.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) RemoteAddressRanges = @( @{ CidrAddress = 'String | Optional | IPv4 address in CIDR notation. Not nullable.' UpperAddress = 'String | Optional | Upper address.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' LowerAddress = 'String | Optional | Lower address.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.iPv4CidrRange / #microsoft.graph.iPv6CidrRange / #microsoft.graph.iPv4Range / #microsoft.graph.iPv6Range' } ) Claims = 'String | Optional | Claims associated with this traffic rule.' Protocols = 'UInt32 | Optional | Protocols (0-255). Valid values 0 to 255' RoutingPolicyType = 'String | Optional | When app triggered, indicates whether to enable split tunneling along this route. Possible values are: none, splitTunnel, forceTunnel. | none / splitTunnel / forceTunnel' VpnTrafficDirection = 'String | Optional | Specify whether the rule applies to inbound traffic or outbound traffic. Possible values are: outbound, inbound, unknownFutureValue. | outbound / inbound / unknownFutureValue' } ) EnableDnsRegistration = 'Boolean | Optional | Enable IP address registration with internal DNS.' ConnectionType = 'String | Optional | Connection type. Possible values are: pulseSecure, f5EdgeClient, dellSonicWallMobileConnect, checkPointCapsuleVpn, automatic, ikEv2, l2tp, pptp, citrix, paloAltoGlobalProtect, ciscoAnyConnect, unknownFutureValue, microsoftTunnel. | pulseSecure / f5EdgeClient / dellSonicWallMobileConnect / checkPointCapsuleVpn / automatic / ikEv2 / l2tp / pptp / citrix / paloAltoGlobalProtect / ciscoAnyConnect / unknownFutureValue / microsoftTunnel' EnableAlwaysOn = 'Boolean | Optional | Enable Always On mode.' WindowsInformationProtectionDomain = 'String | Optional | Windows Information Protection (WIP) domain to associate with this connection.' EnableSingleSignOnWithAlternateCertificate = 'Boolean | Optional | Enable single sign-on (SSO) with alternate certificate.' ConnectionName = 'String | Optional | Connection name displayed to the user.' DnsRules = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Persistent = 'Boolean | Optional | Keep this rule active even when the VPN is not connected: Default False' Servers = @( 'String | Optional | Servers.' ) Name = 'String | Optional | Name.' AutoTrigger = 'Boolean | Optional | Automatically connect to the VPN when the device connects to this domain: Default False.' ProxyServerUri = 'String | Optional | Proxy Server Uri.' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' } ) DeviceConfigurationWindowsTeamPoliciesWindows10 = @( @{ Description = 'String | Optional | Admin provided description of the Device Configuration.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) WelcomeScreenMeetingInformation = 'String | Optional | The welcome screen meeting information shown. Possible values are: userDefined, showOrganizerAndTimeOnly, showOrganizerAndTimeAndSubject. | userDefined / showOrganizerAndTimeOnly / showOrganizerAndTimeAndSubject' SettingsBlockSigninSuggestions = 'Boolean | Optional | Specifies whether to disable auto-populating of the sign-in dialog with invitees from scheduled meetings.' DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SupportsScopeTags = 'Boolean | Optional | Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.' WelcomeScreenBackgroundImageUrl = 'String | Optional | The welcome screen background image URL. The URL must use the HTTPS protocol and return a PNG image.' AzureOperationalInsightsWorkspaceKey = 'String | Optional | The Azure Operational Insights Workspace key.' SettingsBlockSessionResume = 'Boolean | Optional | Specifies whether to allow the ability to resume a session when the session times out.' SettingsDefaultVolume = 'UInt32 | Optional | Specifies the default volume value for a new session. Permitted values are 0-100. The default is 45. Valid values 0 to 100' WelcomeScreenBlockAutomaticWakeUp = 'Boolean | Optional | Indicates whether or not to Block the welcome screen from waking up automatically when someone enters the room.' MaintenanceWindowDurationInHours = 'UInt32 | Optional | Maintenance window duration for device updates. Valid values 0 to 5' MiracastRequirePin = 'Boolean | Optional | Indicates whether or not to require a pin for wireless projection.' MiracastBlocked = 'Boolean | Optional | Indicates whether or not to Block wireless projection.' SettingsSessionTimeoutInMinutes = 'UInt32 | Optional | Specifies the number of minutes until the session times out.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' MiracastChannel = 'String | Optional | The channel. Possible values are: userDefined, one, two, three, four, five, six, seven, eight, nine, ten, eleven, thirtySix, forty, fortyFour, fortyEight, oneHundredFortyNine, oneHundredFiftyThree, oneHundredFiftySeven, oneHundredSixtyOne, oneHundredSixtyFive. | userDefined / one / two / three / four / five / six / seven / eight / nine / ten / eleven / thirtySix / forty / fortyFour / fortyEight / oneHundredFortyNine / oneHundredFiftyThree / oneHundredFiftySeven / oneHundredSixtyOne / oneHundredSixtyFive' Id = 'String | Optional | The unique identifier for an entity. Read-only.' MaintenanceWindowStartTime = 'String | Optional | Maintenance window start time for device updates.' ConnectAppBlockAutoLaunch = 'Boolean | Optional | Specifies whether to automatically launch the Connect app whenever a projection is initiated.' AzureOperationalInsightsWorkspaceId = 'String | Optional | The Azure Operational Insights workspace id.' MaintenanceWindowBlocked = 'Boolean | Optional | Indicates whether or not to Block setting a maintenance window for device updates.' SettingsScreenTimeoutInMinutes = 'UInt32 | Optional | Specifies the number of minutes until the Hub screen turns off.' SettingsSleepTimeoutInMinutes = 'UInt32 | Optional | Specifies the number of minutes until the Hub enters sleep mode.' AzureOperationalInsightsBlockTelemetry = 'Boolean | Optional | Indicates whether or not to Block Azure Operational Insights.' SettingsBlockMyMeetingsAndFiles = 'Boolean | Optional | Specifies whether to disable the ''My meetings and files'' feature in the Start menu, which shows the signed-in user''s meetings and files from Office 365.' } ) DeviceConfigurationWiredNetworkPoliciesWindows10 = @( @{ SecondaryIdentityCertificateForClientAuthenticationId = 'String | Optional | Specify root certificate for client validation' InnerAuthenticationProtocolForEAPTTLS = 'String | Optional | Specify inner authentication protocol for EAP TTLS. Possible values are: unencryptedPassword, challengeHandshakeAuthenticationProtocol, microsoftChap, microsoftChapVersionTwo. Possible values are: unencryptedPassword, challengeHandshakeAuthenticationProtocol, microsoftChap, microsoftChapVersionTwo. | unencryptedPassword / challengeHandshakeAuthenticationProtocol / microsoftChap / microsoftChapVersionTwo' Description = 'String | Optional | Admin provided description of the Device Configuration.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisableUserPromptForServerValidation = 'Boolean | Optional | When TRUE, prevents the user from being prompted to authorize new servers for trusted certification authorities when EAP type is selected as PEAP. When FALSE, does not prevent the user from being prompted. Default value is FALSE.' RootCertificateForClientValidationId = 'String | Optional | Specify root certificate for client validation.' MaximumEAPOLStartMessages = 'UInt32 | Optional | Specify the maximum number of EAPOL (Extensible Authentication Protocol over LAN) Start messages to be sent before returning failure. Valid range 1-100.' AuthenticationPeriodInSeconds = 'UInt32 | Optional | Specify the number of seconds for the client to wait after an authentication attempt before failing. Valid range 1-3600.' AuthenticationBlockPeriodInMinutes = 'UInt32 | Optional | Specify the duration for which automatic authentication attempts will be blocked from occuring after a failed authentication attempt.' AuthenticationMethod = 'String | Optional | Specify the authentication method. Possible values are: certificate, usernameAndPassword, derivedCredential. Possible values are: certificate, usernameAndPassword, derivedCredential, unknownFutureValue. | certificate / usernameAndPassword / derivedCredential / unknownFutureValue' PerformServerValidation = 'Boolean | Optional | When TRUE, enables verification of server''s identity by validating the certificate when EAP type is selected as PEAP. When FALSE, the certificate is not validated. Default value is TRUE.' RequireCryptographicBinding = 'Boolean | Optional | When TRUE, enables cryptographic binding when EAP type is selected as PEAP. When FALSE, does not enable cryptogrpahic binding. Default value is TRUE.' RootCertificateForClientValidationDisplayName = 'String | Optional | Specify root certificate display name for client validation.' SecondaryAuthenticationMethod = 'String | Optional | Specify the secondary authentication method. Possible values are: certificate, usernameAndPassword, derivedCredential. Possible values are: certificate, usernameAndPassword, derivedCredential, unknownFutureValue. | certificate / usernameAndPassword / derivedCredential / unknownFutureValue' ForceFIPSCompliance = 'Boolean | Optional | When TRUE, forces FIPS compliance. When FALSE, does not enable FIPS compliance. Default value is FALSE.' MaximumAuthenticationFailures = 'UInt32 | Optional | Specify the maximum authentication failures allowed for a set of credentials. Valid range 1-100.' AuthenticationRetryDelayPeriodInSeconds = 'UInt32 | Optional | Specify the number of seconds between a failed authentication and the next authentication attempt. Valid range 1-3600.' EapolStartPeriodInSeconds = 'UInt32 | Optional | Specify the number of seconds to wait before sending an EAPOL (Extensible Authentication Protocol over LAN) Start message. Valid range 1-3600.' TrustedServerCertificateNames = @( 'String | Optional | Specify trusted server certificate names.' ) SecondaryRootCertificateForClientValidationDisplayName = 'String | Optional | Specify secondary root certificate display name for client validation.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The unique identifier for an entity. Read-only.' OuterIdentityPrivacyTemporaryValue = 'String | Optional | Specify the string to replace usernames for privacy when using EAP TTLS or PEAP.' EapType = 'String | Optional | Extensible Authentication Protocol (EAP). Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: eapTls, leap, eapSim, eapTtls, peap, eapFast, teap. Possible values are: eapTls, leap, eapSim, eapTtls, peap, eapFast, teap. | eapTls / leap / eapSim / eapTtls / peap / eapFast / teap' RootCertificatesForServerValidationIds = @( 'String | Optional | Specify root certificates for server validation. This collection can contain a maximum of 500 elements.' ) AuthenticationType = 'String | Optional | Specify whether to authenticate the user, the device, either, or to use guest authentication (none). If you''re using certificate authentication, make sure the certificate type matches the authentication type. Possible values are: none, user, machine, machineOrUser, guest. Possible values are: none, user, machine, machineOrUser, guest, unknownFutureValue. | none / user / machine / machineOrUser / guest / unknownFutureValue' IdentityCertificateForClientAuthenticationId = 'String | Optional | Specify identity certificate for client authentication.' RootCertificatesForServerValidationDisplayNames = @( 'String | Optional | Specify root certificate display names for server validation. This collection can contain a maximum of 500 elements.' ) IdentityCertificateForClientAuthenticationDisplayName = 'String | Optional | Specify identity certificate display name for client authentication.' CacheCredentials = 'Boolean | Optional | When TRUE, caches user credentials on the device so that users don''t need to keep entering them each time they connect. When FALSE, do not cache credentials. Default value is FALSE.' SecondaryIdentityCertificateForClientAuthenticationDisplayName = 'String | Optional | Specify root certificate display name for client validation' SecondaryRootCertificateForClientValidationId = 'String | Optional | Specify secondary root certificate for client validation.' Enforce8021X = 'Boolean | Optional | When TRUE, the automatic configuration service for wired networks requires the use of 802.1X for port authentication. When FALSE, 802.1X is not required. Default value is FALSE.' } ) DeviceControlPoliciesWindows10 = @( @{ AllowPromptedProximalConnections = 'String | Optional | Allow Prompted Proximal Connections (0: Disallow. Block users on these managed devices from using Swift Pair and other proximity based scenarios, 1: Allow. Allow users on these managed devices to use Swift Pair and other proximity based scenarios) | 0 / 1' Description = 'String | Optional | Policy description' DeviceInstall_Allow_Deny_Layered = 'String | Optional | Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_Classes_Allow_List = @( 'String | Optional | Allowed classes' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) WPDDevices_DenyWrite_Access_1 = 'String | Optional | WPD Devices: Deny write access (User) (0: Disabled, 1: Enabled) | 0 / 1' AllowUSBConnection = 'String | Optional | Allow USB Connection (0: Not allowed., 1: Allowed.) | 0 / 1' DisplayName = 'String | Required | Policy name' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PolicyRule = @( @{ IncludedIdList_GroupId = @( 'String | Optional | Included ID' ) ExcludedIdList_GroupId = @( 'String | Optional | Excluded ID' ) Entry = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' ComputerSid = 'String | Optional | Computer Sid' Options = 'String | Optional | Options (0: None, 1: ShowNotification, 2: SendEvent, 3: SendNotificationAndEvent, 4: Disable) | 0 / 1 / 2 / 3 / 4' Type = 'String | Optional | Type (allow: Allow, deny: Deny, auditallowed: AuditAllowed, auditdenied: AuditDenied) | allow / deny / auditallowed / auditdenied' Sid = 'String | Optional | Sid' AccessMask = @( 'SInt32 | Optional | Access mask (1: WDD_READ_ACCESS, 2: WDD_WRITE_ACCESS, 4: WDD_EXECUTE_ACCESS, 8: WDD_FS_READ_ACCESS, 16: WDD_FS_WRITE_ACCESS, 32: WDD_FS_EXECUTE_ACCESS, 64: WDD_PRINT_ACCESS) | 1 / 2 / 4 / 8 / 16 / 32 / 64' ) } ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' Name = 'String | Optional | Name' } ) AllowAdvertising = 'String | Optional | Allow Advertising (0: Not allowed. When set to 0, the device will not send out advertisements. To verify, use any Bluetooth LE app and enable it to do advertising. Then, verify that the advertisement is not received by the peripheral., 1: Allowed. When set to 1, the device will send out advertisements. To verify, use any Bluetooth LE app and enable it to do advertising. Then, verify that the advertisement is received by the peripheral.) | 0 / 1' AllowDiscoverableMode = 'String | Optional | Allow Discoverable Mode (0: Not allowed. When set to 0, other devices will not be able to detect the device. To verify, open the Bluetooth control panel on the device. Then, go to another Bluetooth-enabled device, open the Bluetooth control panel, and verify that you cannot see the name of the device., 1: Allowed. When set to 1, other devices will be able to detect the device. To verify, open the Bluetooth control panel on the device. Then, go to another Bluetooth-enabled device, open the Bluetooth control panel and verify that you can discover it.) | 0 / 1' DeviceInstall_Instance_IDs_Deny = 'String | Optional | Prevent installation of devices that match any of these device instance IDs (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_IDs_Deny = 'String | Optional | Prevent installation of devices that match any of these device IDs (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_Unspecified_Deny = 'String | Optional | Prevent installation of devices not described by other policy settings (0: Disabled, 1: Enabled) | 0 / 1' AllowFullScanRemovableDriveScanning = 'String | Optional | Allow Full Scan Removable Drive Scanning (0: Not allowed. Turns off scanning on removable drives., 1: Allowed. Scans removable drives.) | 0 / 1' AllowBluetooth = 'String | Optional | Allow Bluetooth (0: Disallow Bluetooth. If this is set to 0, the radio in the Bluetooth control panel will be grayed out and the user will not be able to turn Bluetooth on., 1: Reserved. If this is set to 1, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on., 2: Allow Bluetooth. If this is set to 2, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.) | 0 / 1 / 2' DeviceInstall_Instance_IDs_Allow = 'String | Optional | Allow installation of devices that match any of these device instance IDs (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_Instance_IDs_Deny_List = @( 'String | Optional | Prevented Instance IDs' ) DeviceInstall_Classes_Deny_Retroactive = 'String | Optional | Also apply to matching devices that are already installed. (0: False, 1: True) | 0 / 1' ServicesAllowedList = @( 'String | Optional | Services Allowed List' ) DeviceInstall_Classes_Deny_List = @( 'String | Optional | Prevented Classes' ) RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) DeviceInstall_Removable_Deny = 'String | Optional | Prevent installation of removable devices (0: Disabled, 1: Enabled) | 0 / 1' DeviceEnumerationPolicy = 'String | Optional | Device Enumeration Policy (0: Block all (Most restrictive), 1: Only after log in/screen unlock, 2: Allow all (Least restrictive)) | 0 / 1 / 2' AllowDirectMemoryAccess = 'String | Optional | Allow Direct Memory Access (0: Not allowed., 1: Allowed.) | 0 / 1' WPDDevices_DenyWrite_Access_2 = 'String | Optional | WPD Devices: Deny write access (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_Classes_Deny = 'String | Optional | Prevent installation of devices using drivers that match these device setup classes (0: Disabled, 1: Enabled) | 0 / 1' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AllowPrepairing = 'String | Optional | Allow Prepairing (0: Not allowed., 1: Allowed.) | 0 / 1' DeviceInstall_IDs_Deny_List = @( 'String | Optional | Prevented device IDs' ) AllowStorageCard = 'String | Optional | Allow Storage Card (0: SD card use is not allowed and USB drives are disabled. This setting does not prevent programmatic access to the storage card., 1: Allow a storage card.) | 0 / 1' WPDDevices_DenyRead_Access_2 = 'String | Optional | WPD Devices: Deny read access (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_IDs_Deny_Retroactive = 'String | Optional | Also apply to matching devices that are already installed. (0: False, 1: True) | 0 / 1' Id = 'String | Optional | The unique identifier for an entity. Read-only.' DeviceInstall_IDs_Allow = 'String | Optional | Allow installation of devices that match any of these device IDs (0: Disabled, 1: Enabled) | 0 / 1' WPDDevices_DenyRead_Access_1 = 'String | Optional | WPD Devices: Deny read access (User) (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_Classes_Allow = 'String | Optional | Allow installation of devices using drivers that match these device setup classes (0: Disabled, 1: Enabled) | 0 / 1' DeviceInstall_IDs_Allow_List = @( 'String | Optional | Allowed device IDs' ) RemovableDiskDenyWriteAccess = 'String | Optional | Removable Disk Deny Write Access (0: Disabled., 1: Enabled.) | 0 / 1' DeviceInstall_Instance_IDs_Deny_Retroactive = 'String | Optional | Also apply to matching devices that are already installed. (Device) (0: False, 1: True) | 0 / 1' DeviceInstall_Instance_IDs_Allow_List = @( 'String | Optional | Allowed Instance IDs' ) } ) DeviceEnrollmentLimitRestrictions = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | Description of the device enrollment limit restriction.' Ensure = 'String | Optional | Present ensures the restriction exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Limit = 'UInt32 | Optional | Specifies the maximum number of devices a user can enroll' DisplayName = 'String | Required | Display name of the device enrollment limit restriction.' } ) DeviceEnrollmentPlatformRestrictions = @( @{ Description = 'String | Optional | Description of the device enrollment platform restriction.' AndroidRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } Priority = 'UInt32 | Optional | Priority is used when a user exists in multiple groups that are assigned enrollment configuration. Users are subject only to the configuration with the lowest priority value.' DisplayName = 'String | Required | Display name of the device enrollment platform restriction.' WindowsRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } WindowsMobileRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) IosRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' MacRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } DeviceEnrollmentConfigurationType = 'String | Optional | Support for Enrollment Configuration Type | platformRestrictions / singlePlatformRestriction' Identity = 'String | Required | Identity of the device enrollment platform restriction.' MacOSRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } WindowsHomeSkuRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } AndroidForWorkRestriction = @{ PlatformBlocked = 'Boolean | Optional | Block the platform from enrolling.' OsMinimumVersion = 'String | Optional | Min OS version supported.' BlockedSkus = @( 'String | Optional | Collection of blocked Skus.' ) BlockedManufacturers = @( 'String | Optional | Collection of blocked Manufacturers.' ) OsMaximumVersion = 'String | Optional | Max OS version supported.' PersonalDeviceEnrollmentBlocked = 'Boolean | Optional | Block personally owned devices from enrolling.' } } ) DeviceEnrollmentStatusPageWindows10s = @( @{ Description = 'String | Optional | The description of the device enrollment configuration' Priority = 'UInt32 | Optional | Priority is used when a user exists in multiple groups that are assigned enrollment configuration. Users are subject only to the configuration with the lowest priority value.' DisplayName = 'String | Required | The display name of the device enrollment configuration' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisableUserStatusTrackingAfterFirstUser = 'Boolean | Optional | Only show installation progress for first user post enrollment' InstallQualityUpdates = 'Boolean | Optional | Allows quality updates installation during OOBE' ShowInstallationProgress = 'Boolean | Optional | Show or hide installation progress to user' SelectedMobileAppIds = @( 'String | Optional | Ids of selected applications to track the installation status. When this parameter is used, SelectedMobileAppNames is ignored' ) CustomErrorMessage = 'String | Optional | Set custom error message to show upon installation failure' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' BlockDeviceSetupRetryByUser = 'Boolean | Optional | Allow the user to retry the setup on installation failure' AllowDeviceUseOnInstallFailure = 'Boolean | Optional | Allow the user to continue using the device on installation failure' AllowDeviceResetOnInstallFailure = 'Boolean | Optional | Allow or block device reset on installation failure' AllowNonBlockingAppInstallation = 'Boolean | Optional | Install all required apps as non blocking apps during white glove' AllowLogCollectionOnInstallFailure = 'Boolean | Optional | Allow or block log collection on installation failure' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) SelectedMobileAppNames = @( 'String | Optional | Names of selected applications to track the installation status. This parameter is ignored when SelectedMobileAppIds is also specified' ) InstallProgressTimeoutInMinutes = 'UInt32 | Optional | Set installation progress timeout in minutes' TrackInstallProgressForAutopilotOnly = 'Boolean | Optional | Only show installation progress for Autopilot enrollment scenarios' } ) DeviceManagementComplianceSettings = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SecureByDefault = 'Boolean | Optional | Device should be noncompliant when there is no compliance policy targeted when this is true.' DeviceComplianceCheckinThresholdDays = 'UInt32 | Optional | The number of days a device is allowed to go without checking in to remain compliant.' } DeviceManagementEnrollmentAndroidGooglePlaies = @( @{ BindStatus = 'String | Optional | Binding status of the Android Managed Store Account Enterprise Setting (e.g., ''bound'', ''notBound'').' Id = 'String | Required | Primary key identifier of the Android Managed Store Account Enterprise Setting.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' OwnerOrganizationName = 'String | Optional | The organization name of the owner of the Android Managed Store Account.' DeviceOwnerManagementEnabled = 'Boolean | Optional | Specifies whether device owner management is enabled.' EnrollmentTarget = 'String | Optional | Specifies the enrollment target for the account enterprise setting (e.g., ''defaultEnrollmentRestrictions'', ''targetedAsEnrollmentRestrictions'').' AccessTokens = @( 'String | Optional | Access tokens used for authentication in scenarios requiring multiple tokens.' ) OwnerUserPrincipalName = 'String | Optional | The user principal name of the owner of the Android Managed Store Account.' AndroidDeviceOwnerFullyManagedEnrollmentEnabled = 'Boolean | Optional | Specifies whether fully managed enrollment is enabled for Android devices.' } ) DeviceManagmentAndroidDeviceOwnerEnrollmentProfiles = @( @{ WifiSecurityType = 'String | Optional | String that contains the wi-fi security type. | none / wpa / wep' Description = 'String | Optional | Description for the enrollment profile.' ConfigureWifi = 'Boolean | Optional | Boolean that indicates that the Wi-Fi network should be configured during device provisioning. When set to TRUE, device provisioning will use Wi-Fi related properties to automatically connect to Wi-Fi networks. When set to FALSE or undefined, other Wi-Fi related properties will be ignored. Default value is TRUE. Returned by default.' WifiSsid = 'String | Optional | String that contains the wi-fi login ssid' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TokenValue = 'String | Optional | Value of the most recently created token for this enrollment profile.' EnrollmentTokenType = 'String | Optional | The enrollment token type for an enrollment profile. | default / corporateOwnedDedicatedDeviceWithAzureADSharedMode / deviceStaging' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) EnrollmentMode = 'String | Optional | The enrollment mode of devices that use this enrollment profile. | corporateOwnedDedicatedDevice / corporateOwnedFullyManaged / corporateOwnedWorkProfile / corporateOwnedAOSPUserlessDevice / corporateOwnedAOSPUserAssociatedDevice' QrCodeImage = 'String | Optional | String used to generate a QR code for the token.' TokenCreationDateTime = 'String | Optional | Date time the most recently created token was created.' QrCodeContent = 'String | Optional | String used to generate a QR code for the token.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' DisplayName = 'String | Required | Display name for the enrollment profile.' TokenExpirationDateTime = 'String | Optional | Date time the most recently created token will expire.' IsTeamsDeviceProfile = 'Boolean | Optional | Boolean indicating if this profile is an Android AOSP for Teams device profile.' Id = 'String | Optional | Unique GUID for the enrollment profile. Read-Only.' AccountId = 'String | Optional | Intune AccountId GUID the enrollment profile belongs to.' WifiHidden = 'Boolean | Optional | Boolean that indicates if hidden wifi networks are enabled' EnrollmentTokenUsageCount = 'UInt32 | Optional | Total number of AOSP devices that have enrolled using the current token. Valid values 0 to 20000' EnrolledDeviceCount = 'UInt32 | Optional | Total number of Android devices that have enrolled using this enrollment profile.' WifiPassword = 'PSCredential | Optional | String that contains the wi-fi login password. The parameter is a PSCredential object.' } ) DeviceRemediations = @( @{ DeviceHealthScriptType = 'String | Optional | DeviceHealthScriptType for the script policy. Possible values are: deviceHealthScript, managedInstallerScript. | deviceHealthScript / managedInstallerScript' Description = 'String | Optional | Description of the device health script' IsGlobalScript = 'Boolean | Optional | Indicates whether the script is a global script provided by Microsoft' DisplayName = 'String | Required | Name of the device health script' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RunAs32Bit = 'Boolean | Optional | Indicate whether PowerShell script(s) should run as 32-bit' RoleScopeTagIds = @( 'String | Optional | List of Scope Tag IDs for the device health script' ) Assignments = @( @{ RunSchedule = @{ Date = 'String | Optional | The date when to run the schedule. Only applicable when the odataType is a run once schedule. Format: 2024-01-01' Time = 'String | Optional | The time when to run the schedule. Only applicable when the dataType is not an hourly schedule. Format: 01:00:00' Interval = 'UInt32 | Optional | The interval of the schedule. Must be 1 in case of a run once schedule.' dataType = 'String | Optional | The type of the schedule. | #microsoft.graph.deviceHealthScriptRunOnceSchedule / #microsoft.graph.deviceHealthScriptHourlySchedule / #microsoft.graph.deviceHealthScriptDailySchedule' UseUtc = 'Boolean | Optional | If to use UTC as the time source. Only applicable when the dataType is not an hourly schedule.' } Assignment = @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } RunRemediationScript = 'Boolean | Optional | If the remediation script should be run.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) RemediationScriptContent = 'String | Optional | The entire content of the remediation powershell script' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DetectionScriptParameters = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Name = 'String | Optional | The name of the param' Description = 'String | Optional | The description of the param' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceHealthScriptBooleanParameter / #microsoft.graph.deviceHealthScriptIntegerParameter / #microsoft.graph.deviceHealthScriptStringParameter' IsRequired = 'Boolean | Optional | Whether the param is required' DefaultValue = 'Boolean | Optional | The default value of boolean param' ApplyDefaultValueWhenNotAssigned = 'Boolean | Optional | Whether Apply DefaultValue When Not Assigned' } ) Publisher = 'String | Optional | Name of the device health script publisher' EnforceSignatureCheck = 'Boolean | Optional | Indicates whether the script signature needs be checked' Id = 'String | Required | The unique identifier for an entity. Read-only.' DetectionScriptContent = 'String | Optional | The entire content of the detection powershell script' RemediationScriptParameters = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Name = 'String | Optional | The name of the param' Description = 'String | Optional | The description of the param' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceHealthScriptBooleanParameter / #microsoft.graph.deviceHealthScriptIntegerParameter / #microsoft.graph.deviceHealthScriptStringParameter' IsRequired = 'Boolean | Optional | Whether the param is required' DefaultValue = 'Boolean | Optional | The default value of boolean param' ApplyDefaultValueWhenNotAssigned = 'Boolean | Optional | Whether Apply DefaultValue When Not Assigned' } ) RunAsAccount = 'String | Optional | Indicates the type of execution context. Possible values are: system, user. | system / user' } ) DiskEncryptionMacOSs = @( @{ Description = 'String | Optional | The user given description' DisplayName = 'String | Required | Display name of the disk encryption file vault policy for MacOS' HidePersonalRecoveryKey = 'Boolean | Optional | Hide recovery key.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' PersonalRecoveryKeyHelpMessage = 'String | Optional | Escrow location description of personal recovery key. Required, if Enabled is True.' DisablePromptAtSignOut = 'Boolean | Optional | Disable the prompt for the user to enable FileVault when they sign out.' SelectedRecoveryKeyTypes = @( 'String | Optional | Determine which type(s) of recovery key should be generated for this device. Only supported value is ''personalRecoveryKey''. Required, if Enabled is True.' ) AllowDeferralUntilSignOut = 'Boolean | Optional | Defer the prompt until the user signs out. Only True is supported.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' NumberOfTimesUserCanIgnore = 'SInt32 | Optional | Number of times allowed to bypass (1-10). Special cases: -1 = Not Configured, 11 = No limit, always prompt. ' PersonalRecoveryKeyRotationInMonths = 'UInt32 | Optional | Specify how frequently in months (1-12) the device''s personal recovery key will rotate. Range: 1-12' Enabled = 'Boolean | Optional | If not already enabled, FileVault will be enabled at the next logout.' } ) DiskEncryptionPDEPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ProtectDocuments = 'String | Optional | Protect Documents (User) (Windows Insiders only) - Depends on EnablePersonalDataEncryption (0: Disable PDE on the folder. If the folder is currently protected by PDE, this will result in unprotecting the folder., 1: Enable PDE on the folder.) | 0 / 1' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ProtectPictures = 'String | Optional | Protect Pictures (User) (Windows Insiders only) - Depends on EnablePersonalDataEncryption (0: Disable PDE on the folder. If the folder is currently protected by PDE, this will result in unprotecting the folder., 1: Enable PDE on the folder.) | 0 / 1' EnablePersonalDataEncryption = 'String | Optional | Enable Personal Data Encryption (User) (0: Disable Personal Data Encryption., 1: Enable Personal Data Encryption.) | 0 / 1' ProtectDesktop = 'String | Optional | Protect Desktop (User) (Windows Insiders only) - Depends on EnablePersonalDataEncryption (0: Disable PDE on the folder. If the folder is currently protected by PDE, this will result in unprotecting the folder., 1: Enable PDE on the folder.) | 0 / 1' DisplayName = 'String | Required | Policy name' } ) DiskEncryptionWindows10s = @( @{ RecoveryMessage_Input = 'String | Optional | Custom recovery message option:' MinimumPINLength_Name = 'String | Optional | Configure minimum PIN length for startup (0: Disabled, 1: Enabled) | 0 / 1' OSAllowDRA_Name = 'String | Optional | Allow data recovery agent (0: False, 1: True) | 0 / 1' ConfigureNonTPMStartupKeyUsage_Name = 'String | Optional | Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive) (0: False, 1: True) | 0 / 1' OSActiveDirectoryBackup_Name = 'String | Optional | Save BitLocker recovery information to AD DS for operating system drives (0: False, 1: True) | 0 / 1' Description = 'String | Optional | Policy description' ConfigurePINUsageDropDown_Name = 'String | Optional | Configure TPM startup PIN: (2: Allow startup PIN with TPM, 1: Require startup PIN with TPM, 0: Do not allow startup PIN with TPM) | 2 / 1 / 0' EnhancedPIN_Name = 'String | Optional | Allow enhanced PINs for startup (0: Disabled, 1: Enabled) | 0 / 1' RDVCrossOrg = 'String | Optional | Do not allow write access to devices configured in another organization (0: False, 1: True) | 0 / 1' OSRecoveryKeyUsageDropDown_Name = 'String | Optional | Configure OS recovery key usage: (2: Allow 256-bit recovery key, 1: Require 256-bit recovery key, 0: Do not allow 256-bit recovery key) | 2 / 1 / 0' ConfigureTPMPINKeyUsageDropDown_Name = 'String | Optional | Configure TPM startup key and PIN: (2: Allow startup key and PIN with TPM, 1: Require startup key and PIN with TPM, 0: Do not allow startup key and PIN with TPM) | 2 / 1 / 0' DisplayName = 'String | Required | Policy name' RequireDeviceEncryption = 'String | Optional | Require Device Encryption (0: Disabled, 1: Enabled) | 0 / 1' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) FDVRequireActiveDirectoryBackup_Name = 'String | Optional | Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives (0: False, 1: True) | 0 / 1' PrebootRecoveryInfo_Name = 'String | Optional | Configure pre-boot recovery message and URL (0: Disabled, 1: Enabled) | 0 / 1' PrebootRecoveryInfoDropDown_Name = 'String | Optional | Select an option for the pre-boot recovery message: (0: , 1: Use default recovery message and URL, 2: Use custom recovery message, 3: Use custom recovery URL) | 0 / 1 / 2 / 3' DisallowStandardUsersCanChangePIN_Name = 'String | Optional | Disallow standard users from changing the PIN or password (0: Disabled, 1: Enabled) | 0 / 1' FDVRecoveryUsage_Name = 'String | Optional | Choose how BitLocker-protected fixed drives can be recovered (0: Disabled, 1: Enabled) | 0 / 1' EncryptionMethodWithXtsOsDropDown_Name = 'String | Optional | Select the encryption method for operating system drives: (3: AES-CBC 128-bit, 4: AES-CBC 256-bit, 6: XTS-AES 128-bit (default), 7: XTS-AES 256-bit) | 3 / 4 / 6 / 7' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) SecIdentificationField = 'String | Optional | Allowed BitLocker identification field: (Device)' AllowWarningForOtherDiskEncryption = 'String | Optional | Allow Warning For Other Disk Encryption (0: Disabled, 1: Enabled) | 0 / 1' ConfigureRecoveryPasswordRotation = 'String | Optional | Configure Recovery Password Rotation (0: Refresh off (default), 1: Refresh on for Azure AD-joined devices, 2: Refresh on for both Azure AD-joined and hybrid-joined devices) | 0 / 1 / 2' FDVAllowDRA_Name = 'String | Optional | Allow data recovery agent (0: False, 1: True) | 0 / 1' OSRecoveryPasswordUsageDropDown_Name = 'String | Optional | Configure user storage of BitLocker recovery information: (2: Allow 48-digit recovery password, 1: Require 48-digit recovery password, 0: Do not allow 48-digit recovery password) | 2 / 1 / 0' RDVDisableBDE_Name = 'String | Optional | Allow users to suspend and decrypt BitLocker protection on removable data drives (Device) (0: False, 1: True) | 0 / 1' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) OSRequireActiveDirectoryBackup_Name = 'String | Optional | Do not enable BitLocker until recovery information is stored to AD DS for operating system drives (0: False, 1: True) | 0 / 1' FDVHideRecoveryPage_Name = 'String | Optional | Omit recovery options from the BitLocker setup wizard (0: False, 1: True) | 0 / 1' FDVActiveDirectoryBackup_Name = 'String | Optional | Save BitLocker recovery information to AD DS for fixed data drives (0: False, 1: True) | 0 / 1' OSEncryptionTypeDropDown_Name = 'String | Optional | Select the encryption type: (Device) (0: Allow user to choose (default), 1: Full encryption, 2: Used Space Only encryption) | 0 / 1 / 2' FDVRecoveryKeyUsageDropDown_Name = 'String | Optional | Select the fixed drive recovery key usage: (2: Allow 256-bit recovery key, 1: Require 256-bit recovery key, 0: Do not allow 256-bit recovery key) | 2 / 1 / 0' AllowStandardUserEncryption = 'String | Optional | Allow Standard User Encryption (0: This is the default, when the policy is not set. If current logged on user is a standard user, ''RequireDeviceEncryption'' policy will not try to enable encryption on any drive., 1: ''RequireDeviceEncryption'' policy will try to enable encryption on all fixed drives even if a current logged in user is standard user.) | 0 / 1' RDVDenyWriteAccess_Name = 'String | Optional | Deny write access to removable drives not protected by BitLocker (0: Disabled, 1: Enabled) | 0 / 1' RecoveryUrl_Input = 'String | Optional | Custom recovery URL option:' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' OSEncryptionType_Name = 'String | Optional | Enforce drive encryption type on operating system drives (0: Disabled, 1: Enabled) | 0 / 1' EncryptionMethodWithXtsRdvDropDown_Name = 'String | Optional | Select the encryption method for removable data drives: (3: AES-CBC 128-bit (default), 4: AES-CBC 256-bit, 6: XTS-AES 128-bit, 7: XTS-AES 256-bit) | 3 / 4 / 6 / 7' Id = 'String | Optional | The unique identifier for an entity. Read-only.' OSActiveDirectoryBackupDropDown_Name = 'String | Optional | Configure storage of BitLocker recovery information to AD DS: (1: Store recovery passwords and key packages, 2: Store recovery passwords only) | 1 / 2' FDVDenyWriteAccess_Name = 'String | Optional | Deny write access to fixed drives not protected by BitLocker (0: Disabled, 1: Enabled) | 0 / 1' OSHideRecoveryPage_Name = 'String | Optional | Omit recovery options from the BitLocker setup wizard (0: False, 1: True) | 0 / 1' RDVAllowBDE_Name = 'String | Optional | Allow users to apply BitLocker protection on removable data drives (Device) (0: False, 1: True) | 0 / 1' FDVActiveDirectoryBackupDropDown_Name = 'String | Optional | Configure storage of BitLocker recovery information to AD DS: (1: Backup recovery passwords and key packages, 2: Backup recovery passwords only) | 1 / 2' IdentificationField = 'String | Optional | BitLocker identification field: (Device)' IdentificationField_Name = 'String | Optional | Provide the unique identifiers for your organization (0: Disabled, 1: Enabled) | 0 / 1' RDVEncryptionTypeDropDown_Name = 'String | Optional | Select the encryption type: (Device) (0: Allow user to choose (default), 1: Full encryption, 2: Used Space Only encryption) | 0 / 1 / 2' MinPINLength = 'SInt32 | Optional | Minimum characters:' OSRecoveryUsage_Name = 'String | Optional | Choose how BitLocker-protected operating system drives can be recovered (0: Disabled, 1: Enabled) | 0 / 1' FDVEncryptionType_Name = 'String | Optional | Enforce drive encryption type on fixed data drives (0: Disabled, 1: Enabled) | 0 / 1' EncryptionMethodWithXtsFdvDropDown_Name = 'String | Optional | Select the encryption method for fixed data drives: (3: AES-CBC 128-bit, 4: AES-CBC 256-bit, 6: XTS-AES 128-bit (default), 7: XTS-AES 256-bit) | 3 / 4 / 6 / 7' FDVEncryptionTypeDropDown_Name = 'String | Optional | Select the encryption type: (Device) (0: Allow user to choose (default), 1: Full encryption, 2: Used Space Only encryption) | 0 / 1 / 2' FDVRecoveryPasswordUsageDropDown_Name = 'String | Optional | Configure user storage of BitLocker recovery information: (2: Allow 48-digit recovery password, 1: Require 48-digit recovery password, 0: Do not allow 48-digit recovery password) | 2 / 1 / 0' ConfigureTPMStartupKeyUsageDropDown_Name = 'String | Optional | Configure TPM startup key: (2: Allow startup key with TPM, 1: Require startup key with TPM, 0: Do not allow startup key with TPM) | 2 / 1 / 0' EncryptionMethodWithXts_Name = 'String | Optional | Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later) (0: Disabled, 1: Enabled) | 0 / 1' RDVConfigureBDE = 'String | Optional | Control use of BitLocker on removable drives (0: Disabled, 1: Enabled) | 0 / 1' EnablePreBootPinExceptionOnDECapableDevice_Name = 'String | Optional | Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN. (0: Disabled, 1: Enabled) | 0 / 1' ConfigureTPMUsageDropDown_Name = 'String | Optional | Configure TPM startup: (2: Allow TPM, 1: Require TPM, 0: Do not allow TPM) | 2 / 1 / 0' EnablePrebootInputProtectorsOnSlates_Name = 'String | Optional | Enable use of BitLocker authentication requiring preboot keyboard input on slates (0: Disabled, 1: Enabled) | 0 / 1' RDVEncryptionType_Name = 'String | Optional | Enforce drive encryption type on removable data drives (0: Disabled, 1: Enabled) | 0 / 1' ConfigureAdvancedStartup_Name = 'String | Optional | Require additional authentication at startup (0: Disabled, 1: Enabled) | 0 / 1' } ) EndpointDetectionAndResponsePoliciesLinux = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) tags_item_key = 'String | Optional | Type of tag (0: GROUP) | 0' tags_item_value = 'String | Optional | Value of tag' DisplayName = 'String | Required | Policy name' } ) EndpointDetectionAndResponsePoliciesMacOS = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) tags_item_key = 'String | Optional | Type of tag (0: GROUP) | 0' tags_item_value = 'String | Optional | Value of tag' DisplayName = 'String | Required | Policy name' } ) EndpointDetectionAndResponsePoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the endpoint detection and response policy for Windows 10.' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' SampleSharing = 'String | Optional | Return or set Windows Defender Advanced Threat Protection Sample Sharing configuration parameter: 0 - none, 1 - All | 0 / 1' DisplayName = 'String | Required | Display name of the endpoint detection and response policy for Windows 10.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | Identity of the endpoint detection and response policy for Windows 10.' ConfigurationBlob = 'String | Optional | Set Windows Defender Advanced Threat Protection Onboarding blob and initiate onboarding to Windows Defender Advanced Threat Protection' ConfigurationType = 'String | Optional | Microsoft Defender for Endpoint endpoint detection and response capabilities provide advanced attack detections that are near real-time and actionable. Security analysts can prioritize alerts effectively, gain visibility into the full scope of a breach, and take response actions to remediate threats. | AutoFromConnector / Onboard / Offboard' } ) ExploitProtectionPoliciesWindows10SettingCatalog = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the endpoint protection.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' ExploitProtectionSettings = 'String | Optional | Enables the IT admin to push out a configuration representing the desired system and application mitigation options to all the devices in the organization. The configuration is represented by an XML.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | Identity of the endpoint protection policy.' DisallowExploitProtectionOverride = 'String | Optional | Prevent users from making changes to the exploit protection settings area in the Windows Defender Security Center.values 0:disable, 1:enable | 0 / 1' DisplayName = 'String | Required | Display name of the endpoint protection policy.' } ) FirewallPoliciesWindows10 = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EnablePacketQueue = @( 'SInt32 | Optional | Enable Packet Queue (0: Indicates that all queuing is to be disabled, 1: Specifies that inbound encrypted packets are to be queued, 2: Specifies that packets are to be queued after decryption is performed for forwarding) | 0 / 1 / 2' ) DomainProfile_EnableFirewall = 'String | Optional | Enable Domain Network Firewall (false: Disable Firewall, true: Enable Firewall) | false / true' PublicProfile_DisableStealthMode = 'String | Optional | Disable Stealth Mode (false: Use Stealth Mode, true: Disable Stealth Mode) | false / true' PublicProfile_EnableLogSuccessConnections = 'String | Optional | Enable Log Success Connections (false: Disable Logging Of Successful Connections, true: Enable Logging Of Successful Connections) | false / true' HyperVVMSettings_DomainProfile_DefaultInboundAction = 'String | Optional | Hyper-V: Default Inbound Action (0: Allow Inbound By Default, 1: Block Inbound By Default) | 0 / 1' ObjectAccess_AuditFilteringPlatformPacketDrop = 'String | Optional | Object Access Audit Filtering Platform Packet Drop (0: Off/None, 1: Success, 2: Failure, 3: Success+Failure) | 0 / 1 / 2 / 3' PrivateProfile_LogMaxFileSize = 'SInt32 | Optional | Log Max File Size' DomainProfile_DefaultOutboundAction = 'String | Optional | Default Outbound Action (0: Allow Outbound By Default, 1: Block Outbound By Default) | 0 / 1' DomainProfile_DisableStealthModeIpsecSecuredPacketExemption = 'String | Optional | Disable Stealth Mode Ipsec Secured Packet Exemption (false: FALSE, true: TRUE) | false / true' PublicProfile_DefaultInboundAction = 'String | Optional | Default Inbound Action for Public Profile (0: Allow Inbound By Default, 1: Block Inbound By Default) | 0 / 1' SaIdleTime = 'SInt32 | Optional | Security association idle time' DomainProfile_DisableUnicastResponsesToMulticastBroadcast = 'String | Optional | Disable Unicast Responses To Multicast Broadcast (false: Unicast Responses Not Blocked, true: Unicast Responses Blocked) | false / true' DomainProfile_DisableStealthMode = 'String | Optional | Disable Stealth Mode (false: Use Stealth Mode, true: Disable Stealth Mode) | false / true' HyperVVMSettings_DomainProfile_EnableFirewall = 'String | Optional | Hyper-V: Enable Domain Network Firewall (false: Disable Firewall, true: Enable Firewall) | false / true' HyperVVMSettings_PublicProfile_DefaultInboundAction = 'String | Optional | Hyper-V: Default Inbound Action (0: Allow Inbound By Default, 1: Block Inbound By Default) | 0 / 1' CRLcheck = 'String | Optional | Certificate revocation list verification (0: Disables CRL checking, 1: Specifies that CRL checking is attempted and that certificate validation fails only if the certificate is revoked. Other failures that are encountered during CRL checking (such as the revocation URL being unreachable) do not cause certificate validation to fail., 2: Means that checking is required and that certificate validation fails if any error is encountered during CRL processing) | 0 / 1 / 2' PublicProfile_LogFilePath = 'String | Optional | Log File Path' PrivateProfile_DisableStealthModeIpsecSecuredPacketExemption = 'String | Optional | Disable Stealth Mode Ipsec Secured Packet Exemption (false: FALSE, true: TRUE) | false / true' PublicProfile_EnableLogIgnoredRules = 'String | Optional | Enable Log Ignored Rules (false: Disable Logging Of Ignored Rules, true: Enable Logging Of Ignored Rules) | false / true' PrivateProfile_EnableLogIgnoredRules = 'String | Optional | Enable Log Ignored Rules (false: Disable Logging Of Ignored Rules, true: Enable Logging Of Ignored Rules) | false / true' DomainProfile_DisableInboundNotifications = 'String | Optional | Disable Inbound Notifications (false: Firewall May Display Notification, true: Firewall Must Not Display Notification) | false / true' HyperVVMSettings_PrivateProfile_EnableFirewall = 'String | Optional | Hyper-V: Enable Private Network Firewall (false: Disable Firewall, true: Enable Firewall) | false / true' DomainProfile_AllowLocalPolicyMerge = 'String | Optional | Allow Local Policy Merge (false: AllowLocalPolicyMerge Off, true: AllowLocalPolicyMerge On) | false / true' HyperVVMSettings_PrivateProfile_DefaultInboundAction = 'String | Optional | Hyper-V: Default Inbound Action (0: Allow Inbound By Default, 1: Block Inbound By Default) | 0 / 1' PublicProfile_GlobalPortsAllowUserPrefMerge = 'String | Optional | Global Ports Allow User Pref Merge (false: GlobalPortsAllowUserPrefMerge Off, true: GlobalPortsAllowUserPrefMerge On) | false / true' PrivateProfile_Shielded = 'String | Optional | Shielded (false: Shielding Off, true: Shielding On) | false / true' HyperVVMSettings_PublicProfile_DefaultOutboundAction = 'String | Optional | Hyper-V: Default Outbound Action (0: Allow Outbound By Default, 1: Block Outbound By Default) | 0 / 1' DisableStatefulFtp = 'String | Optional | Disable Stateful Ftp (false: Stateful FTP enabled, true: Stateful FTP disabled) | false / true' EnableLoopback = 'String | Optional | Hyper-V: Enable Loopback (false: Disable loopback, true: Enable loopback) | false / true' PrivateProfile_EnableFirewall = 'String | Optional | Enable Private Network Firewall (false: Disable Firewall, true: Enable Firewall) | false / true' PrivateProfile_EnableLogDroppedPackets = 'String | Optional | Enable Log Dropped Packets (false: Disable Logging Of Dropped Packets, true: Enable Logging Of Dropped Packets) | false / true' PublicProfile_EnableLogDroppedPackets = 'String | Optional | Enable Log Dropped Packets (false: Disable Logging Of Dropped Packets, true: Enable Logging Of Dropped Packets) | false / true' DomainProfile_EnableLogDroppedPackets = 'String | Optional | Enable Log Dropped Packets (false: Disable Logging Of Dropped Packets, true: Enable Logging Of Dropped Packets) | false / true' PrivateProfile_EnableLogSuccessConnections = 'String | Optional | Enable Log Success Connections (false: Disable Logging Of Successful Connections, true: Enable Logging Of Successful Connections) | false / true' PublicProfile_DisableStealthModeIpsecSecuredPacketExemption = 'String | Optional | Disable Stealth Mode Ipsec Secured Packet Exemption (false: FALSE, true: TRUE) | false / true' AllowHostPolicyMerge = 'String | Optional | Hyper-V: Allow Host Policy Merge (false: AllowHostPolicyMerge Off, true: AllowHostPolicyMerge On) | false / true' PrivateProfile_LogFilePath = 'String | Optional | Log File Path' DomainProfile_EnableLogIgnoredRules = 'String | Optional | Enable Log Ignored Rules (false: Disable Logging Of Ignored Rules, true: Enable Logging Of Ignored Rules) | false / true' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' PublicProfile_DisableUnicastResponsesToMulticastBroadcast = 'String | Optional | Disable Unicast Responses To Multicast Broadcast (false: Unicast Responses Not Blocked, true: Unicast Responses Blocked) | false / true' PublicProfile_AllowLocalIpsecPolicyMerge = 'String | Optional | Allow Local Ipsec Policy Merge (false: AllowLocalIpsecPolicyMerge Off, true: AllowLocalIpsecPolicyMerge On) | false / true' PublicProfile_AuthAppsAllowUserPrefMerge = 'String | Optional | Auth Apps Allow User Pref Merge (false: AuthAppsAllowUserPrefMerge Off, true: AuthAppsAllowUserPrefMerge On) | false / true' AllowedTlsAuthenticationEndpoints = @( 'String | Optional | Allowed Tls Authentication Endpoints' ) HyperVVMSettings_DomainProfile_AllowLocalPolicyMerge = 'String | Optional | Hyper-V: Allow Local Policy Merge (false: AllowLocalPolicyMerge Off, true: AllowLocalPolicyMerge On) | false / true' Description = 'String | Optional | Policy description' PublicProfile_EnableFirewall = 'String | Optional | Enable Public Network Firewall (false: Disable Firewall, true: Enable Firewall) | false / true' Id = 'String | Optional | The unique identifier for an entity. Read-only.' PrivateProfile_DisableUnicastResponsesToMulticastBroadcast = 'String | Optional | Disable Unicast Responses To Multicast Broadcast (false: Unicast Responses Not Blocked, true: Unicast Responses Blocked) | false / true' Target = 'String | Optional | Hyper-V: Target (wsl: WSL) | wsl' PrivateProfile_GlobalPortsAllowUserPrefMerge = 'String | Optional | Global Ports Allow User Pref Merge (false: GlobalPortsAllowUserPrefMerge Off, true: GlobalPortsAllowUserPrefMerge On) | false / true' HyperVVMSettings_PrivateProfile_DefaultOutboundAction = 'String | Optional | Hyper-V: Default Outbound Action (0: Allow Outbound By Default, 1: Block Outbound By Default) | 0 / 1' DomainProfile_EnableLogSuccessConnections = 'String | Optional | Enable Log Success Connections (false: Disable Logging Of Successful Connections, true: Enable Logging Of Successful Connections) | false / true' HyperVVMSettings_DomainProfile_DefaultOutboundAction = 'String | Optional | Hyper-V: Default Outbound Action (0: Allow Outbound By Default, 1: Block Outbound By Default) | 0 / 1' DomainProfile_Shielded = 'String | Optional | Shielded (false: Shielding Off, true: Shielding On) | false / true' DisplayName = 'String | Required | Policy name' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DomainProfile_LogFilePath = 'String | Optional | Log File Path' PublicProfile_LogMaxFileSize = 'SInt32 | Optional | Log Max File Size' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) DomainProfile_AuthAppsAllowUserPrefMerge = 'String | Optional | Auth Apps Allow User Pref Merge (false: AuthAppsAllowUserPrefMerge Off, true: AuthAppsAllowUserPrefMerge On) | false / true' DomainProfile_AllowLocalIpsecPolicyMerge = 'String | Optional | Allow Local Ipsec Policy Merge (false: AllowLocalIpsecPolicyMerge Off, true: AllowLocalIpsecPolicyMerge On) | false / true' PublicProfile_DisableInboundNotifications = 'String | Optional | Disable Inbound Notifications (false: Firewall May Display Notification, true: Firewall Must Not Display Notification) | false / true' PublicProfile_Shielded = 'String | Optional | Shielded (false: Shielding Off, true: Shielding On) | false / true' HyperVVMSettings_PublicProfile_AllowLocalPolicyMerge = 'String | Optional | Hyper-V: Allow Local Policy Merge (false: AllowLocalPolicyMerge Off, true: AllowLocalPolicyMerge On) | false / true' DomainProfile_DefaultInboundAction = 'String | Optional | Default Inbound Action for Domain Profile (0: Allow Inbound By Default, 1: Block Inbound By Default) | 0 / 1' PublicProfile_DefaultOutboundAction = 'String | Optional | Default Outbound Action (0: Allow Outbound By Default, 1: Block Outbound By Default) | 0 / 1' PrivateProfile_DisableStealthMode = 'String | Optional | Disable Stealth Mode (false: Use Stealth Mode, true: Disable Stealth Mode) | false / true' PrivateProfile_AllowLocalPolicyMerge = 'String | Optional | Allow Local Policy Merge (false: AllowLocalPolicyMerge Off, true: AllowLocalPolicyMerge On) | false / true' DomainProfile_GlobalPortsAllowUserPrefMerge = 'String | Optional | Global Ports Allow User Pref Merge (false: GlobalPortsAllowUserPrefMerge Off, true: GlobalPortsAllowUserPrefMerge On) | false / true' PublicProfile_AllowLocalPolicyMerge = 'String | Optional | Allow Local Policy Merge (false: AllowLocalPolicyMerge Off, true: AllowLocalPolicyMerge On) | false / true' PrivateProfile_DefaultInboundAction = 'String | Optional | Default Inbound Action for Private Profile (0: Allow Inbound By Default, 1: Block Inbound By Default) | 0 / 1' OpportunisticallyMatchAuthSetPerKM = 'String | Optional | Opportunistically Match Auth Set Per KM (false: FALSE, true: TRUE) | false / true' ObjectAccess_AuditFilteringPlatformConnection = 'String | Optional | Object Access Audit Filtering Platform Connection (0: Off/None, 1: Success, 2: Failure, 3: Success+Failure) | 0 / 1 / 2 / 3' HyperVVMSettings_PublicProfile_EnableFirewall = 'String | Optional | Hyper-V: Enable Public Network Firewall (false: Disable Hyper-V Firewall, true: Enable Hyper-V Firewall) | false / true' PresharedKeyEncoding = 'String | Optional | Preshared Key Encoding (0: FW_GLOBAL_CONFIG_PRESHARED_KEY_ENCODING_NONE: Preshared key is not encoded. Instead, it is kept in its wide-character format. This symbolic constant has a value of 0., 1: FW_GLOBAL_CONFIG_PRESHARED_KEY_ENCODING_UTF_8: Encode the preshared key using UTF-8. This symbolic constant has a value of 1.) | 0 / 1' PrivateProfile_AllowLocalIpsecPolicyMerge = 'String | Optional | Allow Local Ipsec Policy Merge (false: AllowLocalIpsecPolicyMerge Off, true: AllowLocalIpsecPolicyMerge On) | false / true' IPsecExempt = @( 'SInt32 | Optional | IPsec Exceptions (0: FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NONE: No IPsec exemptions., 1: FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NEIGHBOR_DISC: Exempt neighbor discover IPv6 ICMP type-codes from IPsec., 2: FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ICMP: Exempt ICMP from IPsec., 4: FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ROUTER_DISC: Exempt router discover IPv6 ICMP type-codes from IPsec., 8: FW_GLOBAL_CONFIG_IPSEC_EXEMPT_DHCP: Exempt both IPv4 and IPv6 DHCP traffic from IPsec.) | 0 / 1 / 2 / 4 / 8' ) ConfiguredTlsAuthenticationNetworkName = 'String | Optional | Configured Tls Authentication Network Name' DomainProfile_LogMaxFileSize = 'SInt32 | Optional | Log Max File Size' PrivateProfile_AuthAppsAllowUserPrefMerge = 'String | Optional | Auth Apps Allow User Pref Merge (false: AuthAppsAllowUserPrefMerge Off, true: AuthAppsAllowUserPrefMerge On) | false / true' HyperVVMSettings_PrivateProfile_AllowLocalPolicyMerge = 'String | Optional | Hyper-V: Allow Local Policy Merge (false: AllowLocalPolicyMerge Off, true: AllowLocalPolicyMerge On) | false / true' PrivateProfile_DisableInboundNotifications = 'String | Optional | Disable Inbound Notifications (false: Firewall May Display Notification, true: Firewall Must Not Display Notification) | false / true' PrivateProfile_DefaultOutboundAction = 'String | Optional | Default Outbound Action (0: Allow Outbound By Default, 1: Block Outbound By Default) | 0 / 1' } ) FirewallRulesHyperVPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) FirewallRuleName = @( @{ LocalAddressRanges = @( 'String | Optional | Local Address Ranges - Depends on FirewallRuleName' ) RemotePortRanges = @( 'String | Optional | Remote Port Ranges - Depends on FirewallRuleName' ) Direction = 'String | Optional | Direction - Depends on FirewallRuleName (in: The rule applies to inbound traffic., out: The rule applies to outbound traffic.) | in / out' Priority = 'SInt32 | Optional | Priority - Depends on FirewallRuleName' Name = 'String | Optional | Name - Depends on FirewallRuleName' VMCreatorId = 'String | Optional | Target - Depends on FirewallRuleName (wsl: WSL) | wsl' Profiles = @( 'SInt32 | Optional | Profiles - Depends on FirewallRuleName (1: FW_PROFILE_TYPE_DOMAIN: This value represents the profile for networks that are connected to domains., 2: FW_PROFILE_TYPE_STANDARD: This value represents the standard profile for networks. These networks are classified as private by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are behind Network Address Translation (NAT) devices, routers, and other edge devices, and they are in a private location, such as a home or an office. AND FW_PROFILE_TYPE_PRIVATE: This value represents the profile for private networks, which is represented by the same value as that used for FW_PROFILE_TYPE_STANDARD., 4: FW_PROFILE_TYPE_PUBLIC: This value represents the profile for public networks. These networks are classified as public by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are those at airports, coffee shops, and other public places where the peers in the network or the network administrator are not trusted., 2147483647: FW_PROFILE_TYPE_ALL: This value represents all these network sets and any future network sets.) | 1 / 2 / 4 / 2147483647' ) Action = 'String | Optional | Action - Depends on FirewallRuleName (0: Block, 1: Allow) | 0 / 1' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Protocol = 'SInt32 | Optional | Protocol - Depends on FirewallRuleName' RemoteAddressRanges = @( 'String | Optional | Remote Address Ranges - Depends on FirewallRuleName' ) LocalPortRanges = @( 'String | Optional | Local Port Ranges - Depends on FirewallRuleName' ) Enabled = 'String | Optional | Enabled - Depends on FirewallRuleName (0: Disabled, 1: Enabled) | 0 / 1' } ) DisplayName = 'String | Required | Policy name' } ) FirewallRulesPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) FirewallRuleName = @( @{ Direction = 'String | Optional | Direction - Depends on FirewallRuleName (in: The rule applies to inbound traffic., out: The rule applies to outbound traffic.) | in / out' LocalAddressRanges = @( 'String | Optional | Local Address Ranges - Depends on FirewallRuleName' ) Description = 'String | Optional | Description - Depends on FirewallRuleName' InterfaceTypes = @( 'String | Optional | Interface Types - Depends on FirewallRuleName (remoteaccess: RemoteAccess, wireless: Wireless, lan: Lan, mobilebroadband: MobileBroadband, mbb: MBB, all: All) | remoteaccess / wireless / lan / mobilebroadband / mbb / all' ) RemotePortRanges = @( 'String | Optional | Remote Port Ranges - Depends on FirewallRuleName' ) Name = 'String | Optional | Name - Depends on FirewallRuleName' Profiles = @( 'SInt32 | Optional | Network Types - Depends on FirewallRuleName (1: FW_PROFILE_TYPE_DOMAIN: This value represents the profile for networks that are connected to domains., 2: FW_PROFILE_TYPE_STANDARD: This value represents the standard profile for networks. These networks are classified as private by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are behind Network Address Translation (NAT) devices, routers, and other edge devices, and they are in a private location, such as a home or an office. AND FW_PROFILE_TYPE_PRIVATE: This value represents the profile for private networks, which is represented by the same value as that used for FW_PROFILE_TYPE_STANDARD., 4: FW_PROFILE_TYPE_PUBLIC: This value represents the profile for public networks. These networks are classified as public by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are those at airports, coffee shops, and other public places where the peers in the network or the network administrator are not trusted., 2147483647: FW_PROFILE_TYPE_ALL: This value represents all these network sets and any future network sets., -2147483648: FW_PROFILE_TYPE_CURRENT: This value represents the current profiles to which the firewall and advanced security components determine the host is connected at the moment of the call. This value can be specified only in method calls, and it cannot be combined with other flags.) | 1 / 2 / 4 / 2147483647 / -2147483648' ) FilePath = 'String | Optional | File Path - Depends on FirewallRuleName' RemoteAddressDynamicKeywords = @( 'String | Optional | Reusable groups - Depends on FirewallRuleName' ) IcmpTypesAndCodes = @( 'String | Optional | ICMP Types And Codes - Depends on FirewallRuleName' ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' Protocol = 'SInt32 | Optional | Protocol - Depends on FirewallRuleName' RemoteAddressRanges = @( 'String | Optional | Remote Address Ranges - Depends on FirewallRuleName' ) PackageFamilyName = 'String | Optional | Package Family Name - Depends on FirewallRuleName' ServiceName = 'String | Optional | Service Name - Depends on FirewallRuleName' PolicyAppId = 'String | Optional | Policy App Id - Depends on FirewallRuleName' LocalUserAuthorizedList = @( 'String | Optional | Local User Authorized List - Depends on FirewallRuleName' ) LocalPortRanges = @( 'String | Optional | Local Port Ranges - Depends on FirewallRuleName' ) EdgeTraversal = 'String | Optional | Edge Traversal - Depends on FirewallRuleName (0: Disabled, 1: Enabled) | 0 / 1' Enabled = 'String | Optional | Enabled - Depends on FirewallRuleName (0: Disabled, 1: Enabled) | 0 / 1' Type = 'String | Optional | Action - Depends on FirewallRuleName (0: Block, 1: Allow) | 0 / 1' } ) DisplayName = 'String | Required | Policy name' } ) FirewallRulesPoliciesWindows10ConfigMgr = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) FirewallRuleName = @( @{ Direction = 'String | Optional | Direction - Depends on FirewallRuleName (in: The rule applies to inbound traffic., out: The rule applies to outbound traffic.) | in / out' LocalAddressRanges = @( 'String | Optional | Local Address Ranges - Depends on FirewallRuleName' ) Description = 'String | Optional | Description - Depends on FirewallRuleName' InterfaceTypes = @( 'String | Optional | Interface Types - Depends on FirewallRuleName (remoteaccess: RemoteAccess, wireless: Wireless, lan: Lan, mobilebroadband: MobileBroadband, mbb: MBB, all: All) | remoteaccess / wireless / lan / mobilebroadband / mbb / all' ) RemotePortRanges = @( 'String | Optional | Remote Port Ranges - Depends on FirewallRuleName' ) PackageFamilyName = 'String | Optional | Package Family Name - Depends on FirewallRuleName' Profiles = @( 'SInt32 | Optional | Network Types - Depends on FirewallRuleName (1: FW_PROFILE_TYPE_DOMAIN: This value represents the profile for networks that are connected to domains., 2: FW_PROFILE_TYPE_STANDARD: This value represents the standard profile for networks. These networks are classified as private by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are behind Network Address Translation (NAT) devices, routers, and other edge devices, and they are in a private location, such as a home or an office. AND FW_PROFILE_TYPE_PRIVATE: This value represents the profile for private networks, which is represented by the same value as that used for FW_PROFILE_TYPE_STANDARD., 4: FW_PROFILE_TYPE_PUBLIC: This value represents the profile for public networks. These networks are classified as public by the administrators in the server host. The classification happens the first time the host connects to the network. Usually these networks are those at airports, coffee shops, and other public places where the peers in the network or the network administrator are not trusted., 2147483647: FW_PROFILE_TYPE_ALL: This value represents all these network sets and any future network sets., -2147483648: FW_PROFILE_TYPE_CURRENT: This value represents the current profiles to which the firewall and advanced security components determine the host is connected at the moment of the call. This value can be specified only in method calls, and it cannot be combined with other flags.) | 1 / 2 / 4 / 2147483647 / -2147483648' ) Name = 'String | Optional | Name - Depends on FirewallRuleName' FilePath = 'String | Optional | File Path - Depends on FirewallRuleName' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Protocol = 'SInt32 | Optional | Protocol - Depends on FirewallRuleName' RemoteAddressRanges = @( 'String | Optional | Remote Address Ranges - Depends on FirewallRuleName' ) ServiceName = 'String | Optional | Service Name - Depends on FirewallRuleName' LocalUserAuthorizedList = @( 'String | Optional | Local User Authorized List - Depends on FirewallRuleName' ) LocalPortRanges = @( 'String | Optional | Local Port Ranges - Depends on FirewallRuleName' ) EdgeTraversal = 'String | Optional | Edge Traversal - Depends on FirewallRuleName (0: Disabled, 1: Enabled) | 0 / 1' Enabled = 'String | Optional | Enabled - Depends on FirewallRuleName (0: Disabled, 1: Enabled) | 0 / 1' Type = 'String | Optional | Action - Depends on FirewallRuleName (0: Block, 1: Allow) | 0 / 1' } ) DisplayName = 'String | Required | Policy name' } ) MobileAppsMacOSLobApps = @( @{ Id = 'String | Optional | The unique identifier for an entity. Read-only. Inherited from mobileApp object.' Categories = @( @{ DisplayName = 'String | Required | The name of the app category.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' } ) DisplayName = 'String | Required | The admin provided or imported title of the app. Inherited from mobileApp.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MinimumSupportedOperatingSystem = @{ v10_9 = 'Boolean | Optional | Indicates if Mac OS X 10.9 or later is required to install the app.' v10_13 = 'Boolean | Optional | Indicates if Mac OS X 10.13 or later is required to install the app.' v10_8 = 'Boolean | Optional | Indicates if Mac OS X 10.8 or later is required to install the app.' v10_11 = 'Boolean | Optional | Indicates if Mac OS X 10.11 or later is required to install the app.' v10_7 = 'Boolean | Optional | Indicates if Mac OS X 10.7 or later is required to install the app.' v10_10 = 'Boolean | Optional | Indicates if Mac OS X 10.10 or later is required to install the app.' v10_12 = 'Boolean | Optional | Indicates if Mac OS X 10.12 or later is required to install the app.' v10_14 = 'Boolean | Optional | Indicates if Mac OS X 10.14 or later is required to install the app.' v11_0 = 'Boolean | Optional | Indicates if Mac OS X 11.0 or later is required to install the app.' v12_0 = 'Boolean | Optional | Indicates if Mac OS X 12.0 or later is required to install the app.' v10_15 = 'Boolean | Optional | Indicates if Mac OS X 10.15 or later is required to install the app.' v13_0 = 'Boolean | Optional | Indicates if Mac OS X 13.0 or later is required to install the app.' v14_0 = 'Boolean | Optional | Indicates if Mac OS X 14.0 or later is required to install the app.' } BuildNumber = 'String | Optional | The build number of the app.' RoleScopeTagIds = @( 'String | Optional | List of Scope Tag IDs for mobile app.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.mobileAppAssignment' UniqueId = 'String | Required | [Unique ID to identify this specific object]' intent = 'String | Optional | Possible values for the install intent chosen by the admin. | available / required / uninstall / availableWithoutEnrollment' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are: none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) PrivacyInformationUrl = 'String | Optional | The privacy statement Url. Inherited from mobileApp.' ChildApps = @( @{ BuildNumber = 'String | Optional | The build number of the app.' BundleId = 'String | Optional | The bundleId of the app.' VersionNumber = 'String | Optional | The version number of the app.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) InformationUrl = 'String | Optional | The InformationUrl of the app. Inherited from mobileApp.' Notes = 'String | Optional | Notes for the app. Inherited from mobileApp.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Owner = 'String | Optional | The owner of the app. Inherited from mobileApp.' BundleId = 'String | Optional | The bundleId of the app.' Publisher = 'String | Optional | The publisher of the app. Inherited from mobileApp.' InstallAsManaged = 'Boolean | Optional | Install the app as managed. Requires macOS 11.0.' LargeIcon = @{ Value = 'String | Optional | The Base64 encoded string content.' Type = 'String | Optional | Indicates the type of content mime.' } Description = 'String | Optional | The description of the app. Inherited from mobileApp.' IgnoreVersionDetection = 'Boolean | Optional | Whether to ignore the version of the app or not.' VersionNumber = 'String | Optional | The version number of the app.' Developer = 'String | Optional | The dewveloper of the app. Inherited from mobileApp.' IsFeatured = 'Boolean | Optional | The value indicating whether the app is marked as featured by the admin. Inherited from mobileApp.' } ) MobileAppsWindowsOfficeSuiteApps = @( @{ TargetVersion = 'String | Optional | The specific target version of the Office 365 app suite to be deployed.' Id = 'String | Optional | The unique identifier for an entity. Read-only. Inherited from mobileApp object.' ShouldUninstallOlderVersionsOfOffice = 'Boolean | Optional | Indicates whether older versions of Office should be uninstalled when deploying the Office 365 app suite.' Categories = @( @{ DisplayName = 'String | Required | The name of the app category.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' } ) DisplayName = 'String | Required | The admin provided or imported title of the app. Inherited from mobileApp.' UseSharedComputerActivation = 'Boolean | Optional | Indicates whether shared computer activation is used for Office installations.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) LocalesToInstall = @( 'String | Optional | Specifies the locales to be installed when the Office 365 apps are deployed. Uses the standard RFC 5646 format (e.g., ''en-US'', ''fr-FR'').' ) RoleScopeTagIds = @( 'String | Optional | List of Scope Tag IDs for mobile app.' ) UpdateVersion = 'String | Optional | The update version in which the target version is available for the Office 365 app suite.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.mobileAppAssignment' UniqueId = 'String | Required | [Unique ID to identify this specific object]' intent = 'String | Optional | Possible values for the install intent chosen by the admin. | available / required / uninstall / availableWithoutEnrollment' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are: none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) PrivacyInformationUrl = 'String | Optional | The privacy statement Url. Inherited from mobileApp.' Notes = 'String | Optional | Notes for the app. Inherited from mobileApp.' InformationUrl = 'String | Optional | The InformationUrl of the app. Inherited from mobileApp.' AutoAcceptEula = 'Boolean | Optional | Specifies if the EULA is accepted automatically on the end user''s device.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' OfficeConfigurationXml = 'String | Optional | A base64-encoded XML configuration file that specifies Office ProPlus installation settings. Takes precedence over all other properties. When present, this XML file will be used to create the app.' OfficePlatformArchitecture = 'String | Optional | The architecture of the Office installation (e.g., ''X86'', ''X64'', or ''Arm64''). Cannot be changed after creation.' ProductIds = @( 'String | Optional | The Product IDs that represent the Office 365 Suite SKU, such as ''O365ProPlusRetail'' or ''VisioProRetail''.' ) Description = 'String | Optional | The description of the app. Inherited from mobileApp.' ExcludedApps = @{ Teams = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Teams from the installation.' SharePointDesigner = 'Boolean | Optional | Specifies whether to exclude Microsoft Office SharePoint Designer from the installation.' PowerPoint = 'Boolean | Optional | Specifies whether to exclude Microsoft Office PowerPoint from the installation.' Outlook = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Outlook from the installation.' Groove = 'Boolean | Optional | Specifies whether to exclude Microsoft Office OneDrive for Business (Groove) from the installation.' Word = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Word from the installation.' Lync = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Skype for Business (Lync) from the installation.' OneNote = 'Boolean | Optional | Specifies whether to exclude Microsoft Office OneNote from the installation.' OneDrive = 'Boolean | Optional | Specifies whether to exclude Microsoft Office OneDrive from the installation.' Publisher = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Publisher from the installation.' Bing = 'Boolean | Optional | Specifies whether to exclude Microsoft Search (Bing) as the default from the installation.' Visio = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Visio from the installation.' Access = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Access from the installation.' InfoPath = 'Boolean | Optional | Specifies whether to exclude Microsoft Office InfoPath from the installation.' Excel = 'Boolean | Optional | Specifies whether to exclude Microsoft Office Excel from the installation.' } InstallProgressDisplayLevel = 'String | Optional | Specifies the display level of the installation progress for Office apps. Use ''Full'' to display the installation UI, or ''None'' for a silent installation.' IsFeatured = 'Boolean | Optional | The value indicating whether the app is marked as featured by the admin. Inherited from mobileApp.' UpdateChannel = 'String | Optional | Specifies the update channel for the Office 365 app suite, such as ''Current'' or ''Deferred''.' OfficeSuiteAppDefaultFileFormat = 'String | Optional | Specifies the default file format type for Office apps, such as ''OfficeOpenXMLFormat'' or ''OfficeOpenDocumentFormat''.' } ) MobileThreatDefenseConnectors = @( @{ Id = 'String | Required | The unique identifier for an entity. Read-only.' DisplayName = 'String | Optional | The DisplayName of the Mobile Threat Defense Connector partner. NOTE: Hard coded for convenience, not returned by the Graph API.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IosDeviceBlockedOnMissingPartnerData = 'Boolean | Optional | For IOS, set whether Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant.' AndroidMobileApplicationManagementEnabled = 'Boolean | Optional | When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE.' PartnerState = 'String | Optional | Partner state of this tenant.' AllowPartnerToCollectIosApplicationMetadata = 'Boolean | Optional | When TRUE, indicates the Mobile Threat Defense partner may collect metadata about installed applications from Intune for IOS devices. When FALSE, indicates the Mobile Threat Defense partner may not collect metadata about installed applications from Intune for IOS devices. Default value is FALSE.' PartnerUnresponsivenessThresholdInDays = 'UInt32 | Optional | Get or Set days the per tenant tolerance to unresponsiveness for this partner integration.' WindowsEnabled = 'Boolean | Optional | When TRUE, indicates that data from the Mobile Threat Defense partner can be used during compliance evaluations for Windows. When FALSE, it indicates that data from the Mobile Threat Defense partner should not be used during compliance evaluations for Windows. Default value is FALSE.' IosEnabled = 'Boolean | Optional | For IOS, get or set whether data from the Mobile Threat Defense partner should be used during compliance evaluations.' IosMobileApplicationManagementEnabled = 'Boolean | Optional | When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for IOS devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for IOS devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE.' PartnerUnsupportedOSVersionBlocked = 'Boolean | Optional | Get or set whether to block devices on the enabled platforms that do not meet the minimum version requirements of the Mobile Threat Defense partner.' AllowPartnerToCollectIosPersonalApplicationMetadata = 'Boolean | Optional | When TRUE, indicates the Mobile Threat Defense partner may collect metadata about personally installed applications from Intune for IOS devices. When FALSE, indicates the Mobile Threat Defense partner may not collect metadata about personally installed applications from Intune for IOS devices. Default value is FALSE.' AndroidDeviceBlockedOnMissingPartnerData = 'Boolean | Optional | For Android, set whether Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant.' LastHeartbeatDateTime = 'DateTime | Optional | DateTime of last Heartbeat received from the Mobile Threat Defense partner.' MicrosoftDefenderForEndpointAttachEnabled = 'Boolean | Optional | When TRUE, indicates that configuration profile management via Microsoft Defender for Endpoint is enabled. When FALSE, inidicates that configuration profile management via Microsoft Defender for Endpoint is disabled. Default value is FALSE.' AndroidEnabled = 'Boolean | Optional | For Android, set whether data from the Mobile Threat Defense partner should be used during compliance evaluations.' WindowsDeviceBlockedOnMissingPartnerData = 'Boolean | Optional | When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant for Windows. When FALSE, indicates that Intune may make a device compliant without receiving data from the Mobile Threat Defense partner for Windows. Default value is FALSE.' } ) PoliciesSets = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Items = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' dataType = 'String | Optional | The type of policy the item represents.' itemType = 'String | Optional | The type of policy the item represents.' payloadId = 'String | Optional | The group Id of the policy the item represents.' guidedDeploymentTags = @( 'String | Optional | Tags of the guided deployment' ) displayName = 'String | Optional | The collection display name of the policy the item represents' } ) Description = 'String | Optional | Description of the PolicySet.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RoleScopeTags = @( 'String | Optional | RoleScopeTags of the PolicySet' ) GuidedDeploymentTags = @( 'String | Optional | Tags of the guided deployment' ) DisplayName = 'String | Required | DisplayName of the PolicySet.' } ) RoleAssignments = @( @{ Description = 'String | Optional | Description of the Role Assignment.' Id = 'String | Optional | The unique idenfier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the Role exists, absent ensures it is removed. | Present / Absent' ScopeType = 'String | Optional | Specifies the type of scope for a Role Assignment. Default type ''ResourceScope'' allows assignment of ResourceScopes. Possible values are: resourceScope, allDevices, allLicensedUsers, allDevicesAndLicensedUsers.' RoleDefinition = 'String | Optional | The Role Definition Id.' RoleDefinitionDisplayName = 'String | Optional | The Role Definition Displayname.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ResourceScopes = @( 'String | Optional | List of ids of role scope member security groups. These are IDs from Azure Active Directory. Ignored if ScopeType is not ''ResourceScope''' ) Members = @( 'String | Optional | The list of ids of role member security groups. These are IDs from Azure Active Directory.' ) ResourceScopesDisplayNames = @( 'String | Optional | List of DisplayName of role scope member security groups. These are Displayname from Azure Active Directory. Ignored if ScopeType is not ''ResourceScope''' ) MembersDisplayNames = @( 'String | Optional | The list of Displaynames of role member security groups. These are Displaynamnes from Azure Active Directory.' ) DisplayName = 'String | Required | The display or friendly name of the role Assignment.' } ) RoleDefinitions = @( @{ Description = 'String | Optional | Description of the Role definition.' roleScopeTagIds = @( 'String | Optional | Id of the Scope Tags to assign' ) Id = 'String | Optional | The unique idenfier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the Role exists, absent ensures it is removed. | Present / Absent' allowedResourceActions = @( 'String | Optional | List of allowed resource actions' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsBuiltIn = 'Boolean | Optional | Type of Role. Set to True if it is built-in, or set to False if it is a custom role definition.' notAllowedResourceActions = @( 'String | Optional | List of not allowed resource actions' ) DisplayName = 'String | Required | Display Name of the Role definition.' } ) RoleScopeTags = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Description of the Role Scope Tag.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | The display or friendly name of the Role Scope Tag.' } ) SecurityBaselineDefenderForEndpoints = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DeviceSettings = @{ BlockWin32APICallsFromOfficeMacros_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockWebshellCreationForServers = 'String | Optional | Block Webshell creation for Servers - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' BlockProcessCreationsFromPSExecAndWMICommands = 'String | Optional | Block process creations originating from PSExec and WMI commands - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' OSRecoveryPasswordUsageDropDown_Name = 'String | Optional | Configure user storage of BitLocker recovery information: - Depends on OSRecoveryUsage_Name (2: Allow 48-digit recovery password, 1: Require 48-digit recovery password, 0: Do not allow 48-digit recovery password) | 2 / 1 / 0' BlockAllOfficeApplicationsFromCreatingChildProcesses = 'String | Optional | Block all Office applications from creating child processes - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' DeviceEnumerationPolicy = 'String | Optional | Device Enumeration Policy (0: Block all (Most restrictive), 1: Only after log in/screen unlock, 2: Allow all (Least restrictive)) | 0 / 1 / 2' BlockOfficeApplicationsFromCreatingExecutableContent_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) SmartScreenDnsRequestsEnabled = 'String | Optional | Enable Microsoft Defender SmartScreen DNS requests (0: Disabled, 1: Enabled) | 0 / 1' AllowScriptScanning = 'String | Optional | Allow Script Scanning (0: Not allowed., 1: Allowed.) | 0 / 1' OSEncryptionTypeDropDown_Name = 'String | Optional | Select the encryption type: (Device) - Depends on OSEncryptionType_Name (0: Allow user to choose (default), 1: Full encryption, 2: Used Space Only encryption) | 0 / 1 / 2' DeviceInstall_Classes_Deny = 'String | Optional | Prevent installation of devices using drivers that match these device setup classes (0: Disabled, 1: Enabled) | 0 / 1' CloudExtendedTimeout = 'SInt32 | Optional | Cloud Extended Timeout' RequireDeviceEncryption = 'String | Optional | Require Device Encryption (0: Disabled, 1: Enabled) | 0 / 1' AllowWarningForOtherDiskEncryption = 'String | Optional | Allow Warning For Other Disk Encryption (0: Disabled, 1: Enabled) | 0 / 1' EncryptionMethodWithXts_Name = 'String | Optional | Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later) (0: Disabled, 1: Enabled) | 0 / 1' FDVRecoveryPasswordUsageDropDown_Name = 'String | Optional | Configure user storage of BitLocker recovery information: - Depends on FDVRecoveryUsage_Name (2: Allow 48-digit recovery password, 1: Require 48-digit recovery password, 0: Do not allow 48-digit recovery password) | 2 / 1 / 0' BlockExecutableFilesRunningUnlessTheyMeetPrevalenceAgeTrustedListCriterion_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) AllowScanningNetworkFiles = 'String | Optional | Allow Scanning Network Files (0: Not allowed. Turns off scanning of network files., 1: Allowed. Scans network files.) | 0 / 1' AllowIOAVProtection = 'String | Optional | Allow scanning of all downloaded files and attachments (0: Not allowed., 1: Allowed.) | 0 / 1' DeviceInstall_Classes_Deny_List = @( 'String | Optional | Prevented Classes - Depends on DeviceInstall_Classes_Deny' ) EnableSmartScreen = 'String | Optional | Configure Windows Defender SmartScreen (0: Disabled, 1: Enabled) | 0 / 1' UseAdvancedProtectionAgainstRansomware_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockAbuseOfExploitedVulnerableSignedDrivers_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) ConfigureRecoveryPasswordRotation = 'String | Optional | Configure Recovery Password Rotation (0: Refresh off (default), 1: Refresh on for Azure AD-joined devices, 2: Refresh on for both Azure AD-joined and hybrid-joined devices) | 0 / 1 / 2' DisableLocalAdminMerge = 'String | Optional | Disable Local Admin Merge (0: Enable Local Admin Merge, 1: Disable Local Admin Merge) | 0 / 1' PreventSmartScreenPromptOverrideForFiles = 'String | Optional | Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (0: Disabled, 1: Enabled) | 0 / 1' HideExclusionsFromLocalAdmins = 'String | Optional | Hide Exclusions From Local Admins (1: If you enable this setting, local admins will no longer be able to see the exclusion list in Windows Security App or via PowerShell., 0: If you disable or do not configure this setting, local admins will be able to see exclusions in the Windows Security App and via PowerShell.) | 1 / 0' EncryptionMethodWithXtsRdvDropDown_Name = 'String | Optional | Select the encryption method for removable data drives: - Depends on EncryptionMethodWithXts_Name (3: AES-CBC 128-bit (default), 4: AES-CBC 256-bit, 6: XTS-AES 128-bit, 7: XTS-AES 256-bit) | 3 / 4 / 6 / 7' OSEncryptionType_Name = 'String | Optional | Enforce drive encryption type on operating system drives (0: Disabled, 1: Enabled) | 0 / 1' EnablePrebootInputProtectorsOnSlates_Name = 'String | Optional | Enable use of BitLocker authentication requiring preboot keyboard input on slates (0: Disabled, 1: Enabled) | 0 / 1' AllowUserUIAccess = 'String | Optional | Allow User UI Access (0: Not allowed. Prevents users from accessing UI., 1: Allowed. Lets users access UI.) | 0 / 1' BlockAllOfficeApplicationsFromCreatingChildProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) AllowStandardUserEncryption = 'String | Optional | Allow Standard User Encryption - Depends on AllowWarningForOtherDiskEncryption (0: This is the default, when the policy is not set. If current logged on user is a standard user, ''RequireDeviceEncryption'' policy will not try to enable encryption on any drive., 1: ''RequireDeviceEncryption'' policy will try to enable encryption on all fixed drives even if a current logged in user is standard user.) | 0 / 1' AllowRealtimeMonitoring = 'String | Optional | Allow Realtime Monitoring (0: Not allowed. Turns off the real-time monitoring service., 1: Allowed. Turns on and runs the real-time monitoring service.) | 0 / 1' RDVDisableBDE_Name = 'String | Optional | Allow users to suspend and decrypt BitLocker protection on removable data drives (Device) - Depends on RDVConfigureBDE (0: False, 1: True) | 0 / 1' FDVActiveDirectoryBackupDropDown_Name = 'String | Optional | Configure storage of BitLocker recovery information to AD DS: - Depends on FDVRecoveryUsage_Name (1: Backup recovery passwords and key packages, 2: Backup recovery passwords only) | 1 / 2' ScheduleScanTime = 'SInt32 | Optional | Schedule Scan Time' OSHideRecoveryPage_Name = 'String | Optional | Omit recovery options from the BitLocker setup wizard - Depends on OSRecoveryUsage_Name (0: False, 1: True) | 0 / 1' DeviceInstall_Classes_Deny_Retroactive = 'String | Optional | Also apply to matching devices that are already installed. - Depends on DeviceInstall_Classes_Deny (0: False, 1: True) | 0 / 1' IE9SafetyFilterOptions = 'String | Optional | Select SmartScreen Filter mode - Depends on Disable_Managing_Safety_Filter_IE9 (0: Off, 1: On) | 0 / 1' FDVEncryptionTypeDropDown_Name = 'String | Optional | Select the encryption type: (Device) - Depends on FDVEncryptionType_Name (0: Allow user to choose (default), 1: Full encryption, 2: Used Space Only encryption) | 0 / 1 / 2' AllowEmailScanning = 'String | Optional | Allow Email Scanning (0: Not allowed. Turns off email scanning., 1: Allowed. Turns on email scanning.) | 0 / 1' BlockAbuseOfExploitedVulnerableSignedDrivers = 'String | Optional | Block abuse of exploited vulnerable signed drivers (Device) - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' BlockCredentialStealingFromWindowsLocalSecurityAuthoritySubsystem_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockAdobeReaderFromCreatingChildProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) SmartScreenForTrustedDownloadsEnabled = 'String | Optional | Force Microsoft Defender SmartScreen checks on downloads from trusted sources (0: Disabled, 1: Enabled) | 0 / 1' ConfigurePINUsageDropDown_Name = 'String | Optional | Configure TPM startup PIN: - Depends on ConfigureAdvancedStartup_Name (2: Allow startup PIN with TPM, 1: Require startup PIN with TPM, 0: Do not allow startup PIN with TPM) | 2 / 1 / 0' SmartScreenPuaEnabled = 'String | Optional | Configure Microsoft Defender SmartScreen to block potentially unwanted apps (0: Disabled, 1: Enabled) | 0 / 1' SubmitSamplesConsent = 'String | Optional | Submit Samples Consent (0: Always prompt., 1: Send safe samples automatically., 2: Never send., 3: Send all samples automatically.) | 0 / 1 / 2 / 3' EncryptionMethodWithXtsOsDropDown_Name = 'String | Optional | Select the encryption method for operating system drives: - Depends on EncryptionMethodWithXts_Name (3: AES-CBC 128-bit, 4: AES-CBC 256-bit, 6: XTS-AES 128-bit (default), 7: XTS-AES 256-bit) | 3 / 4 / 6 / 7' ScanParameter = 'String | Optional | Scan Parameter (1: Quick scan, 2: Full scan) | 1 / 2' CheckForSignaturesBeforeRunningScan = 'String | Optional | Check For Signatures Before Running Scan (0: Disabled, 1: Enabled) | 0 / 1' FDVDenyWriteAccess_Name = 'String | Optional | Deny write access to fixed drives not protected by BitLocker (0: Disabled, 1: Enabled) | 0 / 1' BlockExecutableContentFromEmailClientAndWebmail = 'String | Optional | Block executable content from email client and webmail - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' RDVEncryptionType_Name = 'String | Optional | Enforce drive encryption type on removable data drives (0: Disabled, 1: Enabled) | 0 / 1' ScheduleQuickScanTime = 'SInt32 | Optional | Schedule Quick Scan Time' FDVAllowDRA_Name = 'String | Optional | Allow data recovery agent - Depends on FDVRecoveryUsage_Name (0: False, 1: True) | 0 / 1' SignatureUpdateInterval = 'SInt32 | Optional | Signature Update Interval' EnableNetworkProtection = 'String | Optional | Enable Network Protection (0: Disabled, 1: Enabled (block mode), 2: Enabled (audit mode)) | 0 / 1 / 2' BlockExecutionOfPotentiallyObfuscatedScripts = 'String | Optional | Block execution of potentially obfuscated scripts - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' BlockWin32APICallsFromOfficeMacros = 'String | Optional | Block Win32 API calls from Office macros - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' BlockOfficeApplicationsFromInjectingCodeIntoOtherProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) OSRecoveryKeyUsageDropDown_Name = 'String | Optional | - Depends on OSRecoveryUsage_Name (2: Allow 256-bit recovery key, 1: Require 256-bit recovery key, 0: Do not allow 256-bit recovery key) | 2 / 1 / 0' Disable_Managing_Safety_Filter_IE9 = 'String | Optional | Prevent managing SmartScreen Filter (0: Disabled, 1: Enabled) | 0 / 1' PreventSmartScreenPromptOverride = 'String | Optional | Prevent bypassing Microsoft Defender SmartScreen prompts for sites (0: Disabled, 1: Enabled) | 0 / 1' RDVAllowBDE_Name = 'String | Optional | Allow users to apply BitLocker protection on removable data drives (Device) - Depends on RDVConfigureBDE (0: False, 1: True) | 0 / 1' PUAProtection = 'String | Optional | PUA Protection (0: PUA Protection off. Windows Defender will not protect against potentially unwanted applications., 1: PUA Protection on. Detected items are blocked. They will show in history along with other threats., 2: Audit mode. Windows Defender will detect potentially unwanted applications, but take no action. You can review information about the applications Windows Defender would have taken action against by searching for events created by Windows Defender in the Event Viewer.) | 0 / 1 / 2' BlockCredentialStealingFromWindowsLocalSecurityAuthoritySubsystem = 'String | Optional | Block credential stealing from the Windows local security authority subsystem - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' EncryptionMethodWithXtsFdvDropDown_Name = 'String | Optional | Select the encryption method for fixed data drives: - Depends on EncryptionMethodWithXts_Name (3: AES-CBC 128-bit, 4: AES-CBC 256-bit, 6: XTS-AES 128-bit (default), 7: XTS-AES 256-bit) | 3 / 4 / 6 / 7' NewSmartScreenLibraryEnabled = 'String | Optional | Enable new SmartScreen library (0: Disabled, 1: Enabled) | 0 / 1' BlockUseOfCopiedOrImpersonatedSystemTools_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) RDVEncryptionTypeDropDown_Name = 'String | Optional | Select the encryption type: (Device) (0: Allow user to choose (default), 1: Full encryption, 2: Used Space Only encryption) | 0 / 1 / 2' CloudBlockLevel = 'String | Optional | Cloud Block Level (0: NotConfigured, 2: High, 4: HighPlus, 6: ZeroTolerance) | 0 / 2 / 4 / 6' AllowFullScanRemovableDriveScanning = 'String | Optional | Allow Full Scan Removable Drive Scanning (0: Not allowed. Turns off scanning on removable drives., 1: Allowed. Scans removable drives.) | 0 / 1' EnablePreBootPinExceptionOnDECapableDevice_Name = 'String | Optional | Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN. (0: Disabled, 1: Enabled) | 0 / 1' BlockProcessCreationsFromPSExecAndWMICommands_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) ConfigureTPMUsageDropDown_Name = 'String | Optional | Configure TPM startup: - Depends on ConfigureAdvancedStartup_Name (2: Allow TPM, 1: Require TPM, 0: Do not allow TPM) | 2 / 1 / 0' BlockExecutionOfPotentiallyObfuscatedScripts_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) AllowOnAccessProtection = 'String | Optional | Allow On Access Protection (0: Not allowed., 1: Allowed.) | 0 / 1' BlockExecutableFilesRunningUnlessTheyMeetPrevalenceAgeTrustedListCriterion = 'String | Optional | Block executable files from running unless they meet a prevalence, age, or trusted list criterion - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' SmartScreenEnabled = 'String | Optional | Configure Microsoft Defender SmartScreen (0: Disabled, 1: Enabled) | 0 / 1' OobeEnableRtpAndSigUpdate = 'String | Optional | Oobe Enable Rtp And Sig Update (1: If you enable this setting, real-time protection and Security Intelligence Updates are enabled during OOBE., 0: If you either disable or do not configure this setting, real-time protection and Security Intelligence Updates during OOBE is not enabled.) | 1 / 0' BlockOfficeCommunicationAppFromCreatingChildProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockUntrustedUnsignedProcessesThatRunFromUSB = 'String | Optional | Block untrusted and unsigned processes that run from USB - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' HideExclusionsFromLocalUsers = 'String | Optional | Hide Exclusions From Local Users (1: If you enable this setting, local users will no longer be able to see the exclusion list in Windows Security App or via PowerShell., 0: If you disable or do not configure this setting, local users will be able to see exclusions in the Windows Security App and via PowerShell.) | 1 / 0' EnableSmartScreenDropdown = 'String | Optional | Pick one of the following settings: (Device) - Depends on EnableSmartScreen (block: Warn and prevent bypass, warn: Warn) | block / warn' BlockJavaScriptOrVBScriptFromLaunchingDownloadedExecutableContent = 'String | Optional | Block JavaScript or VBScript from launching downloaded executable content - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' FDVRecoveryUsage_Name = 'String | Optional | Choose how BitLocker-protected fixed drives can be recovered (0: Disabled, 1: Enabled) | 0 / 1' BlockWebshellCreationForServers_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) FDVRequireActiveDirectoryBackup_Name = 'String | Optional | Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives - Depends on FDVRecoveryUsage_Name (0: False, 1: True) | 0 / 1' OSActiveDirectoryBackup_Name = 'String | Optional | Save BitLocker recovery information to AD DS for operating system drives - Depends on OSRecoveryUsage_Name (0: False, 1: True) | 0 / 1' BlockRebootingMachineInSafeMode = 'String | Optional | [PREVIEW] Block rebooting machine in Safe Mode - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' BlockAdobeReaderFromCreatingChildProcesses = 'String | Optional | Block Adobe Reader from creating child processes - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' ConfigureTPMPINKeyUsageDropDown_Name = 'String | Optional | Configure TPM startup key and PIN: - Depends on ConfigureAdvancedStartup_Name (2: Allow startup key and PIN with TPM, 1: Require startup key and PIN with TPM, 0: Do not allow startup key and PIN with TPM) | 2 / 1 / 0' FDVEncryptionType_Name = 'String | Optional | Enforce drive encryption type on fixed data drives (0: Disabled, 1: Enabled) | 0 / 1' ConfigureNonTPMStartupKeyUsage_Name = 'String | Optional | Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive) - Depends on ConfigureAdvancedStartup_Name (0: False, 1: True) | 0 / 1' ConfigureTPMStartupKeyUsageDropDown_Name = 'String | Optional | Configure TPM startup key: - Depends on ConfigureAdvancedStartup_Name (2: Allow startup key with TPM, 1: Require startup key with TPM, 0: Do not allow startup key with TPM) | 2 / 1 / 0' BlockRebootingMachineInSafeMode_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) OSRequireActiveDirectoryBackup_Name = 'String | Optional | Do not enable BitLocker until recovery information is stored to AD DS for operating system drives - Depends on OSRecoveryUsage_Name (0: False, 1: True) | 0 / 1' RealTimeScanDirection = 'String | Optional | Real Time Scan Direction (0: Monitor all files (bi-directional)., 1: Monitor incoming files., 2: Monitor outgoing files.) | 0 / 1 / 2' EnhancedPIN_Name = 'String | Optional | Allow enhanced PINs for startup (0: Disabled, 1: Enabled) | 0 / 1' RDVDenyWriteAccess_Name = 'String | Optional | Deny write access to removable drives not protected by BitLocker (0: Disabled, 1: Enabled) | 0 / 1' FDVRecoveryKeyUsageDropDown_Name = 'String | Optional | - Depends on FDVRecoveryUsage_Name (2: Allow 256-bit recovery key, 1: Require 256-bit recovery key, 0: Do not allow 256-bit recovery key) | 2 / 1 / 0' RDVCrossOrg = 'String | Optional | Do not allow write access to devices configured in another organization - Depends on RDVDenyWriteAccess_Name (0: False, 1: True) | 0 / 1' FDVActiveDirectoryBackup_Name = 'String | Optional | Save BitLocker recovery information to AD DS for fixed data drives - Depends on FDVRecoveryUsage_Name (0: False, 1: True) | 0 / 1' BlockPersistenceThroughWMIEventSubscription = 'String | Optional | Block persistence through WMI event subscription - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' ConfigureAdvancedStartup_Name = 'String | Optional | Require additional authentication at startup (0: Disabled, 1: Enabled) | 0 / 1' UseAdvancedProtectionAgainstRansomware = 'String | Optional | Use advanced protection against ransomware - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' OSAllowDRA_Name = 'String | Optional | Allow data recovery agent - Depends on OSRecoveryUsage_Name (0: False, 1: True) | 0 / 1' OSRecoveryUsage_Name = 'String | Optional | Choose how BitLocker-protected operating system drives can be recovered (0: Disabled, 1: Enabled) | 0 / 1' OSActiveDirectoryBackupDropDown_Name = 'String | Optional | Configure storage of BitLocker recovery information to AD DS: - Depends on OSRecoveryUsage_Name (1: Store recovery passwords and key packages, 2: Store recovery passwords only) | 1 / 2' BlockExecutableContentFromEmailClientAndWebmail_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockOfficeApplicationsFromInjectingCodeIntoOtherProcesses = 'String | Optional | Block Office applications from injecting code into other processes - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' BlockOfficeCommunicationAppFromCreatingChildProcesses = 'String | Optional | Block Office communication application from creating child processes - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' BlockUseOfCopiedOrImpersonatedSystemTools = 'String | Optional | [PREVIEW] Block use of copied or impersonated system tools - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' ScheduleScanDay = 'String | Optional | Schedule Scan Day (0: Every day, 1: Sunday, 2: Monday, 3: Tuesday, 4: Wednesday, 5: Thursday, 6: Friday, 7: Saturday, 8: No scheduled scan) | 0 / 1 / 2 / 3 / 4 / 5 / 6 / 7 / 8' BlockUntrustedUnsignedProcessesThatRunFromUSB_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockOfficeApplicationsFromCreatingExecutableContent = 'String | Optional | Block Office applications from creating executable content - Depends on AttackSurfaceReductionRules (off: Off, block: Block, audit: Audit, warn: Warn) | off / block / audit / warn' AllowCloudProtection = 'String | Optional | Allow Cloud Protection (0: Not allowed. Turns off the Microsoft Active Protection Service., 1: Allowed. Turns on the Microsoft Active Protection Service.) | 0 / 1' FDVHideRecoveryPage_Name = 'String | Optional | Omit recovery options from the BitLocker setup wizard - Depends on FDVRecoveryUsage_Name (0: False, 1: True) | 0 / 1' RDVConfigureBDE = 'String | Optional | Control use of BitLocker on removable drives (0: Disabled, 1: Enabled) | 0 / 1' BlockJavaScriptOrVBScriptFromLaunchingDownloadedExecutableContent_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) LsaCfgFlags = 'String | Optional | Credential Guard (0: (Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock., 1: (Enabled with UEFI lock) Turns on Credential Guard with UEFI lock., 2: (Enabled without lock) Turns on Credential Guard without UEFI lock.) | 0 / 1 / 2' AllowArchiveScanning = 'String | Optional | Allow Archive Scanning (0: Not allowed. Turns off scanning on archived files., 1: Allowed. Scans the archive files.) | 0 / 1' AllowBehaviorMonitoring = 'String | Optional | Allow Behavior Monitoring (0: Not allowed. Turns off behavior monitoring., 1: Allowed. Turns on real-time behavior monitoring.) | 0 / 1' DisableSafetyFilterOverrideForAppRepUnknown = 'String | Optional | Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet (0: Disabled, 1: Enabled) | 0 / 1' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UserSettings = @{ DisableSafetyFilterOverrideForAppRepUnknown = 'String | Optional | Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet (User) (0: Disabled, 1: Enabled) | 0 / 1' } DisplayName = 'String | Required | Policy name' } ) SecurityBaselineMicrosoft365AppsForEnterprises = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Policy description' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DeviceSettings = @{ L_spdesignexe23 = 'String | Optional | spDesign.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_powerpntexe45 = 'String | Optional | powerpnt.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_pptviewexe116 = 'String | Optional | pptview.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_onenoteexe12 = 'String | Optional | onent.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_mse7exe181 = 'String | Optional | mse7.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_AddonManagement = 'String | Optional | Add-on Management (0: Disabled, 1: Enabled) | 0 / 1' L_Disableusernameandpassword = 'String | Optional | Disable user name and password (0: Disabled, 1: Enabled) | 0 / 1' L_winwordexe133 = 'String | Optional | winword.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_mse7exe111 = 'String | Optional | mse7.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_spdesignexe79 = 'String | Optional | spDesign.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_outlookexe64 = 'String | Optional | outlook.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_outlookexe92 = 'String | Optional | outlook.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_winprojexe48 = 'String | Optional | winproj.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' POL_SG_excel = 'SInt32 | Optional | Excel: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_msaccessexe39 = 'String | Optional | msaccess.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_spdesignexe37 = 'String | Optional | spDesign.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_visioexe103 = 'String | Optional | visio.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_powerpntexe3 = 'String | Optional | powerpnt.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_pptviewexe172 = 'String | Optional | pptview.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_mse7exe55 = 'String | Optional | mse7.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_mse7exe83 = 'String | Optional | mse7.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_onenoteexe166 = 'String | Optional | onent.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_visioexe173 = 'String | Optional | visio.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_visioexe47 = 'String | Optional | visio.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_pptviewexe = 'String | Optional | pptview.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_pptviewexe102 = 'String | Optional | pptview.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' POL_SG_mspub = 'SInt32 | Optional | Publisher: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_mspubexe58 = 'String | Optional | mspub.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_msaccessexe179 = 'String | Optional | msaccess.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_pptviewexe74 = 'String | Optional | pptview.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_mse7exe27 = 'String | Optional | mse7.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_ConsistentMimeHandling = 'String | Optional | Consistent Mime Handling (0: Disabled, 1: Enabled) | 0 / 1' L_outlookexe176 = 'String | Optional | outlook.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_winprojexe76 = 'String | Optional | winproj.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_mse7exe167 = 'String | Optional | mse7.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' POL_SG_winproj = 'SInt32 | Optional | Project: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_mspubexe2 = 'String | Optional | mspub.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_onenoteexe82 = 'String | Optional | onent.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_excelexe29 = 'String | Optional | excel.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_grooveexe154 = 'String | Optional | groove.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_visioexe33 = 'String | Optional | visio.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_excelexe99 = 'String | Optional | excel.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_winwordexe161 = 'String | Optional | winword.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_winprojexe132 = 'String | Optional | winproj.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_powerpntexe73 = 'String | Optional | powerpnt.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_winprojexe20 = 'String | Optional | winproj.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_visioexe75 = 'String | Optional | visio.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_msaccessexe109 = 'String | Optional | msaccess.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' POL_SG_onenote = 'SInt32 | Optional | OneNote: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_excelexe57 = 'String | Optional | excel.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_visioexe159 = 'String | Optional | visio.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_winprojexe = 'String | Optional | winproj.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_exprwdexe94 = 'String | Optional | exprwd.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' POL_SG_visio = 'SInt32 | Optional | Visio: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_mse7exe41 = 'String | Optional | mse7.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_spdesignexe65 = 'String | Optional | spDesign.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_spdesignexe93 = 'String | Optional | spDesign.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' Pol_SecGuide_A001_Block_Flash = 'String | Optional | Block Flash activation in Office documents (0: Disabled, 1: Enabled) | 0 / 1' L_visioexe5 = 'String | Optional | visio.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_winwordexe63 = 'String | Optional | winword.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_msaccessexe137 = 'String | Optional | msaccess.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_excelexe = 'String | Optional | excel.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_exprwdexe136 = 'String | Optional | exprwd.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_PolicyEnableSIPHighSecurityMode = 'String | Optional | Configure SIP security mode (0: Disabled, 1: Enabled) | 0 / 1' L_winwordexe119 = 'String | Optional | winword.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_exprwdexe122 = 'String | Optional | exprwd.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_onenoteexe138 = 'String | Optional | onent.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_winprojexe62 = 'String | Optional | winproj.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_exprwdexe80 = 'String | Optional | exprwd.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_pptviewexe18 = 'String | Optional | pptview.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_onenoteexe124 = 'String | Optional | onent.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' POL_SG_powerpnt = 'SInt32 | Optional | PowerPoint: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_pptviewexe46 = 'String | Optional | pptview.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_powerpntexe101 = 'String | Optional | powerpnt.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_RestrictFileDownload = 'String | Optional | Restrict File Download (0: Disabled, 1: Enabled) | 0 / 1' Pol_SecGuide_Block_Flash = 'String | Optional | Block Flash player in Office (Device) - Depends on Pol_SecGuide_A001_Block_Flash (block all flash activation: Block all activation, block embedded flash activation only: Block embedding/linking, allow other activation, allow all flash activation: Allow all activation) | block all flash activation / block embedded flash activation only / allow all flash activation' L_onenoteexe110 = 'String | Optional | onent.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_powerpntexe31 = 'String | Optional | powerpnt.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_winprojexe104 = 'String | Optional | winproj.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_outlookexe134 = 'String | Optional | outlook.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_winwordexe21 = 'String | Optional | winword.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_grooveexe = 'String | Optional | groove.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_winprojexe160 = 'String | Optional | winproj.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_msaccessexe53 = 'String | Optional | msaccess.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_outlookexe120 = 'String | Optional | outlook.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_mspubexe156 = 'String | Optional | mspub.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_onenoteexe68 = 'String | Optional | onent.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_exprwdexe52 = 'String | Optional | exprwd.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_mspubexe114 = 'String | Optional | mspub.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_onenoteexe96 = 'String | Optional | onent.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_visioexe = 'String | Optional | visio.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_outlookexe = 'String | Optional | outlook.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_grooveexe84 = 'String | Optional | groove.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' POL_SG_winword = 'SInt32 | Optional | Word: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_exprwdexe66 = 'String | Optional | exprwd.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_grooveexe70 = 'String | Optional | groove.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_msaccessexe95 = 'String | Optional | msaccess.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_spdesignexe9 = 'String | Optional | spDesign.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_msaccessexe81 = 'String | Optional | msaccess.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_MimeSniffingSafetyFature = 'String | Optional | Mime Sniffing Safety Feature (0: Disabled, 1: Enabled) | 0 / 1' L_grooveexe98 = 'String | Optional | groove.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_exprwdexe108 = 'String | Optional | exprwd.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_outlookexe50 = 'String | Optional | outlook.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_pptviewexe60 = 'String | Optional | pptview.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_mspubexe128 = 'String | Optional | mspub.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_spdesignexe177 = 'String | Optional | spDesign.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_winwordexe105 = 'String | Optional | winword.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_LocalMachineZoneLockdownSecurity = 'String | Optional | Local Machine Zone Lockdown Security (0: Disabled, 1: Enabled) | 0 / 1' L_powerpntexe129 = 'String | Optional | powerpnt.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_excelexe71 = 'String | Optional | excel.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_spdesignexe51 = 'String | Optional | spDesign.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_Informationbar = 'String | Optional | Information Bar (0: Disabled, 1: Enabled) | 0 / 1' L_winwordexe175 = 'String | Optional | winword.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_excelexe85 = 'String | Optional | excel.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_powerpntexe115 = 'String | Optional | powerpnt.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_excelexe155 = 'String | Optional | excel.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_mspubexe30 = 'String | Optional | mspub.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_winwordexe77 = 'String | Optional | winword.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' Pol_SecGuide_Legacy_JScript = 'String | Optional | Restrict legacy JScript execution for Office (0: Disabled, 1: Enabled) | 0 / 1' L_exprwdexe164 = 'String | Optional | exprwd.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_grooveexe56 = 'String | Optional | groove.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_mse7exe69 = 'String | Optional | mse7.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_winprojexe34 = 'String | Optional | winproj.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_pptviewexe32 = 'String | Optional | pptview.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_exprwdexe10 = 'String | Optional | exprwd.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_ObjectCachingProtection = 'String | Optional | Object Caching Protection (0: Disabled, 1: Enabled) | 0 / 1' L_spdesignexe135 = 'String | Optional | spDesign.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' POL_SG_outlook = 'SInt32 | Optional | Outlook: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_mse7exe97 = 'String | Optional | mse7.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_winprojexe118 = 'String | Optional | winproj.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_visioexe19 = 'String | Optional | visio.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_onenoteexe180 = 'String | Optional | onent.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_grooveexe0 = 'String | Optional | groove.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_exprwdexe38 = 'String | Optional | exprwd.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_mspubexe = 'String | Optional | mspub.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_excelexe169 = 'String | Optional | excel.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_ScriptedWindowSecurityRestrictions = 'String | Optional | Scripted Window Security Restrictions (0: Disabled, 1: Enabled) | 0 / 1' L_PolicyDisableHttpConnect = 'String | Optional | Disable HTTP fallback for SIP connection (0: Disabled, 1: Enabled) | 0 / 1' L_pptviewexe4 = 'String | Optional | pptview.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_grooveexe28 = 'String | Optional | groove.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_outlookexe162 = 'String | Optional | outlook.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_msaccessexe25 = 'String | Optional | msaccess.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_visioexe117 = 'String | Optional | visio.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_SavedfromURL = 'String | Optional | Saved from URL (0: Disabled, 1: Enabled) | 0 / 1' L_spdesignexe121 = 'String | Optional | spDesign.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_winprojexe90 = 'String | Optional | winproj.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_outlookexe8 = 'String | Optional | outlook.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_visioexe89 = 'String | Optional | visio.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_exprwdexe = 'String | Optional | exprwd.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_powerpntexe17 = 'String | Optional | powerpnt.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_spdesignexe107 = 'String | Optional | spDesign.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_winwordexe = 'String | Optional | winword.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_msaccessexe67 = 'String | Optional | msaccess.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_mse7exe13 = 'String | Optional | mse7.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_NavigateURL = 'String | Optional | Navigate URL (0: Disabled, 1: Enabled) | 0 / 1' L_msaccessexe123 = 'String | Optional | msaccess.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_outlookexe36 = 'String | Optional | outlook.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_msaccessexe = 'String | Optional | msaccess.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_grooveexe112 = 'String | Optional | groove.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_winprojexe174 = 'String | Optional | winproj.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_excelexe127 = 'String | Optional | excel.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' POL_SG_msaccess = 'SInt32 | Optional | Access: (Device) - Depends on Pol_SecGuide_Legacy_JScript' L_pptviewexe88 = 'String | Optional | pptview.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_powerpntexe87 = 'String | Optional | powerpnt.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_spDesignexe = 'String | Optional | spDesign.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_onenoteexe40 = 'String | Optional | onent.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_mse7exe125 = 'String | Optional | mse7.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_RestrictActiveXInstall = 'String | Optional | Restrict ActiveX Install (0: Disabled, 1: Enabled) | 0 / 1' L_powerpntexe157 = 'String | Optional | powerpnt.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_onenoteexe54 = 'String | Optional | onent.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_powerpntexe = 'String | Optional | powerpnt.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_outlookexe78 = 'String | Optional | outlook.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_onenoteexe = 'String | Optional | onent.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_outlookexe106 = 'String | Optional | outlook.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_msaccessexe165 = 'String | Optional | msaccess.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_powerpntexe171 = 'String | Optional | powerpnt.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_pptviewexe158 = 'String | Optional | pptview.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_mspubexe44 = 'String | Optional | mspub.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_mspubexe100 = 'String | Optional | mspub.exe (Device) - Depends on L_ProtectionFromZoneElevation (0: False, 1: True) | 0 / 1' L_grooveexe14 = 'String | Optional | groove.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_mse7exe139 = 'String | Optional | mse7.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_excelexe15 = 'String | Optional | excel.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_excelexe1 = 'String | Optional | excel.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_winprojexe6 = 'String | Optional | winproj.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_mspubexe72 = 'String | Optional | mspub.exe (Device) - Depends on L_ObjectCachingProtection (0: False, 1: True) | 0 / 1' L_winwordexe49 = 'String | Optional | winword.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_mspubexe86 = 'String | Optional | mspub.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_mspubexe170 = 'String | Optional | mspub.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_msaccessexe11 = 'String | Optional | msaccess.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_visioexe131 = 'String | Optional | visio.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_spdesignexe163 = 'String | Optional | spDesign.exe (Device) - Depends on L_SavedfromURL (0: False, 1: True) | 0 / 1' L_grooveexe168 = 'String | Optional | groove.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_excelexe113 = 'String | Optional | excel.exe (Device) - Depends on L_Informationbar (0: False, 1: True) | 0 / 1' L_powerpntexe59 = 'String | Optional | powerpnt.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_winwordexe7 = 'String | Optional | winword.exe (Device) - Depends on L_RestrictFileDownload (0: False, 1: True) | 0 / 1' L_pptviewexe130 = 'String | Optional | pptview.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_grooveexe126 = 'String | Optional | groove.exe (Device) - Depends on L_Disableusernameandpassword (0: False, 1: True) | 0 / 1' L_ProtectionFromZoneElevation = 'String | Optional | Protection From Zone Elevation (0: Disabled, 1: Enabled) | 0 / 1' L_mse7exe = 'String | Optional | mse7.exe (Device) - Depends on L_RestrictActiveXInstall (0: False, 1: True) | 0 / 1' L_exprwdexe24 = 'String | Optional | exprwd.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_grooveexe42 = 'String | Optional | groove.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_exprwdexe178 = 'String | Optional | exprwd.exe (Device) - Depends on L_NavigateURL (0: False, 1: True) | 0 / 1' L_outlookexe22 = 'String | Optional | outlook.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_winwordexe91 = 'String | Optional | winword.exe (Device) - Depends on L_ScriptedWindowSecurityRestrictions (0: False, 1: True) | 0 / 1' L_visioexe61 = 'String | Optional | visio.exe (Device) - Depends on L_MimeSniffingSafetyFature (0: False, 1: True) | 0 / 1' L_mspubexe16 = 'String | Optional | mspub.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' L_winwordexe35 = 'String | Optional | winword.exe (Device) - Depends on L_LocalMachineZoneLockdownSecurity (0: False, 1: True) | 0 / 1' L_excelexe43 = 'String | Optional | excel.exe (Device) - Depends on L_ConsistentMimeHandling (0: False, 1: True) | 0 / 1' L_onenoteexe26 = 'String | Optional | onent.exe (Device) - Depends on L_AddonManagement (0: False, 1: True) | 0 / 1' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UserSettings = @{ L_Word2003BinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Word2003BinaryDocumentsAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_SettheAutomationSecuritylevel = 'String | Optional | Set the Automation Security level (User) - Depends on L_AutomationSecurity (3: Disable macros by default, 2: Use application macro security level, 1: Macros enabled (default)) | 3 / 2 / 1' L_Preventusersfromcustomizingattachmentsecuritysettings = 'String | Optional | Prevent users from customizing attachment security settings (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_Protectdocumentmetadataforrightsmanaged = 'String | Optional | Protect document metadata for rights managed Office Open XML Files (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Visio2000Files = 'String | Optional | Visio 2000-2002 Binary Drawings, Templates and Stencils (User) (0: Disabled, 1: Enabled) | 0 / 1' L_NoExtensibilityCustomizationFromDocumentPolicyPublisher = 'String | Optional | Disallow in Publisher (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' MicrosoftProject_Security_TrustCenter_L_AllowTrustedLocationsOnTheNetwork = 'String | Optional | Allow Trusted Locations on the network (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFailsStr3 = 'String | Optional | Checked: Allow edit. Unchecked: Do not allow edit. (User) - Depends on MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails (0: False, 1: True) | 0 / 1' L_DoNotShowAutoRepublishWarningAlert = 'String | Optional | Do not show AutoRepublish warning alert (User) (0: Disabled, 1: Enabled) | 0 / 1' L_ActiveXControlInitializationcolon = 'String | Optional | ActiveX Control Initialization: (User) - Depends on L_ActiveXControlInitialization (1: 1, 2: 2, 3: 3, 4: 4, 5: 5, 6: 6) | 1 / 2 / 3 / 4 / 5 / 6' L_Selectlevel = 'String | Optional | Select level: (User) (4294967295: No Protection, 6: Low (Default), 3: High, 2147483648: Trusted Lists Only) | 4294967295 / 6 / 3 / 2147483648' L_signaturewarning30 = 'String | Optional | Signature Warning (User) (0: Let user decide if they want to be warned, 1: Always warn about invalid signatures, 2: Never warn about invalid signatures) | 0 / 1 / 2' MicrosoftPublisherV2_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned = 'String | Optional | Require that application add-ins are signed by Trusted Publisher (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DeterminewhethertoforceencryptedExcel = 'String | Optional | Scan encrypted macros in Excel Open XML workbooks (User) (0: Disabled, 1: Enabled) | 0 / 1' L_EnableBlockUnsecureQueryFiles = 'String | Optional | Always prevent untrusted Microsoft Query files from opening (User) (0: Disabled, 1: Enabled) | 0 / 1' L_WebContentWarningLevel = 'String | Optional | WEBSERVICE Function Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenterTrustedLocations_L_AllowTrustedLocationsOnTheNetwork = 'String | Optional | Allow Trusted Locations on the network (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftAccess_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Excel4MacrosheetsAndAddInFiles = 'String | Optional | Excel 4 macrosheets and add-in files (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPublisherV2_Security_TrustCenter_L_VBAWarningsPolicy = 'String | Optional | VBA Macro Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftExcel_Security_TrustCenter_L_VBAWarningsPolicy = 'String | Optional | VBA Macro Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehavior = 'String | Optional | Set default file block behavior (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFailsDropID = 'String | Optional | - Depends on MicrosoftWord_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails (0: Block files, 1: Open in Protected View) | 0 / 1' L_LoadControlsinForms3 = 'String | Optional | Load Controls in Forms3 (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DeterminewhethertoforceencryptedExcelDropID = 'String | Optional | - Depends on L_DeterminewhethertoforceencryptedExcel (0: Scan encrypted macros (default), 1: Scan if anti-virus software available, 2: Load macros without scanning) | 0 / 1 / 2' MicrosoftExcel_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned_v2 = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) - Depends on MicrosoftExcel_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned (0: Disabled, 1: Enabled) | 0 / 1' L_OutlookSecurityMode = 'String | Optional | Outlook Security Mode (User) (0: Disabled, 1: Enabled) | 0 / 1' L_empty4 = 'String | Optional | - Depends on MicrosoftExcel_Security_TrustCenter_L_VBAWarningsPolicy (2: Disable VBA macros with notification, 3: Disable VBA macros except digitally signed macros, 4: Disable VBA macros without notification, 1: Enable VBA macros (not recommended)) | 2 / 3 / 4 / 1' L_OOMAddressBook = 'String | Optional | Configure Outlook object model prompt when accessing an address book (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_AuthenticationwithExchangeServer = 'String | Optional | Authentication with Exchange Server (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_Level2RemoveFilePolicy = 'String | Optional | Remove file extensions blocked as Level 2 (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_Donotshowdataextractionoptionswhenopeningcorruptworkbooks = 'String | Optional | Do not show data extraction options when opening corrupt workbooks (User) (0: Disabled, 1: Enabled) | 0 / 1' L_BlockInternet = 'String | Optional | Include Internet in Safe Zones for Automatic Picture Download (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_Visio2000FilesDropID = 'String | Optional | File block setting: (User) - Depends on L_Visio2000Files (0: Do not block, 2: Open/Save blocked) | 0 / 2' L_LoadpicturesfromWebpagesnotcreatedinExcel = 'String | Optional | Load pictures from Web pages not created in Excel (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Level1RemoveFilePolicy = 'String | Optional | Remove file extensions blocked as Level 1 (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_Excel2WorksheetsDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel2Worksheets (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_Forcefileextenstionstomatch_L_Empty = 'String | Optional | - Depends on L_Forcefileextenstionstomatch (0: Allow different, 1: Allow different, but warn, 2: Always match file type) | 0 / 1 / 2' L_Excel3MacrosheetsAndAddInFilesDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel3MacrosheetsAndAddInFiles (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_AllowUsersToLowerAttachments = 'String | Optional | Allow users to demote attachments to Level 2 (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_Excel972003WorkbooksAndTemplates = 'String | Optional | Excel 97-2003 workbooks and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_PowerPoint972003PresentationsShowsTemplatesandAddInFiles = 'String | Optional | PowerPoint 97-2003 presentations, shows, templates and add-in files (User) (0: Disabled, 1: Enabled) | 0 / 1' L_NoExtensibilityCustomizationFromDocumentPolicyWord = 'String | Optional | Disallow in Word (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' L_DisableOutlookobjectmodelscripts = 'String | Optional | Do not allow Outlook object model scripts to run for shared folders (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftAccess_Security_TrustCenterTrustedLocations_L_AllowTrustedLocationsOnTheNetwork = 'String | Optional | Allow Trusted Locations on the network (User) (0: Disabled, 1: Enabled) | 0 / 1' L_XL4KillSwitchPolicy = 'String | Optional | Prevent Excel from running XLM macros (User) (0: Disabled, 1: Enabled) | 0 / 1' L_AllowDDE = 'String | Optional | Dynamic Data Exchange (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftProject_Security_TrustCenter_L_VBAWarningsPolicy = 'String | Optional | VBA Macro Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Minimumencryptionsettings = 'String | Optional | Minimum encryption settings (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_PublisherAutomationSecurityLevel_L_Empty = 'String | Optional | - Depends on L_PublisherAutomationSecurityLevel (1: Low (enabled), 2: By UI (prompted), 3: High (disabled)) | 1 / 2 / 3' MicrosoftExcel_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned = 'String | Optional | Require that application add-ins are signed by Trusted Publisher (User) (0: Disabled, 1: Enabled) | 0 / 1' L_WebPagesAndExcel2003XMLSpreadsheetsDropID = 'String | Optional | File block setting: (User) - Depends on L_WebPagesAndExcel2003XMLSpreadsheets (0: Do not block, 1: Save blocked, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 1 / 2 / 3 / 4 / 5' MicrosoftExcel_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFailsStr3 = 'String | Optional | Checked: Allow edit. Unchecked: Do not allow edit. (User) - Depends on MicrosoftExcel_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails (0: False, 1: True) | 0 / 1' L_Word2AndEarlierBinaryDocumentsAndTemplates = 'String | Optional | Word 2 and earlier binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_NoExtensibilityCustomizationFromDocumentPolicyOutlook = 'String | Optional | Disallow in Outlook (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' L_Word2007AndLaterBinaryDocumentsAndTemplates = 'String | Optional | Word 2007 and later binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DBaseIIIANDIVFiles = 'String | Optional | dBase III / IV files (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehaviorDropID = 'String | Optional | - Depends on MicrosoftPowerPoint_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehavior (0: Blocked files are not opened, 1: Blocked files open in Protected View and can not be edited, 2: Blocked files open in Protected View and can be edited) | 0 / 1 / 2' MicrosoftPowerPoint_Security_TrustCenter_L_BlockMacroExecutionFromInternet = 'String | Optional | Block macros from running in Office files from the Internet (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned_v2 = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) - Depends on MicrosoftPowerPoint_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned (0: Disabled, 1: Enabled) | 0 / 1' L_OOMSend_Setting = 'String | Optional | Guard behavior: (User) (1: Prompt User, 2: Automatically Approve, 0: Automatically Deny, 3: Prompt user based on computer security) | 1 / 2 / 0 / 3' L_Excel4WorkbooksDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel4Workbooks (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_DisableSmartDocumentsuseofmanifests = 'String | Optional | Disable Smart Document''s use of manifests (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_TurnOffProtectedViewForAttachmentsOpenedFromOutlook = 'String | Optional | Turn off Protected View for attachments opened from Outlook (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Visio50AndEarlierFiles = 'String | Optional | Visio 5.0 or earlier Binary Drawings, Templates and Stencils (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Encryptiontypeforpasswordprotectedofficeopen = 'String | Optional | Encryption type for password protected Office Open XML files (User) (0: Disabled, 1: Enabled) | 0 / 1' L_SecurityLevelOutlook = 'String | Optional | Security setting for macros (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_Excel3WorksheetsDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel3Worksheets (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_OnExecuteCustomActionOOM_Setting = 'String | Optional | When executing a custom action: (User) (1: Prompt User, 2: Automatically Approve, 0: Automatically Deny, 3: Prompt user based on computer security) | 1 / 2 / 0 / 3' L_Excel3Worksheets = 'String | Optional | Excel 3 worksheets (User) (0: Disabled, 1: Enabled) | 0 / 1' L_OOMMeetingTaskRequest_Setting = 'String | Optional | Guard behavior: (User) (1: Prompt User, 2: Automatically Approve, 0: Automatically Deny, 3: Prompt user based on computer security) | 1 / 2 / 0 / 3' MicrosoftExcel_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated) (0: Disabled, 1: Enabled) | 0 / 1' L_Encryptiontypecolon = 'String | Optional | Encryption type: (User) - Depends on L_Encryptiontypeforpasswordprotectedofficeopen' L_AllowActiveXOneOffForms = 'String | Optional | Allow Active X One Off Forms (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehaviorDropID = 'String | Optional | - Depends on MicrosoftWord_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehavior (0: Blocked files are not opened, 1: Blocked files open in Protected View and can not be edited, 2: Blocked files open in Protected View and can be edited) | 0 / 1 / 2' L_Visio2003Files = 'String | Optional | Visio 2003-2010 Binary Drawings, Templates and Stencils (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftAccess_Security_TrustCenter_L_BlockMacroExecutionFromInternet = 'String | Optional | Block macros from running in Office files from the Internet (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Excel9597WorkbooksAndTemplates = 'String | Optional | Excel 95-97 workbooks and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word6Pt0BinaryDocumentsAndTemplates = 'String | Optional | Word 6.0 binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DeterminewhethertoforceencryptedpptDropID = 'String | Optional | - Depends on L_Determinewhethertoforceencryptedppt (0: Scan encrypted macros (default), 1: Scan if anti-virus software available, 2: Load macros without scanning) | 0 / 1 / 2' L_AuthenticationFBAEnabledHostsID = 'String | Optional | Specify hosts allowed to show form-based sign-in prompts to users: (User) - Depends on L_AuthenticationFBABehavior' MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_DoNotOpenFilesFromTheInternetZoneInProtectedView = 'String | Optional | Do not open files from the Internet zone in Protected View (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftAccess_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned = 'String | Optional | Require that application add-ins are signed by Trusted Publisher (User) (0: Disabled, 1: Enabled) | 0 / 1' L_OOMSend = 'String | Optional | Configure Outlook object model prompt when sending mail (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftVisio_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned = 'String | Optional | Require that application add-ins are signed by Trusted Publisher (User) (0: Disabled, 1: Enabled) | 0 / 1' L_NoExtensibilityCustomizationFromDocumentPolicyAccess = 'String | Optional | Disallow in Access (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' MicrosoftExcel_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails = 'String | Optional | Set document behavior if file validation fails (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Encryptiontypeforirmcolon = 'String | Optional | IRM Encryption Mode: (User) - Depends on L_Encryptiontypeforirm (1: Cipher Block Chaining (CBC), 2: Electronic Codebook (ECB)) | 1 / 2' L_NoExtensibilityCustomizationFromDocumentPolicy = 'String | Optional | Disable UI extending from documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_EnableScriptsInOneOffForms = 'String | Optional | Allow scripts in one-off Outlook forms (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_RemovedExtensions = 'String | Optional | Removed Extensions: (User)' L_SelecttheauthenticationwithExchangeserver = 'String | Optional | Select the authentication with Exchange server. (User) (9: Kerberos/NTLM Password Authentication, 16: Kerberos Password Authentication, 10: NTLM Password Authentication, 2147545088: Insert a smart card) | 9 / 16 / 10 / 2147545088' L_JunkEmailprotectionlevel = 'String | Optional | Junk E-mail protection level (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_OutlookSecurityPolicy = 'String | Optional | Outlook Security Policy: (User) - Depends on L_OutlookSecurityMode (0: Outlook Default Security, 1: Use Security Form from ''Outlook Security Settings'' Public Folder, 2: Use Security Form from ''Outlook 10 Security Settings'' Public Folder, 3: Use Outlook Security Group Policy) | 0 / 1 / 2 / 3' MicrosoftPublisherV2_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned_v2 = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins (User) - Depends on MicrosoftPublisherV2_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftExcel_Security_L_TurnOffFileValidation = 'String | Optional | Turn off file validation (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Asktoupdateautomaticlinks = 'String | Optional | Ask to update automatic links (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenter_L_VBAWarningsPolicy = 'String | Optional | VBA Macro Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' L_PowerPoint972003PresentationsShowsTemplatesandAddInFilesDropID = 'String | Optional | File block setting: (User) - Depends on L_PowerPoint972003PresentationsShowsTemplatesandAddInFiles (0: Do not block, 1: Save blocked, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 1 / 2 / 3 / 4 / 5' L_ActiveXControlInitialization = 'String | Optional | ActiveX Control Initialization (User) (0: Disabled, 1: Enabled) | 0 / 1' L_AutomationSecurity = 'String | Optional | Automation Security (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftVisio_Security_TrustCenter_L_VBAWarningsPolicy = 'String | Optional | VBA Macro Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Minimumkeysizeinbits = 'SInt32 | Optional | Minimum key size (in bits): (User)' L_Word97BinaryDocumentsAndTemplates = 'String | Optional | Word 97 binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftAccess_Security_TrustCenter_L_VBAWarningsPolicy_L_Empty = 'String | Optional | - Depends on MicrosoftAccess_Security_TrustCenter_L_VBAWarningsPolicy (2: Disable all with notification, 3: Disable all except digitally signed macros, 4: Disable all without notification, 1: Enable all macros (not recommended)) | 2 / 3 / 4 / 1' L_empty3 = 'String | Optional | - Depends on MicrosoftPowerPoint_Security_TrustCenter_L_VBAWarningsPolicy (2: Disable all with notification, 3: Disable all except digitally signed macros, 4: Disable all without notification, 1: Enable all macros (not recommended)) | 2 / 3 / 4 / 1' L_Excel3MacrosheetsAndAddInFiles = 'String | Optional | Excel 3 macrosheets and add-in files (User) (0: Disabled, 1: Enabled) | 0 / 1' L_SecurityLevel = 'String | Optional | Security Level (User) (2: Always warn, 4: Never warn, disable all, 3: Warn for signed, disable unsigned, 1: No security check) | 2 / 4 / 3 / 1' MicrosoftProject_Security_TrustCenter_L_VBAWarningsPolicy_L_Empty = 'String | Optional | - Depends on MicrosoftProject_Security_TrustCenter_L_VBAWarningsPolicy (2: Disable all with notification, 3: Disable all except digitally signed macros, 4: Disable all without notification, 1: Enable all macros (not recommended)) | 2 / 3 / 4 / 1' L_empty29 = 'String | Optional | Sets which ActiveX controls to allow. (0: Load only Outlook Controls, 1: Allows only Safe Controls, 2: Allows all ActiveX Controls) | 0 / 1 / 2' L_NoExtensibilityCustomizationFromDocumentPolicyExcel = 'String | Optional | Disallow in Excel (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' L_Excel4Worksheets = 'String | Optional | Excel 4 worksheets (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DisableAutoRepublish = 'String | Optional | Disable AutoRepublish (User) (0: Disabled, 1: Enabled) | 0 / 1' L_BlockXLLFromInternet = 'String | Optional | Block Excel XLL Add-ins that come from an untrusted source (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftExcel_Security_TrustCenterTrustedLocations_L_AllowTrustedLocationsOnTheNetwork = 'String | Optional | Allow Trusted Locations on the network (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DBaseIIIANDIVFilesDropID = 'String | Optional | File block setting: (User) - Depends on L_DBaseIIIANDIVFiles (0: Do not block, 2: Open/Save blocked, use open policy) | 0 / 2' L_Determinewhethertoforceencryptedppt = 'String | Optional | Scan encrypted macros in PowerPoint Open XML presentations (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenter_L_BlockMacroExecutionFromInternet = 'String | Optional | Block macros from running in Office files from the Internet (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftProject_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned = 'String | Optional | Require that application add-ins are signed by Trusted Publisher (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Encryptiontypeforpasswordprotectedoffice972003 = 'String | Optional | Encryption type for password protected Office 97-2003 files (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Forcefileextenstionstomatch = 'String | Optional | Force file extension to match file type (User) (0: Disabled, 1: Enabled) | 0 / 1' L_MacroRuntimeScanScopeEnum = 'String | Optional | - Depends on L_MacroRuntimeScanScope (0: Disable for all documents, 1: Enable for low trust documents, 2: Enable for all documents) | 0 / 1 / 2' MicrosoftExcel_Security_TrustCenterProtectedView_L_DoNotOpenFilesFromTheInternetZoneInProtectedView = 'String | Optional | Do not open files from the Internet zone in Protected View (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPublisherV2_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins (User) (Deprecated) (0: Disabled, 1: Enabled) | 0 / 1' L_NoExtensibilityCustomizationFromDocumentPolicyPowerPoint = 'String | Optional | Disallow in PowerPoint (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' MicrosoftVisio_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated) (0: Disabled, 1: Enabled) | 0 / 1' L_OOMFormula = 'String | Optional | Configure Outlook object model prompt When accessing the Formula property of a UserProperty object (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_encryptiontypecolon318 = 'String | Optional | Encryption type: (User) - Depends on L_Encryptiontypeforpasswordprotectedoffice972003' MicrosoftPowerPoint_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehavior = 'String | Optional | Set default file block behavior (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word95BinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Word95BinaryDocumentsAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_OOMAddressAccess_Setting = 'String | Optional | Guard behavior: (User) (1: Prompt User, 2: Automatically Approve, 0: Automatically Deny, 3: Prompt user based on computer security) | 1 / 2 / 0 / 3' MicrosoftExcel_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFailsDropID = 'String | Optional | - Depends on MicrosoftExcel_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails (0: Block files, 1: Open in Protected View) | 0 / 1' L_DeterminewhethertoforceencryptedWord = 'String | Optional | Scan encrypted macros in Word Open XML documents (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word2000BinaryDocumentsAndTemplates = 'String | Optional | Word 2000 binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails = 'String | Optional | Set document behavior if file validation fails (User) (0: Disabled, 1: Enabled) | 0 / 1' L_BlockXLLFromInternetEnum = 'String | Optional | - Depends on L_BlockXLLFromInternet (1: Block, 0: Show Additional Warning, 2: Allow) | 1 / 0 / 2' MicrosoftWord_Security_TrustCenterProtectedView_L_DoNotOpenFilesInUnsafeLocationsInProtectedView = 'String | Optional | Do not open files in unsafe locations in Protected View (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftExcel_Security_TrustCenterProtectedView_L_TurnOffProtectedViewForAttachmentsOpenedFromOutlook = 'String | Optional | Turn off Protected View for attachments opened from Outlook (User) (0: Disabled, 1: Enabled) | 0 / 1' L_NoExtensibilityCustomizationFromDocumentPolicyProject = 'String | Optional | Disallow in Project (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' L_PublisherAutomationSecurityLevel = 'String | Optional | Publisher Automation Security Level (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Visio2003FilesDropID = 'String | Optional | File block setting: (User) - Depends on L_Visio2003Files (0: Do not block, 1: Save blocked, 2: Open/Save blocked) | 0 / 1 / 2' MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails = 'String | Optional | Set document behavior if file validation fails (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated) (0: Disabled, 1: Enabled) | 0 / 1' L_DeterminewhethertoforceencryptedWordDropID = 'String | Optional | - Depends on L_DeterminewhethertoforceencryptedWord (0: Scan encrypted macros (default), 1: Scan if anti-virus software available, 2: Load macros without scanning) | 0 / 1 / 2' L_DisableOutlookobjectmodelscriptsforpublicfolders = 'String | Optional | Do not allow Outlook object model scripts to run for public folders (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftExcel_Security_TrustCenterProtectedView_L_DoNotOpenFilesInUnsafeLocationsInProtectedView = 'String | Optional | Do not open files in unsafe locations in Protected View (User) (0: Disabled, 1: Enabled) | 0 / 1' L_OnExecuteCustomActionOOM = 'String | Optional | Set Outlook object model custom actions execution prompt (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_empty31 = 'String | Optional | (0: Use system Default, 1: When online always retreive the CRL, 2: Never retreive the CRL) | 0 / 1 / 2' L_Excel2MacrosheetsAndAddInFiles = 'String | Optional | Excel 2 macrosheets and add-in files (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word97BinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Word97BinaryDocumentsAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_OOMMeetingTaskRequest = 'String | Optional | Configure Outlook object model prompt when responding to meeting and task requests (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_LoadControlsinForms3colon = 'String | Optional | Load Controls in Forms3: (User) - Depends on L_LoadControlsinForms3 (1: 1, 2: 2, 3: 3, 4: 4) | 1 / 2 / 3 / 4' L_empty0 = 'String | Optional | - Depends on MicrosoftPublisherV2_Security_TrustCenter_L_VBAWarningsPolicy (2: Disable all with notification, 3: Disable all except digitally signed macros, 4: Disable all without notification, 1: Enable all macros (not recommended)) | 2 / 3 / 4 / 1' L_DifAndSylkFiles = 'String | Optional | Dif and Sylk files (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftVisio_Security_TrustCenter_L_AllowTrustedLocationsOnTheNetwork = 'String | Optional | Allow Trusted Locations on the network (User) (0: Disabled, 1: Enabled) | 0 / 1' L_RetrievingCRLsCertificateRevocationLists = 'String | Optional | Retrieving CRLs (Certificate Revocation Lists) (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned = 'String | Optional | Require that application add-ins are signed by Trusted Publisher (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DisableallTrustBarnotificationsfor = 'String | Optional | Disable all Trust Bar notifications for security issues (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPublisherV3_Security_TrustCenter_L_BlockMacroExecutionFromInternet = 'String | Optional | Block macros from running in Office files from the internet (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word95BinaryDocumentsAndTemplates = 'String | Optional | Word 95 binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftVisio_Security_TrustCenter_L_VBAWarningsPolicy_L_Empty = 'String | Optional | - Depends on MicrosoftVisio_Security_TrustCenter_L_VBAWarningsPolicy (2: Disable all with notification, 3: Disable all except digitally signed macros, 4: Disable all without notification, 1: Enable all macros (not recommended)) | 2 / 3 / 4 / 1' L_Level1Attachments = 'String | Optional | Display Level 1 attachments (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_RunPrograms_L_Empty = 'String | Optional | - Depends on L_RunPrograms (0: disable (don''t run any programs), 1: enable (prompt user before running), 2: enable all (run without prompting)) | 0 / 1 / 2' L_Enablelinksinemailmessages = 'String | Optional | Allow hyperlinks in suspected phishing e-mail messages (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftProject_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned_v2 = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) - Depends on MicrosoftProject_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned (0: Disabled, 1: Enabled) | 0 / 1' L_SignatureWarning = 'String | Optional | Signature Warning (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_OOMSaveAs_Setting = 'String | Optional | Guard behavior: (User) (1: Prompt User, 2: Automatically Approve, 0: Automatically Deny, 3: Prompt user based on computer security) | 1 / 2 / 0 / 3' L_WebContentWarningLevelValue = 'String | Optional | - Depends on L_WebContentWarningLevel (0: Enable all WEBSERVICE functions (not recommended), 1: Disable all with notification, 2: Disable all without notification) | 0 / 1 / 2' L_DisabletheOfficeclientfrompolling = 'String | Optional | Disable the Office client from polling the SharePoint Server for published links (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DisableStrictVbaRefsSecurityPolicy = 'String | Optional | Disable additional security checks on VBA library references that may refer to unsafe locations on the local machine (User) (0: Disabled, 1: Enabled) | 0 / 1' L_NoExtensibilityCustomizationFromDocumentPolicyInfoPath = 'String | Optional | Disallow in InfoPath (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' L_MacroRuntimeScanScope = 'String | Optional | Macro Runtime Scan Scope (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word2003BinaryDocumentsAndTemplates = 'String | Optional | Word 2003 binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Allowmixofpolicyanduserlocations = 'String | Optional | Allow mix of policy and user locations (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Excel2MacrosheetsAndAddInFilesDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel2MacrosheetsAndAddInFiles (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_Word2AndEarlierBinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Word2AndEarlierBinaryDocumentsAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_NoExtensibilityCustomizationFromDocumentPolicyVisio = 'String | Optional | Disallow in Visio (User) - Depends on L_NoExtensibilityCustomizationFromDocumentPolicy (0: False, 1: True) | 0 / 1' MicrosoftAccess_Security_TrustCenter_L_VBAWarningsPolicy = 'String | Optional | VBA Macro Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' L_DifAndSylkFilesDropID = 'String | Optional | File block setting: (User) - Depends on L_DifAndSylkFiles (0: Do not block, 1: Save blocked, 2: Open/Save blocked, use open policy) | 0 / 1 / 2' L_Excel4MacrosheetsAndAddInFilesDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel4MacrosheetsAndAddInFiles (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_Encryptiontypeforirm = 'String | Optional | Encryption mode for Information Rights Management (IRM) (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word6Pt0BinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Word6Pt0BinaryDocumentsAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_EnableDataBaseFileProtectedView = 'String | Optional | Always open untrusted database files in Protected View (User) (0: Disabled, 1: Enabled) | 0 / 1' L_authenticationFBABehaviorEnum = 'String | Optional | Behavior: (User) - Depends on L_AuthenticationFBABehavior (1: Block all prompts, 2: Ask the user what to do for each new host, 3: Show prompts only from allowed hosts) | 1 / 2 / 3' L_OOMAddressBook_Setting = 'String | Optional | Guard behavior: (User) (1: Prompt User, 2: Automatically Approve, 0: Automatically Deny, 3: Prompt user based on computer security) | 1 / 2 / 0 / 3' L_Word2007AndLaterBinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Word2007AndLaterBinaryDocumentsAndTemplates (0: Do not block, 1: Save blocked, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 1 / 2 / 3 / 4 / 5' L_OOMSaveAs = 'String | Optional | Configure Outlook object model prompt when executing Save As (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_WordXPBinaryDocumentsAndTemplates = 'String | Optional | Word XP binary documents and templates (User) (0: Disabled, 1: Enabled) | 0 / 1' L_AllowVbaIntranetRefs = 'String | Optional | Allow VBA to load typelib references by path from untrusted intranet locations (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned = 'String | Optional | Require that application add-ins are signed by Trusted Publisher (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftExcel_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehaviorDropID = 'String | Optional | - Depends on MicrosoftExcel_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehavior (0: Blocked files are not opened, 1: Blocked files open in Protected View and can not be edited, 2: Blocked files open in Protected View and can be edited) | 0 / 1 / 2' L_empty19 = 'String | Optional | - Depends on MicrosoftWord_Security_TrustCenter_L_VBAWarningsPolicy (2: Disable all with notification, 3: Disable all except digitally signed macros, 4: Disable all without notification, 1: Enable all macros (not recommended)) | 2 / 3 / 4 / 1' L_removedextensions25 = 'String | Optional | Removed Extensions: (User)' MicrosoftExcel_Security_TrustCenterFileBlockSettings_L_SetDefaultFileBlockBehavior = 'String | Optional | Set default file block behavior (User) (0: Disabled, 1: Enabled) | 0 / 1' L_WordXPBinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_WordXPBinaryDocumentsAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_MSGUnicodeformatwhendraggingtofilesystem = 'String | Optional | Use Unicode format when dragging e-mail message to file system (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' L_OOMFormula_Setting = 'String | Optional | Guard behavior: (User) (1: Prompt User, 2: Automatically Approve, 0: Automatically Deny, 3: Prompt user based on computer security) | 1 / 2 / 0 / 3' L_Excel95WorkbooksDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel95Workbooks (0: Do not block, 1: Save blocked, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 1 / 2 / 3 / 4 / 5' L_BasicAuthProxyBehavior = 'String | Optional | Allow Basic Authentication prompts from network proxies (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenterProtectedView_L_DoNotOpenFilesFromTheInternetZoneInProtectedView = 'String | Optional | Do not open files from the Internet zone in Protected View (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Excel4Workbooks = 'String | Optional | Excel 4 workbooks (User) (0: Disabled, 1: Enabled) | 0 / 1' L_EnableRPCEncryption = 'String | Optional | Enable RPC encryption (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenterTrustedLocations_L_AllowTrustedLocationsOnTheNetwork = 'String | Optional | Allow Trusted Locations on the network (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Word2000BinaryDocumentsAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Word2000BinaryDocumentsAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_Visio50AndEarlierFilesDropID = 'String | Optional | File block setting: (User) - Depends on L_Visio50AndEarlierFiles (0: Do not block, 2: Open/Save blocked) | 0 / 2' L_Excel2Worksheets = 'String | Optional | Excel 2 worksheets (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftExcel_Security_TrustCenter_L_BlockMacroExecutionFromInternet = 'String | Optional | Block macros from running in Office files from the Internet (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFailsDropID = 'String | Optional | - Depends on MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails (0: Block files, 1: Open in Protected View) | 0 / 1' MicrosoftWord_Security_TrustCenterProtectedView_L_TurnOffProtectedViewForAttachmentsOpenedFromOutlook = 'String | Optional | Turn off Protected View for attachments opened from Outlook (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFailsStr3 = 'String | Optional | Checked: Allow edit. Unchecked: Do not allow edit. (User) - Depends on MicrosoftWord_Security_TrustCenterProtectedView_L_SetDocumentBehaviorIfFileValidationFails (0: False, 1: True) | 0 / 1' L_AuthenticationFBABehavior = 'String | Optional | Control how Office handles form-based sign-in prompts (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftProject_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated) (0: Disabled, 1: Enabled) | 0 / 1' L_RunPrograms = 'String | Optional | Run Programs (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Excel4WorksheetsDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel4Worksheets (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' L_OOMAddressAccess = 'String | Optional | Configure Outlook object model prompt when reading address information (User) - Depends on L_OutlookSecurityMode (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenter_L_VBAWarningsPolicy = 'String | Optional | VBA Macro Notification Settings (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Excel95Workbooks = 'String | Optional | Excel 95 workbooks (User) (0: Disabled, 1: Enabled) | 0 / 1' L_Excel9597WorkbooksAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel9597WorkbooksAndTemplates (0: Do not block, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 2 / 3 / 4 / 5' MicrosoftPowerPoint_Security_TrustCenterProtectedView_L_DoNotOpenFilesInUnsafeLocationsInProtectedView = 'String | Optional | Do not open files in unsafe locations in Protected View (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_L_TurnOffFileValidation = 'String | Optional | Turn off file validation (User) (0: Disabled, 1: Enabled) | 0 / 1' L_AllowDDEDropID = 'String | Optional | Dynamic Data Exchange setting (User) - Depends on L_AllowDDE (1: Limited Dynamic Data Exchange, 2: Allow Dynamic Data Exchange) | 1 / 2' MicrosoftPowerPoint_Security_L_TurnOffFileValidation = 'String | Optional | Turn off file validation (User) (0: Disabled, 1: Enabled) | 0 / 1' L_WebPagesAndExcel2003XMLSpreadsheets = 'String | Optional | Web pages and Excel 2003 XML spreadsheets (User) (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftWord_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned_v2 = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) - Depends on MicrosoftWord_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned (0: Disabled, 1: Enabled) | 0 / 1' L_Excel972003WorkbooksAndTemplatesDropID = 'String | Optional | File block setting: (User) - Depends on L_Excel972003WorkbooksAndTemplates (0: Do not block, 1: Save blocked, 2: Open/Save blocked, use open policy, 3: Block, 4: Open in Protected View, 5: Allow editing and open in Protected View) | 0 / 1 / 2 / 3 / 4 / 5' MicrosoftVisio_Security_TrustCenter_L_DisableTrustBarNotificationforunsigned_v2 = 'String | Optional | Disable Trust Bar Notification for unsigned application add-ins and block them (User) - Depends on MicrosoftVisio_Security_TrustCenter_L_RequirethatApplicationExtensionsaresigned (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftVisio_Security_TrustCenter_L_BlockMacroExecutionFromInternet = 'String | Optional | Block macros from running in Office files from the Internet (User) (0: Disabled, 1: Enabled) | 0 / 1' } DisplayName = 'String | Required | Policy name' } ) SecurityBaselineMicrosoftEdges = @( @{ InternetExplorerIntegrationReloadInIEModeAllowed = 'String | Optional | Allow unconfigured sites to be reloaded in Internet Explorer mode (0: Disabled, 1: Enabled) | 0 / 1' Description = 'String | Optional | Policy description' BasicAuthOverHttpEnabled = 'String | Optional | Allow Basic authentication for HTTP (0: Disabled, 1: Enabled) | 0 / 1' ExtensionInstallBlocklist = 'String | Optional | Control which extensions cannot be installed (0: Disabled, 1: Enabled) | 0 / 1' ExtensionInstallBlocklistDesc = @( 'String | Optional | Extension IDs the user should be prevented from installing (or * for all) (Device) - Depends on ExtensionInstallBlocklist' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) InsecurePrivateNetworkRequestsAllowed = 'String | Optional | Specifies whether to allow insecure websites to make requests to more-private network endpoints (0: Disabled, 1: Enabled) | 0 / 1' InternetExplorerIntegrationZoneIdentifierMhtFileAllowed = 'String | Optional | Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode (0: Disabled, 1: Enabled) | 0 / 1' DisplayName = 'String | Required | Policy name' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SmartScreenPuaEnabled = 'String | Optional | Configure Microsoft Defender SmartScreen to block potentially unwanted apps (0: Disabled, 1: Enabled) | 0 / 1' SSLErrorOverrideAllowed = 'String | Optional | Allow users to proceed from the HTTPS warning page (0: Disabled, 1: Enabled) | 0 / 1' PreventSmartScreenPromptOverrideForFiles = 'String | Optional | Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (0: Disabled, 1: Enabled) | 0 / 1' TyposquattingCheckerEnabled = 'String | Optional | Configure Edge TyposquattingChecker (0: Disabled, 1: Enabled) | 0 / 1' MicrosoftEdge_HTTPAuthentication_AuthSchemes = 'String | Optional | Supported authentication schemes (0: Disabled, 1: Enabled) | 0 / 1' authschemes = 'String | Optional | (Deprecated) - Supported authentication schemes (Device) - Depends on MicrosoftEdge_HTTPAuthentication_AuthSchemes' EdgeEnhanceImagesEnabled = 'String | Optional | Enhance images enabled (0: Disabled, 1: Enabled) | 0 / 1' AuthSchemes_AuthSchemes = 'String | Optional | Supported authentication schemes (Device) - Depends on MicrosoftEdge_HTTPAuthentication_AuthSchemes' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Entity instance.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' SharedArrayBufferUnrestrictedAccessAllowed = 'String | Optional | Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context (0: Disabled, 1: Enabled) | 0 / 1' SitePerProcess = 'String | Optional | Enable site isolation for every site (0: Disabled, 1: Enabled) | 0 / 1' Id = 'String | Optional | The unique identifier for an entity. Read-only.' SmartScreenEnabled = 'String | Optional | Configure Microsoft Defender SmartScreen (0: Disabled, 1: Enabled) | 0 / 1' BrowserLegacyExtensionPointsBlockingEnabled = 'String | Optional | Enable browser legacy extension point blocking (0: Disabled, 1: Enabled) | 0 / 1' InternetExplorerModeToolbarButtonEnabled = 'String | Optional | Show the Reload in Internet Explorer mode button in the toolbar (0: Disabled, 1: Enabled) | 0 / 1' NativeMessagingUserLevelHosts = 'String | Optional | Allow user-level native messaging hosts (installed without admin permissions) (0: Disabled, 1: Enabled) | 0 / 1' WebSQLAccess = 'String | Optional | Force WebSQL to be enabled (0: Disabled, 1: Enabled) | 0 / 1' PreventSmartScreenPromptOverride = 'String | Optional | Prevent bypassing Microsoft Defender SmartScreen prompts for sites (0: Disabled, 1: Enabled) | 0 / 1' } ) SettingCatalogASRRulesPoliciesWindows10 = @( @{ BlockCredentialStealingFromWindowsLocalSecurityAuthoritySubsystem = 'String | Optional | This rule helps prevent credential stealing by locking down Local Security Authority Subsystem Service (LSASS). | off / block / audit / warn' ControlledFolderAccessProtectedFolders = @( 'String | Optional | List of additional folders that need to be protected' ) BlockOfficeApplicationsFromInjectingCodeIntoOtherProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockAbuseOfExploitedVulnerableSignedDrivers = 'String | Optional | This rule prevents an application from writing a vulnerable signed driver to disk. | off / block / audit / warn' BlockAllOfficeApplicationsFromCreatingChildProcesses = 'String | Optional | This rule blocks Office apps from creating child processes. Office apps include Word, Excel, PowerPoint, OneNote, and Access. | off / block / audit / warn' BlockWin32APICallsFromOfficeMacros_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Display name of the endpoint protection attack surface protection rules policy for Windows 10.' BlockOfficeApplicationsFromCreatingExecutableContent_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) EnableControlledFolderAccess = 'String | Optional | This rule enables Controlled folder access which protects your data by checking apps against a list of known, trusted apps.values 0:disable, 1:enable, 2:audit | 0 / 1 / 2' BlockExecutableFilesRunningUnlessTheyMeetPrevalenceAgeTrustedListCriterion_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) ControlledFolderAccessAllowedApplications = @( 'String | Optional | List of apps that have access to protected folders.' ) BlockProcessCreationsFromPSExecAndWMICommands = 'String | Optional | This rule blocks processes created through PsExec and WMI from running. | off / block / audit / warn' BlockExecutionOfPotentiallyObfuscatedScripts = 'String | Optional | This rule detects suspicious properties within an obfuscated script. | off / block / audit / warn' UseAdvancedProtectionAgainstRansomware_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockCredentialStealingFromWindowsLocalSecurityAuthoritySubsystem_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockUntrustedUnsignedProcessesThatRunFromUSB = 'String | Optional | With this rule, admins can prevent unsigned or untrusted executable files from running from USB removable drives, including SD cards. | off / block / audit / warn' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) BlockExecutableFilesRunningUnlessTheyMeetPrevalenceAgeTrustedListCriterion = 'String | Optional | This rule blocks executable files that don''t meet a prevalence, age, or trusted list criteria, such as .exe, .dll, or .scr, from launching. | off / block / audit / warn' Identity = 'String | Optional | Identity of the endpoint protection attack surface protection rules policy for Windows 10.' BlockUseOfCopiedOrImpersonatedSystemTools = 'String | Optional | This rule blocks the use of executable files that are identified as copies of Windows system tools. These files are either duplicates or impostors of the original system tools. | off / block / audit / warn' BlockUntrustedUnsignedProcessesThatRunFromUSB_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockOfficeCommunicationAppFromCreatingChildProcesses = 'String | Optional | This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions. | off / block / audit / warn' BlockAdobeReaderFromCreatingChildProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockProcessCreationsFromPSExecAndWMICommands_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockOfficeCommunicationAppFromCreatingChildProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockWebshellCreationForServers_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockWin32APICallsFromOfficeMacros = 'String | Optional | This rule prevents VBA macros from calling Win32 APIs. | off / block / audit / warn' BlockRebootingMachineInSafeMode_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed | Present / Absent' AttackSurfaceReductionOnlyExclusions = @( 'String | Optional | Exclude files and paths from attack surface reduction rules' ) BlockUseOfCopiedOrImpersonatedSystemTools_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockAbuseOfExploitedVulnerableSignedDrivers_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockExecutableContentFromEmailClientAndWebmail = 'String | Optional | This rule blocks the following file types from launching from email opened within the Microsoft Outlook application, or Outlook.com and other popular webmail providers. | off / block / audit / warn' BlockAdobeReaderFromCreatingChildProcesses = 'String | Optional | This rule prevents attacks by blocking Adobe Reader from creating processes. | off / block / audit / warn' BlockAllOfficeApplicationsFromCreatingChildProcesses_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions (off: Off, block: Block, audit: Audit, warn: Warn)' ) BlockWebShellCreationForServers = 'String | Optional | This rule blocks webshell creation for servers. | off / block / audit / warn' BlockOfficeApplicationsFromInjectingCodeIntoOtherProcesses = 'String | Optional | This rule blocks code injection attempts from Office apps into other processes. | off / block / audit / warn' BlockOfficeApplicationsFromCreatingExecutableContent = 'String | Optional | This rule prevents Office apps, including Word, Excel, and PowerPoint, from creating potentially malicious executable content, by blocking malicious code from being written to disk. | off / block / audit / warn' Description = 'String | Optional | Description of the endpoint protection attack surface protection rules policy for Windows 10.' UseAdvancedProtectionAgainstRansomware = 'String | Optional | This rule provides an extra layer of protection against ransomware. | off / block / audit / warn' BlockJavaScriptOrVBScriptFromLaunchingDownloadedExecutableContent_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockRebootingMachineInSafeMode = 'String | Optional | This rule prevents the execution of commands to restart machines in Safe Mode. | off / block / audit / warn' BlockJavaScriptOrVBScriptFromLaunchingDownloadedExecutableContent = 'String | Optional | This rule prevents scripts from launching potentially malicious downloaded content. | off / block / audit / warn' BlockExecutableContentFromEmailClientAndWebmail_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockExecutionOfPotentiallyObfuscatedScripts_ASROnlyPerRuleExclusions = @( 'String | Optional | ASR Only Per Rule Exclusions' ) BlockPersistenceThroughWMIEventSubscription = 'String | Optional | This rule prevents malware from abusing WMI to attain persistence on a device. | off / block / audit / warn' } ) SettingCatalogCustomPoliciesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Name = 'String | Required | Policy name' Id = 'String | Optional | The unique identifier for an entity. Read-only.' TemplateReference = @{ TemplateId = 'String | Optional | Template id' TemplateDisplayVersion = 'String | Optional | Template Display Version of the referenced Template. This property is read-only.' TemplateDisplayName = 'String | Optional | Template Display Name of the referenced template. This property is read-only.' TemplateFamily = 'String | Optional | Template Family of the referenced Template. This property is read-only. Possible values are: none, endpointSecurityAntivirus, endpointSecurityDiskEncryption, endpointSecurityFirewall, endpointSecurityEndpointDetectionAndResponse, endpointSecurityAttackSurfaceReduction, endpointSecurityAccountProtection, endpointSecurityApplicationControl, endpointSecurityEndpointPrivilegeManagement, enrollmentConfiguration, appQuietTime, baseline, unknownFutureValue, deviceConfigurationScripts. | none / endpointSecurityAntivirus / endpointSecurityDiskEncryption / endpointSecurityFirewall / endpointSecurityEndpointDetectionAndResponse / endpointSecurityAttackSurfaceReduction / endpointSecurityAccountProtection / endpointSecurityApplicationControl / endpointSecurityEndpointPrivilegeManagement / enrollmentConfiguration / appQuietTime / baseline / unknownFutureValue / deviceConfigurationScripts' } Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Policy description' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Platforms = 'String | Optional | Platforms for this policy. Possible values are: none, android, iOS, macOS, windows10X, windows10, linux, unknownFutureValue. | none / android / iOS / macOS / windows10X / windows10 / linux / unknownFutureValue' Technologies = 'String | Optional | Technologies for this policy. Possible values are: none, mdm, windows10XManagement, configManager, appleRemoteManagement, microsoftSense, exchangeOnline, edgeMAM, linuxMdm, enrollment, endpointPrivilegeManagement, unknownFutureValue. | none / mdm / windows10XManagement / configManager / appleRemoteManagement / microsoftSense / exchangeOnline / linuxMdm / enrollment / endpointPrivilegeManagement / unknownFutureValue' Settings = @( @{ Id = 'String | Optional | The unique identifier for an entity. Read-only.' SettingInstance = @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ SimpleSettingCollectionValue = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } } ) SettingDefinitionId = 'String | Optional | Setting Definition Id' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' ChoiceSettingCollectionValue = @( @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) GroupSettingValue = @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } SettingInstanceTemplateReference = @{ SettingInstanceTemplateId = 'String | Optional | Setting instance template id' } SimpleSettingValue = @{ StringValue = 'String | Optional | Value of the string setting.' ValueState = 'String | Optional | Gets or sets a value indicating the encryption state of the Value property. Possible values are: invalid, notEncrypted, encryptedValueToken. | invalid / notEncrypted / encryptedValueToken' IntValue = 'UInt32 | Optional | Value of the integer setting.' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationIntegerSettingValue / #microsoft.graph.deviceManagementConfigurationStringSettingValue / #microsoft.graph.deviceManagementConfigurationSecretSettingValue' } ChoiceSettingValue = @{ SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } GroupSettingCollectionValue = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingValue / #microsoft.graph.deviceManagementConfigurationGroupSettingValue / #microsoft.graph.deviceManagementConfigurationSimpleSettingValue' Value = 'String | Optional | Choice setting value: an OptionDefinition ItemId.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' SettingValueTemplateReference = @{ useTemplateDefault = 'Boolean | Optional | Indicates whether to update policy setting value to match template setting default value' settingValueTemplateId = 'String | Optional | Setting value template id' } Children = @( @{ odataType = 'String | Optional | The type of the entity. | #microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationChoiceSettingInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationGroupSettingInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupCollectionInstance / #microsoft.graph.deviceManagementConfigurationSettingGroupInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance / #microsoft.graph.deviceManagementConfigurationSimpleSettingInstance' SettingDefinitionId = 'String | Optional | Setting Definition Id' } ) } ) } ) } ) } ) } ) } } ) } ) TrustedRootCertificateAndroidDeviceOwners = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | Id of the Intune policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Admin provided description of the Device Configuration. Inherited from managedDeviceMobileAppConfiguration' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) trustedRootCertificate = 'String | Optional | Trusted Root Certificate.' certFileName = 'String | Optional | File name to display in UI.' DisplayName = 'String | Required | Display name of the Intune policy.' } ) TrustedRootCertificateAndroidEnterprises = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | Id of the Intune policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Admin provided description of the Device Configuration. Inherited from managedDeviceMobileAppConfiguration' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) trustedRootCertificate = 'String | Optional | Trusted Root Certificate.' certFileName = 'String | Optional | File name to display in UI.' DisplayName = 'String | Required | Display name of the Intune policy.' } ) TrustedRootCertificateIOSs = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Id = 'String | Optional | Id of the Intune policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | Admin provided description of the Device Configuration. Inherited from managedDeviceMobileAppConfiguration' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) trustedRootCertificate = 'String | Optional | Trusted Root Certificate.' certFileName = 'String | Optional | File name to display in UI.' DisplayName = 'String | Required | Display name of the Intune policy.' } ) VPNConfigurationPoliciesIOS = @( @{ customData = @( @{ key = 'String | Optional | Key for the custom data entry.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' value = 'String | Optional | Value for the custom data entry.' } ) optInToDeviceIdSharing = 'Boolean | Optional | Opt-In to sharing the device''s Id to third-party vpn clients for use during network access control validation.' Description = 'String | Optional | Description of the Intune policy.' DisplayName = 'String | Required | Display name of the Intune policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) microsoftTunnelSiteId = 'String | Optional | Microsoft Tunnel site ID.' customKeyValueData = @( @{ name = 'String | Optional | Name for the custom data entry.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' value = 'String | Optional | Value for the custom data entry.' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) onDemandRules = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' dnsSearchDomains = @( 'String | Optional | DNS Search Domains.' ) action = 'String | Optional | Action. Possible values are: connect, evaluateConnection, ignore, disconnect. | connect / evaluateConnection / ignore / disconnect' domains = @( 'String | Optional | Domains, Only applicable when Action is evaluate connection.' ) domainAction = 'String | Optional | Domain Action, Only applicable when Action is evaluate connection. Possible values are: connectIfNeeded, neverConnect. | connectIfNeeded / neverConnect' interfaceTypeMatch = 'String | Optional | Network interface to trigger VPN. Possible values are: notConfigured, ethernet, wiFi, cellular. | notConfigured / ethernet / wiFi / cellular' ssids = @( 'String | Optional | Network Service Set Identifiers (SSIDs).' ) dnsServerAddressMatch = @( 'String | Optional | DNS Search Server Address.' ) probeUrl = 'String | Optional | A URL to probe. If this URL is successfully fetched, returning a 200 HTTP status code, without redirection, this rule matches.' probeRequiredUrl = 'String | Optional | Probe Required URL. Only applicable when Action is evaluate connection and DomainAction is connectIfNeeded.' } ) userDomain = 'String | Optional | Zscaler only. Enter a static domain to pre-populate the login field with in the Zscaler app. If this is left empty, the user''s Azure Active Directory domain will be used instead.' disconnectOnIdleTimerInSeconds = 'UInt32 | Optional | The length of time in seconds to wait before disconnecting an on-demand connection. Valid values 0 to 65535 Inherited from appleVpnConfiguration.' safariDomains = @( 'String | Optional | Safari domains when this VPN per App setting is enabled. In addition to the apps associated with this VPN, Safari domains specified here will also be able to trigger this VPN connection.' ) disconnectOnIdle = 'Boolean | Optional | Whether to disconnect after on-demand connection idles Inherited from appleVpnConfiguration' version = 'UInt32 | Optional | Version of the device configuration. Inherited from deviceConfiguration.' authenticationMethod = 'String | Optional | Authentication method for this VPN connection. | certificate / usernameAndPassword / sharedSecret / derivedCredential / azureAD' providerType = 'String | Optional | Provider type for per-app VPN. Inherited from appleVpnConfiguration. Possible values are: notConfigured, appProxy, packetTunnel. | notConfigured / appProxy / packetTunnel' cloudName = 'String | Optional | Zscaler only. Zscaler cloud which the user is assigned to.' excludeList = @( 'String | Optional | Not documented on https://learn.microsoft.com/en-us/graph/api/resources/intune-deviceconfig-applevpnconfiguration?view=graph-rest-beta.' ) enableSplitTunneling = 'Boolean | Optional | Send all network traffic through VPN.' identifier = 'String | Optional | Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin Inherited from appleVpnConfiguration.' loginGroupOrDomain = 'String | Optional | Login group or domain when connection type is set to Dell SonicWALL Mobile Connection. Inherited from appleVpnConfiguration.' targetedMobileApps = @( 'String | Optional | Not documented on https://learn.microsoft.com/en-us/graph/api/resources/intune-deviceconfig-applevpnconfiguration?view=graph-rest-beta.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' proxyServer = @( @{ port = 'UInt32 | Optional | Port. Valid values 0 to 65535.' automaticConfigurationScriptUrl = 'String | Optional | Proxy''s automatic configuration script url.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' address = 'String | Optional | Address.' } ) Id = 'String | Optional | Id of the Intune policy.' excludedDomains = @( 'String | Optional | Domains that are accessed through the public internet instead of through VPN, even when per-app VPN is activated.' ) role = 'String | Optional | Role when connection type is set to Pulse Secure. Inherited from appleVpnConfiguration.' realm = 'String | Optional | Realm when connection type is set to Pulse Secure. Inherited from appleVpnConfiguration.' connectionType = 'String | Optional | Connection type. Possible values are: ciscoAnyConnect, pulseSecure, f5EdgeClient, dellSonicWallMobileConnect, checkPointCapsuleVpn, customVpn, ciscoIPSec, citrix, ciscoAnyConnectV2, paloAltoGlobalProtect, zscalerPrivateAccess, f5Access2018, citrixSso, paloAltoGlobalProtectV2, ikEv2, alwaysOn, microsoftTunnel, netMotionMobility, microsoftProtect. | ciscoAnyConnect / pulseSecure / f5EdgeClient / dellSonicWallMobileConnect / checkPointCapsuleVpn / customVpn / ciscoIPSec / citrix / ciscoAnyConnectV2 / paloAltoGlobalProtect / zscalerPrivateAccess / f5Access2018 / citrixSso / paloAltoGlobalProtectV2 / ikEv2 / alwaysOn / microsoftTunnel / netMotionMobility / microsoftProtect' enablePerApp = 'Boolean | Optional | Setting this to true creates Per-App VPN payload which can later be associated with Apps that can trigger this VPN conneciton on the end user''s iOS device. Inherited from appleVpnConfiguration.' associatedDomains = @( 'String | Optional | Associated Domains. These domains will be linked with the VPN configuration.' ) strictEnforcement = 'Boolean | Optional | Zscaler only. Blocks network traffic until the user signs into Zscaler app. True means traffic is blocked.' connectionName = 'String | Optional | Connection name displayed to the user.' server = @( @{ isDefaultServer = 'Boolean | Optional | Default server.' description = 'String | Optional | Description.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' address = 'String | Optional | Address (IP address, FQDN or URL)' } ) disableOnDemandUserOverride = 'Boolean | Optional | Toggle to prevent user from disabling automatic VPN in the Settings app Inherited from appleVpnConfiguration.' } ) WifiConfigurationPoliciesAndroidDeviceAdministrator = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the Intune Policy.' Id = 'String | Optional | Id of the Intune Policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' WiFiSecurityType = 'String | Optional | Wi-Fi security type. | open / wpaEnterprise / wpa2Enterprise' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Connect when network name is hidden.' NetworkName = 'String | Optional | Network name.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ssid = 'String | Optional | SSID.' ConnectAutomatically = 'Boolean | Optional | Connect automatically.' DisplayName = 'String | Required | Display name of the Intune Policy.' } ) WifiConfigurationPoliciesAndroidEnterpriseDeviceOwner = @( @{ Id = 'String | Optional | Id of the Intune policy' PreSharedKey = 'String | Optional | Pre shared key.' DisplayName = 'String | Required | Disaply name of the Intune policy' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PreSharedKeyIsSet = 'Boolean | Optional | Pre shared key is set.' WiFiSecurityType = 'String | Optional | Type of Wi-Fi profile. | open / wep / wpaPersonal / wpaEnterprise' NetworkName = 'String | Optional | Network name.' Ssid = 'String | Optional | Service Set Identifier. The name of the Wi-Fi connection.' ProxyManualAddress = 'String | Optional | Address of the proxy.' ProxySettings = 'String | Optional | Proxy setting type. | none / manual / automatic' ProxyAutomaticConfigurationUrl = 'String | Optional | URL of the automatic proxy.' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Don''t show this Wi-Fi network on an end-user''s device in the list of available networks. The SSID will not be broadcasted.' ProxyManualPort = 'UInt32 | Optional | Port of the proxy.' Description = 'String | Optional | Description of the Intune policy' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) ConnectAutomatically = 'Boolean | Optional | If the network is in range, automatically connect.' ProxyExclusionList = 'String | Optional | Exclusion list of the proxy.' } ) WifiConfigurationPoliciesAndroidEnterpriseWorkProfile = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the Intune policy.' Id = 'String | Optional | Id of the Intune policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' WiFiSecurityType = 'String | Optional | Wi-Fi security. | open / wpaEnterprise / wpa2Enterprise' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Connect when network name is hidden.' NetworkName = 'String | Optional | Network name.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ssid = 'String | Optional | SSID.' ConnectAutomatically = 'Boolean | Optional | Connect automatically.' DisplayName = 'String | Required | Display name of the Intune policy.' } ) WifiConfigurationPoliciesAndroidForWork = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the Intune policy.' Id = 'String | Optional | Id of the Intune policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' WiFiSecurityType = 'String | Optional | Wi-Fi security | open / wpaEnterprise / wpa2Enterprise' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Connect when network name is hidden' NetworkName = 'String | Optional | Network name' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ssid = 'String | Optional | SSID' ConnectAutomatically = 'Boolean | Optional | Connect automatically' DisplayName = 'String | Required | Display name of the Intune policy.' } ) WifiConfigurationPoliciesAndroidOpenSourceProject = @( @{ PreSharedKeyIsSet = 'Boolean | Optional | Define if the pre-shared key is set.' DisplayName = 'String | Required | Display name of the Intune policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PreSharedKey = 'String | Optional | Define the pre-shared key.' WiFiSecurityType = 'String | Optional | Define the Wifi security type. | open / wep / wpaPersonal / wpaEnterprise' NetworkName = 'String | Optional | Define the network name.' Ssid = 'String | Optional | Define the SSID.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Define if the network should be connected if hidden.' Description = 'String | Optional | Description of the Intune policy.' Id = 'String | Optional | Id of the Intune policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) ConnectAutomatically = 'Boolean | Optional | Connect automatically to the network.' } ) WifiConfigurationPoliciesIOS = @( @{ Id = 'String | Optional | Id of the Intune policy.' DisplayName = 'String | Required | Display name of the Intune policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PreSharedKey = 'String | Optional | Pre shared key' WiFiSecurityType = 'String | Optional | Wi-Fi security | open / wpaPersonal / wpaEnterprise / wep / wpa2Personal / wpa2Enterprise' DisableMacAddressRandomization = 'Boolean | Optional | Disable the MAC address randomization.' NetworkName = 'String | Optional | Network name' Ssid = 'String | Optional | SSID' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ProxySettings = 'String | Optional | Proxy settings | none / manual / automatic' ProxyAutomaticConfigurationUrl = 'String | Optional | Proxy automatic configuration url' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Connect when network name is hidden' ProxyManualPort = 'UInt32 | Optional | Proxy manual port' Description = 'String | Optional | Description of the Intune policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) ConnectAutomatically = 'Boolean | Optional | Connect automatically' ProxyManualAddress = 'String | Optional | Proxy manual address' } ) WifiConfigurationPoliciesMacOS = @( @{ Id = 'String | Optional | Id of the Intune policy.' DisplayName = 'String | Required | Display name of the Intune policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PreSharedKey = 'String | Optional | Pre shared key' WiFiSecurityType = 'String | Optional | Wi-Fi security | open / wpaPersonal / wpaEnterprise / wep / wpa2Personal / wpa2Enterprise' NetworkName = 'String | Optional | Network name' Ssid = 'String | Optional | SSID' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ProxySettings = 'String | Optional | Proxy settings | none / manual / automatic' ProxyAutomaticConfigurationUrl = 'String | Optional | Proxy automatic configuration url' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Connect when network name is hidden' ProxyManualPort = 'UInt32 | Optional | Proxy manual port' Description = 'String | Optional | Description of the Intune policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) ConnectAutomatically = 'Boolean | Optional | Connect automatically' ProxyManualAddress = 'String | Optional | Proxy manual address' } ) WifiConfigurationPoliciesWindows10 = @( @{ Id = 'String | Optional | Id of the Intune policy.' ForceFIPSCompliance = 'Boolean | Optional | Force FIPS compliance' DisplayName = 'String | Required | Display name of the Intune policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MeteredConnectionLimit = 'String | Optional | Metered connection limit | unrestricted / fixed / variable' PreSharedKey = 'String | Optional | Pre shared key' WifiSecurityType = 'String | Optional | Wi-Fi security | open / wpaPersonal / wpaEnterprise / wep / wpa2Personal / wpa2Enterprise' NetworkName = 'String | Optional | Network name' Ssid = 'String | Optional | SSID' ProxyManualAddress = 'String | Optional | Proxy manual address' ConnectWhenNetworkNameIsHidden = 'Boolean | Optional | Connect when network name is hidden' ProxyAutomaticConfigurationUrl = 'String | Optional | Proxy automatic configuration url' ProxySetting = 'String | Optional | Proxy setting | none / manual / automatic' ProxyManualPort = 'UInt32 | Optional | Proxy manual port' Description = 'String | Optional | Description of the Intune policy.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) ConnectAutomatically = 'Boolean | Optional | Connect automatically' ConnectToPreferredNetwork = 'Boolean | Optional | Connect to preferred network' } ) WindowsAutopilotDeploymentProfilesAzureADHybridJoined = @( @{ Description = 'String | Optional | Description of the profile' DisplayName = 'String | Required | Name of the profile' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DeviceNameTemplate = 'String | Optional | The template used to name the AutoPilot Device. This can be a custom text and can also contain either the serial number of the device, or a randomly generated number. The total length of the text generated by the template can be no more than 15 characters.' ExtractHardwareHash = 'Boolean | Optional | HardwareHash Extraction for the profile' EnrollmentStatusScreenSettings = @{ HideInstallationProgress = 'Boolean | Optional | Show or hide installation progress to user' BlockDeviceSetupRetryByUser = 'Boolean | Optional | Allow the user to retry the setup on installation failure' AllowLogCollectionOnInstallFailure = 'Boolean | Optional | Allow or block log collection on installation failure' AllowDeviceUseBeforeProfileAndAppInstallComplete = 'Boolean | Optional | Allow or block user to use device before profile and app installation complete' InstallProgressTimeoutInMinutes = 'UInt32 | Optional | Set installation progress timeout in minutes' CustomErrorMessage = 'String | Optional | Set custom error message to show upon installation failure' AllowDeviceUseOnInstallFailure = 'Boolean | Optional | Allow the user to continue using the device on installation failure' } HybridAzureADJoinSkipConnectivityCheck = 'Boolean | Optional | The Autopilot Hybrid Azure AD join flow will continue even if it does not establish domain controller connectivity during OOBE.' ManagementServiceAppId = 'String | Optional | AzureAD management app ID used during client device-based enrollment discovery' EnableWhiteGlove = 'Boolean | Optional | Enable Autopilot White Glove for the profile.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Language = 'String | Optional | Language configured on the device' DeviceType = 'String | Optional | The AutoPilot device type that this profile is applicable to. Possible values are: windowsPc, surfaceHub2. | windowsPc / surfaceHub2 / holoLens / surfaceHub2S / virtualMachine / unknownFutureValue' OutOfBoxExperienceSettings = @{ HideEULA = 'Boolean | Optional | Show or hide EULA to user' HideEscapeLink = 'Boolean | Optional | If set to true, then the user can''t start over with different account, on company sign-in' HidePrivacySettings = 'Boolean | Optional | Show or hide privacy settings to user' DeviceUsageType = 'String | Optional | AAD join authentication type. Possible values are: singleUser, shared. | singleUser / shared' SkipKeyboardSelectionPage = 'Boolean | Optional | If set, then skip the keyboard selection page if Language and Region are set' UserType = 'String | Optional | Type of user. Possible values are: administrator, standard. | administrator / standard' } } ) WindowsAutopilotDeploymentProfilesAzureADJoined = @( @{ Description = 'String | Optional | Description of the profile' DisplayName = 'String | Required | Name of the profile' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DeviceNameTemplate = 'String | Optional | The template used to name the AutoPilot Device. This can be a custom text and can also contain either the serial number of the device, or a randomly generated number. The total length of the text generated by the template can be no more than 15 characters.' ExtractHardwareHash = 'Boolean | Optional | HardwareHash Extraction for the profile' EnrollmentStatusScreenSettings = @{ HideInstallationProgress = 'Boolean | Optional | Show or hide installation progress to user' BlockDeviceSetupRetryByUser = 'Boolean | Optional | Allow the user to retry the setup on installation failure' AllowLogCollectionOnInstallFailure = 'Boolean | Optional | Allow or block log collection on installation failure' AllowDeviceUseBeforeProfileAndAppInstallComplete = 'Boolean | Optional | Allow or block user to use device before profile and app installation complete' InstallProgressTimeoutInMinutes = 'UInt32 | Optional | Set installation progress timeout in minutes' CustomErrorMessage = 'String | Optional | Set custom error message to show upon installation failure' AllowDeviceUseOnInstallFailure = 'Boolean | Optional | Allow the user to continue using the device on installation failure' } ManagementServiceAppId = 'String | Optional | AzureAD management app ID used during client device-based enrollment discovery' EnableWhiteGlove = 'Boolean | Optional | Enable Autopilot White Glove for the profile.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' Language = 'String | Optional | Language configured on the device' DeviceType = 'String | Optional | The AutoPilot device type that this profile is applicable to. Possible values are: windowsPc, surfaceHub2. | windowsPc / surfaceHub2 / holoLens / surfaceHub2S / virtualMachine / unknownFutureValue' OutOfBoxExperienceSettings = @{ HideEULA = 'Boolean | Optional | Show or hide EULA to user' HideEscapeLink = 'Boolean | Optional | If set to true, then the user can''t start over with different account, on company sign-in' HidePrivacySettings = 'Boolean | Optional | Show or hide privacy settings to user' DeviceUsageType = 'String | Optional | AAD join authentication type. Possible values are: singleUser, shared. | singleUser / shared' SkipKeyboardSelectionPage = 'Boolean | Optional | If set, then skip the keyboard selection page if Language and Region are set' UserType = 'String | Optional | Type of user. Possible values are: administrator, standard. | administrator / standard' } } ) WindowsInformationProtectionPoliciesWindows10MdmEnrolled = @( @{ Description = 'String | Optional | The policy''s description.' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Policy display name.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EnterpriseProxyServersAreAuthoritative = 'Boolean | Optional | Boolean value that tells the client to accept the configured list of proxies and not try to detect other work proxies. Default is false' SmbAutoEncryptedFileExtensions = @( @{ DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Resources = @( 'String | Optional | Collection of resources' ) } ) ProtectionUnderLockConfigRequired = 'Boolean | Optional | Specifies whether the protection under lock feature (also known as encrypt under pin) should be configured' EnforcementLevel = 'String | Optional | WIP enforcement level.See the Enum definition for supported values. Possible values are: noProtection, encryptAndAuditOnly, encryptAuditAndPrompt, encryptAuditAndBlock. | noProtection / encryptAndAuditOnly / encryptAuditAndPrompt / encryptAuditAndBlock' EnterpriseDomain = 'String | Optional | Primary enterprise domain' EnterpriseNetworkDomainNames = @( @{ DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Resources = @( 'String | Optional | Collection of resources' ) } ) EnterpriseInternalProxyServers = @( @{ DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Resources = @( 'String | Optional | Collection of resources' ) } ) RevokeOnUnenrollDisabled = 'Boolean | Optional | This policy controls whether to revoke the WIP keys when a device unenrolls from the management service. If set to 1 (Don''t revoke keys), the keys will not be revoked and the user will continue to have access to protected files after unenrollment. If the keys are not revoked, there will be no revoked file cleanup subsequently.' RightsManagementServicesTemplateId = 'String | Optional | TemplateID GUID to use for RMS encryption. The RMS template allows the IT admin to configure the details about who has access to RMS-protected file and how long they have access' DataRecoveryCertificate = @{ Description = 'String | Optional | Data recovery Certificate description' SubjectName = 'String | Optional | Data recovery Certificate subject name' ExpirationDateTime = 'String | Optional | Data recovery Certificate expiration datetime' Certificate = 'String | Optional | Data recovery Certificate' } Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' EnterpriseProxiedDomains = @( @{ ProxiedDomains = @( @{ Proxy = 'String | Optional | Proxy IP or FQDN' UniqueId = 'String | Required | [Unique ID to identify this specific object]' IpAddressOrFQDN = 'String | Optional | The IP address or FQDN' } ) DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' NeutralDomainResources = @( @{ DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Resources = @( 'String | Optional | Collection of resources' ) } ) EnterpriseProxyServers = @( @{ DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Resources = @( 'String | Optional | Collection of resources' ) } ) ExemptApps = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' BinaryVersionLow = 'String | Optional | The lower binary version.' Description = 'String | Optional | The app''s description.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsInformationProtectionDesktopApp / #microsoft.graph.windowsInformationProtectionStoreApp' BinaryName = 'String | Optional | The binary name.' BinaryVersionHigh = 'String | Optional | The high binary version.' Denied = 'Boolean | Optional | If true, app is denied protection or exemption.' PublisherName = 'String | Optional | The publisher name' ProductName = 'String | Optional | The product name.' DisplayName = 'String | Optional | App display name.' } ) AzureRightsManagementServicesAllowed = 'Boolean | Optional | Specifies whether to allow Azure RMS encryption for WIP' EnterpriseIPRangesAreAuthoritative = 'Boolean | Optional | Boolean value that tells the client to accept the configured list and not to use heuristics to attempt to find other subnets. Default is false' IconsVisible = 'Boolean | Optional | Determines whether overlays are added to icons for WIP protected files in Explorer and enterprise only app tiles in the Start menu. Starting in Windows 10, version 1703 this setting also configures the visibility of the WIP icon in the title bar of a WIP-protected app' EnterpriseProtectedDomainNames = @( @{ DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Resources = @( 'String | Optional | Collection of resources' ) } ) ProtectedApps = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' BinaryVersionLow = 'String | Optional | The lower binary version.' Description = 'String | Optional | The app''s description.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsInformationProtectionDesktopApp / #microsoft.graph.windowsInformationProtectionStoreApp' BinaryName = 'String | Optional | The binary name.' BinaryVersionHigh = 'String | Optional | The high binary version.' Denied = 'Boolean | Optional | If true, app is denied protection or exemption.' PublisherName = 'String | Optional | The publisher name' ProductName = 'String | Optional | The product name.' DisplayName = 'String | Optional | App display name.' } ) EnterpriseIPRanges = @( @{ DisplayName = 'String | Optional | Display name' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Ranges = @( @{ CidrAddress = 'String | Optional | IPv4 address in CIDR notation. Not nullable.' UpperAddress = 'String | Optional | Upper address.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' LowerAddress = 'String | Optional | Lower address.' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.iPv4CidrRange / #microsoft.graph.iPv6CidrRange / #microsoft.graph.iPv4Range / #microsoft.graph.iPv6Range' } ) } ) IndexingEncryptedStoresOrItemsBlocked = 'Boolean | Optional | This switch is for the Windows Search Indexer, to allow or disallow indexing of items' } ) WindowsUpdateForBusinessDriverUpdateProfilesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | Description of the Intune policy.' RoleScopeTagIds = @( 'String | Optional | List of Scope Tag IDs for the Driver Update entity.' ) Id = 'String | Optional | Id of the Intune policy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ApprovalType = 'String | Optional | Driver update profile approval type. For example, manual or automatic approval. Possible values are: manual, automatic. | manual / automatic' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DeploymentDeferralInDays = 'UInt32 | Optional | Deployment deferral settings in days, only applicable when ApprovalType is set to automatic approval.' DisplayName = 'String | Required | Display name of the Intune policy.' } ) WindowsUpdateForBusinessFeatureUpdateProfilesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Id = 'String | Optional | The unique identifier for an entity. Read-only.' RolloutSettings = @{ OfferEndDateTimeInUTC = 'String | Optional | The feature update''s ending of release date and time to be set, update, and displayed for a feature Update profile for example: 2020-06-09T10:00:00Z.' OfferStartDateTimeInUTC = 'String | Optional | The feature update''s starting date and time to be set, update, and displayed for a feature Update profile for example: 2020-06-09T10:00:00Z.' OfferIntervalInDays = 'UInt32 | Optional | The number of day(s) between each set of offers to be set, updated, and displayed for a feature update profile, for example: if OfferStartDateTimeInUTC is 2020-06-09T10:00:00Z, and OfferIntervalInDays is 1, then the next two sets of offers will be made consecutively on 2020-06-10T10:00:00Z (next day at the same specified time) and 2020-06-11T10:00:00Z (next next day at the same specified time) with 1 day in between each set of offers.' } InstallLatestWindows10OnWindows11IneligibleDevice = 'Boolean | Optional | If true, the latest Microsoft Windows 10 update will be installed on devices ineligible for Microsoft Windows 11. Cannot be changed after creation of the policy.' Description = 'String | Optional | The description of the profile which is specified by the user.' FeatureUpdateVersion = 'String | Optional | The feature update version that will be deployed to the devices targeted by this profile. The version could be any supported version for example 1709, 1803 or 1809 and so on.' InstallFeatureUpdatesOptional = 'Boolean | Optional | If true, the Windows 11 update will become optional' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | The display name of the profile.' } ) WindowsUpdateForBusinessQualityUpdateProfilesWindows10 = @( @{ Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) Description = 'String | Optional | The description of the profile.' RoleScopeTagIds = @( 'String | Optional | List of Scope Tags for this Quality Update entity.' ) Id = 'String | Optional | The unique identifier for an entity. Read-only.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' ExpeditedUpdateSettings = @{ QualityUpdateRelease = 'String | Optional | The release date to identify a quality update. Format is yyyy-MM-ddT00:00:00Z.' DaysUntilForcedReboot = 'UInt32 | Optional | The number of days after installation that forced reboot will happen. Must be in range from 0 to 2.' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisplayName = 'String | Required | The display name for the profile.' } ) WindowsUpdateForBusinessRingUpdateProfilesWindows10 = @( @{ PostponeRebootUntilAfterDeadline = 'Boolean | Optional | When TRUE the device should wait until deadline for rebooting outside of active hours. When FALSE the device should not wait until deadline for rebooting outside of active hours. Returned by default. Query parameters are not supported.' AutomaticUpdateMode = 'String | Optional | The Automatic Update Mode. Possible values are: UserDefined, NotifyDownload, AutoInstallAtMaintenanceTime, AutoInstallAndRebootAtMaintenanceTime, AutoInstallAndRebootAtScheduledTime, AutoInstallAndRebootWithoutEndUserControl, WindowsDefault. UserDefined is the default value, no intent. Returned by default. Query parameters are not supported. Possible values are: userDefined, notifyDownload, autoInstallAtMaintenanceTime, autoInstallAndRebootAtMaintenanceTime, autoInstallAndRebootAtScheduledTime, autoInstallAndRebootWithoutEndUserControl, windowsDefault. | userDefined / notifyDownload / autoInstallAtMaintenanceTime / autoInstallAndRebootAtMaintenanceTime / autoInstallAndRebootAtScheduledTime / autoInstallAndRebootWithoutEndUserControl / windowsDefault' Description = 'String | Optional | Admin provided description of the Device Configuration.' QualityUpdatesRollbackStartDateTime = 'String | Optional | The Quality Updates Rollback Start datetime. This value is the time when the admin rolled back the Quality update for the ring. Returned by default. Query parameters are not supported.' UserPauseAccess = 'String | Optional | Specifies whether to enable end user''s access to pause software updates. Possible values are: NotConfigured, Enabled, Disabled. Returned by default. Query parameters are not supported. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' Assignments = @( @{ groupId = 'String | Optional | The group Id that is the target of the assignment.' collectionId = 'String | Optional | The collection Id that is the target of the assignment.(ConfigMgr)' dataType = 'String | Optional | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget / #microsoft.graph.allLicensedUsersAssignmentTarget / #microsoft.graph.allDevicesAssignmentTarget / #microsoft.graph.exclusionGroupAssignmentTarget / #microsoft.graph.configurationManagerCollectionAssignmentTarget' UniqueId = 'String | Required | [Unique ID to identify this specific object]' deviceAndAppManagementAssignmentFilterId = 'String | Optional | The Id of the filter for the target assignment.' deviceAndAppManagementAssignmentFilterType = 'String | Optional | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none / include / exclude' groupDisplayName = 'String | Optional | The group Display Name that is the target of the assignment.' } ) DisplayName = 'String | Required | Admin provided name of the device configuration.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DeadlineGracePeriodInDays = 'UInt32 | Optional | Number of days after deadline until restarts occur automatically with valid range from 0 to 7 days. Returned by default. Query parameters are not supported.' UserWindowsUpdateScanAccess = 'String | Optional | Specifies whether to disable user''s access to scan Windows Update. Possible values are: NotConfigured, Enabled, Disabled. Returned by default. Query parameters are not supported. Possible values are: notConfigured, enabled, disabled. | notConfigured / enabled / disabled' AutoRestartNotificationDismissal = 'String | Optional | Specify the method by which the auto-restart required notification is dismissed. Possible values are: NotConfigured, Automatic, User. Returned by default. Query parameters are not supported. Possible values are: notConfigured, automatic, user, unknownFutureValue. | notConfigured / automatic / user / unknownFutureValue' InstallationSchedule = @{ ActiveHoursStart = 'String | Optional | Active Hours Start' ScheduledInstallTime = 'String | Optional | Scheduled Install Time during day' ScheduledInstallDay = 'String | Optional | Scheduled Install Day in week. Possible values are: userDefined, everyday, sunday, monday, tuesday, wednesday, thursday, friday, saturday, noScheduledScan. | userDefined / everyday / sunday / monday / tuesday / wednesday / thursday / friday / saturday / noScheduledScan' ActiveHoursEnd = 'String | Optional | Active Hours End' odataType = 'String | Optional | The type of the entity. | #microsoft.graph.windowsUpdateActiveHoursInstall / #microsoft.graph.windowsUpdateScheduledInstall' } AllowWindows11Upgrade = 'Boolean | Optional | When TRUE, allows eligible Windows 10 devices to upgrade to Windows 11. When FALSE, implies the device stays on the existing operating system. Returned by default. Query parameters are not supported.' UpdateNotificationLevel = 'String | Optional | Specifies what Windows Update notifications users see. Possible values are: NotConfigured, DefaultNotifications, RestartWarningsOnly, DisableAllNotifications. Returned by default. Query parameters are not supported. Possible values are: notConfigured, defaultNotifications, restartWarningsOnly, disableAllNotifications, unknownFutureValue. | notConfigured / defaultNotifications / restartWarningsOnly / disableAllNotifications / unknownFutureValue' FeatureUpdatesRollbackStartDateTime = 'String | Optional | The Feature Updates Rollback Start datetime.This value is the time when the admin rolled back the Feature update for the ring.Returned by default.Query parameters are not supported.' QualityUpdatesDeferralPeriodInDays = 'UInt32 | Optional | Defer Quality Updates by these many days with valid range from 0 to 30 days. Returned by default. Query parameters are not supported.' FeatureUpdatesPaused = 'Boolean | Optional | When TRUE, assigned devices are paused from receiving feature updates for up to 35 days from the time you pause the ring. When FALSE, does not pause Feature Updates. Returned by default. Query parameters are not supported.s' PrereleaseFeatures = 'String | Optional | The Pre-Release Features. Possible values are: UserDefined, SettingsOnly, SettingsAndExperimentations, NotAllowed. UserDefined is the default value, no intent. Returned by default. Query parameters are not supported. Possible values are: userDefined, settingsOnly, settingsAndExperimentations, notAllowed. | userDefined / settingsOnly / settingsAndExperimentations / notAllowed' FeatureUpdatesPauseExpiryDateTime = 'String | Optional | The Feature Updates Pause Expiry datetime. This value is 35 days from the time admin paused or extended the pause for the ring. Returned by default. Query parameters are not supported.' BusinessReadyUpdatesOnly = 'String | Optional | Determines which branch devices will receive their updates from. Possible values are: UserDefined, All, BusinessReadyOnly, WindowsInsiderBuildFast, WindowsInsiderBuildSlow, WindowsInsiderBuildRelease. Returned by default. Query parameters are not supported. Possible values are: userDefined, all, businessReadyOnly, windowsInsiderBuildFast, windowsInsiderBuildSlow, windowsInsiderBuildRelease. | userDefined / all / businessReadyOnly / windowsInsiderBuildFast / windowsInsiderBuildSlow / windowsInsiderBuildRelease' EngagedRestartTransitionScheduleInDays = 'UInt32 | Optional | Number of days before transitioning from Auto Restarts scheduled outside of active hours to Engaged Restart, which requires the user to schedule, with valid range from 0 to 30 days. Returned by default. Query parameters are not supported.' QualityUpdatesPauseStartDate = 'String | Optional | The Quality Updates Pause start date. This value is the time when the admin paused or extended the pause for the ring. Returned by default. Query parameters are not supported. This property is read-only.' UpdateWeeks = 'String | Optional | Schedule the update installation on the weeks of the month. Possible values are: UserDefined, FirstWeek, SecondWeek, ThirdWeek, FourthWeek, EveryWeek. Returned by default. Query parameters are not supported. Possible values are: userDefined, firstWeek, secondWeek, thirdWeek, fourthWeek, everyWeek, unknownFutureValue. | userDefined / firstWeek / secondWeek / thirdWeek / fourthWeek / everyWeek / unknownFutureValue' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DeadlineForFeatureUpdatesInDays = 'UInt32 | Optional | Number of days before feature updates are installed automatically with valid range from 0 to 30 days. Returned by default. Query parameters are not supported.' QualityUpdatesPauseExpiryDateTime = 'String | Optional | The Quality Updates Pause Expiry datetime. This value is 35 days from the time admin paused or extended the pause for the ring. Returned by default. Query parameters are not supported.' Id = 'String | Optional | The unique identifier for an entity. Read-only.' ScheduleRestartWarningInHours = 'UInt32 | Optional | Specify the period for auto-restart warning reminder notifications. Supported values: 2, 4, 8, 12 or 24 (hours). Returned by default. Query parameters are not supported.' FeatureUpdatesPauseStartDate = 'String | Optional | The Feature Updates Pause start date. This value is the time when the admin paused or extended the pause for the ring. Returned by default. Query parameters are not supported. This property is read-only.' ScheduleImminentRestartWarningInMinutes = 'UInt32 | Optional | Specify the period for auto-restart imminent warning notifications. Supported values: 15, 30 or 60 (minutes). Returned by default. Query parameters are not supported.' FeatureUpdatesDeferralPeriodInDays = 'UInt32 | Optional | Defer Feature Updates by these many days with valid range from 0 to 30 days. Returned by default. Query parameters are not supported.' DeadlineForQualityUpdatesInDays = 'UInt32 | Optional | Number of days before quality updates are installed automatically with valid range from 0 to 30 days. Returned by default. Query parameters are not supported.' DriversExcluded = 'Boolean | Optional | When TRUE, excludes Windows update Drivers. When FALSE, does not exclude Windows update Drivers. Returned by default. Query parameters are not supported.' EngagedRestartSnoozeScheduleInDays = 'UInt32 | Optional | Number of days a user can snooze Engaged Restart reminder notifications with valid range from 1 to 3 days. Returned by default. Query parameters are not supported.' DeliveryOptimizationMode = 'String | Optional | The Delivery Optimization Mode. Possible values are: UserDefined, HttpOnly, HttpWithPeeringNat, HttpWithPeeringPrivateGroup, HttpWithInternetPeering, SimpleDownload, BypassMode. UserDefined allows the user to set. Returned by default. Query parameters are not supported. Possible values are: userDefined, httpOnly, httpWithPeeringNat, httpWithPeeringPrivateGroup, httpWithInternetPeering, simpleDownload, bypassMode. | userDefined / httpOnly / httpWithPeeringNat / httpWithPeeringPrivateGroup / httpWithInternetPeering / simpleDownload / bypassMode' SkipChecksBeforeRestart = 'Boolean | Optional | When TRUE, skips all checks before restart: Battery level = 40%, User presence, Display Needed, Presentation mode, Full screen mode, phone call state, game mode etc. When FALSE, does not skip all checks before restart. Returned by default. Query parameters are not supported.' QualityUpdatesPaused = 'Boolean | Optional | When TRUE, assigned devices are paused from receiving quality updates for up to 35 days from the time you pause the ring. When FALSE, does not pause Quality Updates. Returned by default. Query parameters are not supported.' EngagedRestartDeadlineInDays = 'UInt32 | Optional | Deadline in days before automatically scheduling and executing a pending restart outside of active hours, with valid range from 2 to 30 days. Returned by default. Query parameters are not supported.' FeatureUpdatesRollbackWindowInDays = 'UInt32 | Optional | The number of days after a Feature Update for which a rollback is valid with valid range from 2 to 60 days. Returned by default. Query parameters are not supported.' MicrosoftUpdateServiceAllowed = 'Boolean | Optional | When TRUE, allows Microsoft Update Service. When FALSE, does not allow Microsoft Update Service. Returned by default. Query parameters are not supported.' } ) } Office365 = @{ AdminAuditLogConfig = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | ''Present'' is the only value accepted. | Present' UnifiedAuditLogIngestionEnabled = 'String | Required | Determins if Unified Audit Log Ingestion is enabled | Enabled / Disabled' } ExternalConnections = @( @{ Id = 'String | Optional | The unique identifier of the external connector.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' AuthorizedAppIds = @( 'String | Optional | A collection of application IDs for registered Microsoft Entra apps that are allowed to manage the externalConnection and to index content in the externalConnection.' ) Name = 'String | Required | The name of the external connector.' Description = 'String | Optional | The description of the external connector.' } ) Groups = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Members = @( 'String | Optional | Members of the group.' ) ManagedBy = @( 'String | Optional | The group''s owner user principal.' ) Ensure = 'String | Optional | Present ensures the group exists, absent ensures it is removed. | Present / Absent' Description = 'String | Optional | The group''s description.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MailNickName = 'String | Required | The group''s Internal Name.' DisplayName = 'String | Required | The display name for the group.' } ) OrgCustomizationSetting = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Since there is only one setting availble, this must be set to ''Present'' | Present' } OrgSettings = @{ ToDoIsExternalJoinEnabled = 'Boolean | Optional | To Do - Allow external users to join.' PlannerAllowCalendarSharing = 'Boolean | Optional | Allow Planner users to publish their plans and assigned tasks to Outlook or other calendars through iCalendar feeds.' ToDoIsPushNotificationEnabled = 'Boolean | Optional | To Do - Allow your users to receive push notifications.' ToDoIsExternalShareEnabled = 'Boolean | Optional | To Do - Allow sharing with external users.' VivaInsightsDigestEmail = 'Boolean | Optional | Specifies whether or not to allow users to have access to use the Viva Insights digest email feature.' VivaInsightsWebExperience = 'Boolean | Optional | Specifies whether or not to allow users to have access to use the Viva Insights web experience.' VivaInsightsScheduleSendSuggestions = 'Boolean | Optional | Specifies whether or not to allow users to have access to use the Viva Insights schedule send suggestions feature.' VivaInsightsOutlookAddInAndInlineSuggestions = 'Boolean | Optional | Specifies whether or not to allow users to have access to use the Viva Insights Outlook add-in and inline suggestions.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) InstallationOptionsUpdateChannel = 'String | Optional | Defines how often you want your users to get feature updates for Microsoft 365 apps installed on devices running Windows | current / monthlyEnterprise / semiAnnual' AdminCenterReportDisplayConcealedNames = 'Boolean | Optional | Controls whether or not the Admin Center reports will conceale user, group and site names.' InstallationOptionsAppsForMac = @( 'String | Optional | Defines the apps users can install on Mac devices. | isSkypeForBusinessEnabled / isMicrosoft365AppsEnabled' ) InstallationOptionsAppsForWindows = @( 'String | Optional | Defines the apps users can install on Windows and mobile devices. | isVisioEnabled / isSkypeForBusinessEnabled / isProjectEnabled / isMicrosoft365AppsEnabled' ) DynamicsCustomerVoiceIsRecordIdentityByDefaultEnabled = 'Boolean | Optional | Capture the first and last names of respondents in your organization that complete a survey. You can still change this for individual surveys.' DynamicsCustomerVoiceIsInOrgFormsPhishingScanEnabled = 'Boolean | Optional | Automatically block any internal surveys that request confidential information. Admins will be notified in the Message Center when a survey is blocked.' FormsIsBingImageSearchEnabled = 'Boolean | Optional | Allow YouTube and Bing.' DynamicsCustomerVoiceIsRestrictedSurveyAccessEnabled = 'Boolean | Optional | Capture the first and last names of respondents in your organization that complete a survey. You can still change this for individual surveys.' AppsAndServicesIsAppAndServicesTrialEnabled = 'Boolean | Optional | Allow people in your organization to start trial subscriptions for apps and services that support trials. Admins manage licenses for these trials in the same way as other licenses in your organization. Only admins can upgrade these trials to paid subscriptions, so they won�??t affect your billing.' CortanaEnabled = 'Boolean | Optional | Allow Cortana in windows 10 (version 1909 and earlier), and the Cortana app on iOS and Android, to access Microsoft-hosted data on behalf of people in your organization.' AppsAndServicesIsOfficeStoreEnabled = 'Boolean | Optional | Allow people in your organization to access the Office Store using their work account. The Office Store provides access to apps that aren''t curated or managed by Microsoft.' FormsIsRecordIdentityByDefaultEnabled = 'Boolean | Optional | Record names of people in your org.' FormsIsInOrgFormsPhishingScanEnabled = 'Boolean | Optional | Phishing protection.' MicrosoftVivaBriefingEmail = 'Boolean | Optional | Specifies whether or not to let people in your organization receive Briefing email from Microsoft Viva.' M365WebEnableUsersToOpenFilesFrom3PStorage = 'Boolean | Optional | Let users open files stored in third-party storage services in Microsoft 365 on the Web.' FormsIsExternalShareCollaborationEnabled = 'Boolean | Optional | External Sharing - Share to collaborate on the form layout and structure.' FormsIsExternalSendFormEnabled = 'Boolean | Optional | External Sharing - Send a link to the form and collect responses.' FormsIsExternalShareTemplateEnabled = 'Boolean | Optional | External Sharing - Share the form as a template that can be duplicated.' FormsIsExternalShareResultEnabled = 'Boolean | Optional | External Sharing - Share form result summary.' } } OneDrive = @{ Settings = @{ ExcludedFileExtensions = @( 'String | Optional | Exclude files from being synced to OneDrive' ) GrooveBlockOption = 'String | Optional | Groove block options | OptOut / HardOptIn / SoftOptIn' TenantRestrictionEnabled = 'Boolean | Optional | Enable/disable Safe domain List - if disabled overrides DomainGuids value' DomainGuids = @( 'String | Optional | Safe domain list' ) Ensure = 'String | Optional | Present ensures the user exists, absent ensures it is removed | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisableReportProblemDialog = 'Boolean | Optional | Disable dialog box' OrphanedPersonalSitesRetentionPeriod = 'UInt32 | Optional | Number of days after a user''s account is deleted that their OneDrive for Business content will be deleted.' OneDriveForGuestsEnabled = 'Boolean | Optional | Enable guest acess for OneDrive' OneDriveStorageQuota = 'UInt32 | Optional | The resource quota to apply to the OneDrive sites' NotifyOwnersWhenInvitationsAccepted = 'Boolean | Optional | DEPRECATED' ODBAccessRequests = 'String | Optional | Lets administrators set policy on access requests and requests to share in OneDrive for Business | On / Off / Unspecified' BlockMacSync = 'Boolean | Optional | Block sync client on Mac' NotificationsInOneDriveForBusinessEnabled = 'Boolean | Optional | Turn notifications on/off OneDrive' ODBMembersCanShare = 'String | Optional | Lets administrators set policy on re-sharing behavior in OneDrive for Business | On / Off / Unspecified' } } Planner = @{ Buckets = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | The Name of the Planner Bucket.' Ensure = 'String | Optional | Present ensures the Plan exists, absent ensures it is removed | Present / Absent' BucketId = 'String | Optional | Id of the Bucket, if known.' PlanId = 'String | Required | Id of the Plan to which the bucket is associated with.' } ) Plans = @( @{ Title = 'String | Required | The Title of the Planner Plan.' Ensure = 'String | Optional | Present ensures the Plan exists, absent ensures it is removed | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' OwnerGroup = 'String | Required | Name of Id of the Azure Active Directory Group who owns the plan' } ) Tasks = @( @{ StartDateTime = 'String | Optional | Date and Time for the start of the Task.' Categories = @( 'String | Optional | List of categories assigned to the task. | Pink / Red / Yellow / Green / Blue / Purple' ) Priority = 'UInt32 | Optional | Priority of the Task. Value can only be between 1 and 10.' Notes = 'String | Optional | Description of the Task.' AssignedUsers = @( 'String | Optional | List of users assigned to the tasks (ex: @(''john.smith@contoso.com'', ''bob.houle@contoso.com'')).' ) PercentComplete = 'UInt32 | Optional | Percentage completed of the Task. Value can only be between 0 and 100.' Title = 'String | Required | The Title of the Planner Task.' UniqueId = 'String | Required | Unique ID to identify this specific object' TaskId = 'String | Optional | Id of the Task, if known.' DueDateTime = 'String | Optional | Date and Time for the task is due for completion.' PlanId = 'String | Required | Id of the Planner Plan which contains the Task.' Attachments = @( @{ Alias = 'String | Optional | Alias of for the attachment.' Type = 'String | Optional | Type of attachment. | PowerPoint / Word / Excel / Other' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Uri = 'String | Optional | Uri of the link to the attachment.' } ) Checklist = @( @{ Title = 'String | Optional | Title of the checklist item.' Completed = 'String | Optional | True if the item is completed, false otherwise.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) Ensure = 'String | Optional | Present ensures the Plan exists, absent ensures it is removed | Present / Absent' ConversationThreadId = 'String | Optional | Id of the group conversation thread associated with the comments section for this task.' Bucket = 'String | Optional | The Id of the bucket that contains the task.' } ) } PowerPlatform = @{ AdminDLPPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' FilterType = 'String | Optional | Identifies which filter type the policy will have, none, include, or exclude.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' PolicyName = 'String | Optional | Unique identifier of the policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Environments = @( 'String | Optional | Comma separated string list used as input environments to either include or exclude, depending on the FilterType.' ) DisplayName = 'String | Required | Creates the policy with the input display name' } ) DLPPoliciesConnectorConfigurations = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' ConnectorActionConfigurations = @( @{ actionRules = @( @{ actionId = 'String | Optional | Id of the action.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' behavior = 'String | Optional | Associated behavior.' } ) defaultConnectorActionRuleBehavior = 'String | Optional | Default action behavior for to connector.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' connectorId = 'String | Optional | Unique id of the connector.' } ) PPTenantId = 'String | Required | The tenant identifier.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' PolicyName = 'String | Required | The policy name identifier.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } ) PowerAppPoliciesUrlPatterns = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' PPTenantId = 'String | Required | The tenant identifier.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' PolicyName = 'String | Required | The policy name identifier.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RuleSet = @( @{ pattern = 'String | Optional | Rule pattern.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' order = 'String | Optional | Rule priority order.' customConnectorRuleClassification = 'String | Optional | Rule classification.' } ) } ) PowerAppsEnvironments = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Only accepted value is ''Present''. | Present / Absent' CurrencyName = 'String | Optional | The default currency for the database, use Get-AdminPowerAppCdsDatabaseCurrencies to get the supported values. | KZT / ZAR / ETB / AED / BHD / DZD / EGP / IQD / JOD / KWD / LBP / LYD / MAD / OMR / QAR / SAR / SYP / TND / YER / CLP / INR / AZN / RUB / BYN / BGN / NGN / BDT / CNY / EUR / BAM / USD / CZK / GBP / DKK / CHF / MVR / BTN / XCD / AUD / BZD / CAD / HKD / IDR / JMD / MYR / NZD / PHP / SGD / TTD / XDR / ARS / BOB / COP / CRC / CUP / DOP / GTQ / HNL / MXN / NIO / PAB / PEN / PYG / UYU / VES / IRR / XOF / CDF / XAF / HTG / ILS / HUF / AMD / ISK / JPY / GEL / KHR / KRW / KGS / LAK / MKD / MNT / BND / MMK / NOK / NPR / PKR / PLN / AFN / BRL / MDL / RON / RWF / SEK / LKR / SOS / ALL / RSD / KES / TJS / THB / ERN / TMT / BWP / TRY / UAH / UZS / VND / MOP / TWD' ProvisionDatabase = 'Boolean | Optional | The switch to provision a Dataverse database when creating the environment. If set, LanguageName and CurrencyName are mandatory to pass as arguments.' LanguageName = 'String | Optional | The default languages for the database, use Get-AdminPowerAppCdsDatabaseLanguages to get the support values. | 1033 / 1025 / 1069 / 1026 / 1027 / 3076 / 2052 / 1028 / 1050 / 1029 / 1030 / 1043 / 1061 / 1035 / 1036 / 1110 / 1031 / 1032 / 1037 / 1081 / 1038 / 1040 / 1041 / 1087 / 1042 / 1062 / 1063 / 1044 / 1045 / 1046 / 2070 / 1048 / 1049 / 2074 / 1051 / 1060 / 3082 / 1053 / 1054 / 1055 / 1058 / 1066 / 3098 / 1086 / 1057' Location = 'String | Required | Location of the PowerApps environment. | canada / unitedstates / europe / asia / australia / india / japan / unitedkingdom / unitedstatesfirstrelease / southamerica / france / usgov / unitedarabemirates / germany / switzerland / norway / korea / southafrica' EnvironmentSKU = 'String | Required | Environment type. | Production / Standard / Trial / Sandbox / SubscriptionBasedTrial / Teams / Developer' DisplayName = 'String | Required | Display name for the PowerApps environment' } ) TenantIsolationSettings = @{ RulesToExclude = @( @{ Direction = 'String | Required | Direction of tenant trust. | Inbound / Outbound / Both' UniqueId = 'String | Required | [Unique ID to identify this specific object]' TenantName = 'String | Required | Name of the trusted tenant.' } ) Enabled = 'Boolean | Optional | When set to true this will enable the tenant isolation settings.' RulesToInclude = @( @{ Direction = 'String | Required | Direction of tenant trust. | Inbound / Outbound / Both' UniqueId = 'String | Required | [Unique ID to identify this specific object]' TenantName = 'String | Required | Name of the trusted tenant.' } ) Rules = @( @{ Direction = 'String | Required | Direction of tenant trust. | Inbound / Outbound / Both' UniqueId = 'String | Required | [Unique ID to identify this specific object]' TenantName = 'String | Required | Name of the trusted tenant.' } ) } TenantSettings = @{ DisableNPSCommentsReachout = 'Boolean | Optional | When set to true this will disable the NPS Comments Reachout.' WalkMeOptOut = 'Boolean | Optional | When set to true this will disable the Walk Me guidance.' DisableSurveyScreenshots = 'Boolean | Optional | TBD' DisablePortalsCreationByNonAdminUsers = 'Boolean | Optional | When set to true this will disable portal creation by non-admin users.' DisableEnvironmentCreationByNonAdminUsers = 'Boolean | Optional | When set to true this will disable production environment creation by non-admin users.' DisableNewsletterSendout = 'Boolean | Optional | When set to true this will disable the monthly newsletters.' DisableHelpSupportCopilot = 'Boolean | Optional | TBD' EnableModelDataSharing = 'Boolean | Optional | TBD' DisableCopilotFeedbackMetadata = 'Boolean | Optional | TBD' DisableAiPrompts = 'Boolean | Optional | TBD' EnableDeleteDisabledUserinAllEnvironments = 'Boolean | Optional | TBD' PowerCatalogAudienceSetting = 'String | Optional | TBD' DisableDataLogging = 'Boolean | Optional | TBD' ShareWithColleaguesUserLimit = 'UInt32 | Optional | The amount of people an app can be shared with in Dataverse for Teams (maximum is 10,000).' EnableGuestsToMake = 'Boolean | Optional | When set to true this will enable the ability for guests in your tenant to create Power Platform resources.' DisableShareWithEveryone = 'Boolean | Optional | When set to true this will disable the ability to share apps with the whole tenant.' DisableBingVideoSearch = 'Boolean | Optional | When set to true this will disable Bing video search in the Office 365 Suite navigation bar.' DisableCapacityAllocationByEnvironmentAdmins = 'Boolean | Optional | When set to true this will disable capacity allocation by environment admins.' DisableTrialEnvironmentCreationByNonAdminUsers = 'Boolean | Optional | When set to true this will disable trial environment creation by non-admin users.' DisableSurveyFeedback = 'Boolean | Optional | When set to true this will disable survey feedback that sometimes pops up on top of an app.' DisableCommunitySearch = 'Boolean | Optional | When set to true this will disable community search in the Office 365 Suite navigation bar.' DisableDocsSearch = 'Boolean | Optional | When set to true this will disable docs search in the Office 365 Suite navigation bar.' DisableSupportTicketsVisibleByAllUsers = 'Boolean | Optional | When set to true this will disable support tickets to be visible by all users.' EnableOpenAiBotPublishing = 'Boolean | Optional | TBD' DisableAdminDigest = 'Boolean | Optional | TBD' DisableCopilotWithBing = 'Boolean | Optional | TBD' DisableCopilot = 'Boolean | Optional | TBD' EnvironmentRoutingAllMakers = 'Boolean | Optional | TBD' DisableDeveloperEnvironmentCreationByNonAdminUsers = 'Boolean | Optional | TBD' DisablePreferredDataLocationForTeamsEnvironment = 'Boolean | Optional | TBD' AllowNewOrgChannelDefault = 'Boolean | Optional | TBD' DisableMakerMatch = 'Boolean | Optional | TBD' DisableCopilotFeedback = 'Boolean | Optional | TBD' DisableConnectionSharingWithEveryone = 'Boolean | Optional | TBD' DisableCreateFromImage = 'Boolean | Optional | TBD' DisableUnusedLicenseAssignment = 'Boolean | Optional | TBD' EnableGenerativeAIFeaturesForSiteUsers = 'String | Optional | TBD' DisableUseOfUnassignedAIBuilderCredits = 'Boolean | Optional | TBD' EnableTenantLicensingReportForEnvironmentAdmins = 'Boolean | Optional | TBD' DisableSkillsMatchInvitationReachout = 'Boolean | Optional | TBD' DisableChampionsInvitationReachout = 'Boolean | Optional | TBD' EnableExternalAuthenticationProvidersInPowerPages = 'String | Optional | TBD' EnableTenantCapacityReportForEnvironmentAdmins = 'Boolean | Optional | TBD' EnableCanvasAppInsights = 'Boolean | Optional | TBD' EnableDesktopFlowDataPolicyManagement = 'String | Optional | TBD' EnableDefaultEnvironmentRouting = 'Boolean | Optional | TBD' StorageCapacityConsumptionWarningThreshold = 'UInt32 | Optional | TBD' DisableBillingPolicyCreationByNonAdminUsers = 'Boolean | Optional | TBD' DisableCreateFromFigma = 'Boolean | Optional | TBD' } } SecurityCompliance = @{ AuditConfigurationPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' Workload = 'String | Required | Workload associated with the policy. | Exchange / SharePoint / OneDriveForBusiness' } ) AutoSensitivityLabelPolicies = @( @{ AddExchangeLocation = @( 'String | Optional | This AddExchangeLocation parameter specifies new Exchange locations to be added to the policy without affecting the existing ones.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RemoveOneDriveLocationException = @( 'String | Optional | This RemoveOneDriveLocationException parameter specifies the OneDrive for Business sites to remove from the list of excluded sites when you use the value All for the OneDriveLocation parameter.' ) AddSharePointLocation = @( 'String | Optional | The AddSharePointLocation parameter specifies the SharePoint Online sites to add to the list of included sites when you aren''t using the value All for the SharePointLocation parameter.' ) ExchangeSenderMemberOfException = @( 'String | Optional | he ExchangeSenderMemberOf parameter specifies the distribution groups, mail-enabled security groups, or dynamic distribution groups to exclude from the auto-labeling policy.' ) ExchangeLocation = @( 'String | Optional | The ExchangeSender parameter specifies which senders to include in the policy.' ) SharePointLocation = @( 'String | Optional | The SharePointLocation parameter specifies the SharePoint Online sites to include. You identify the site by its URL value, or you can use the value All to include all sites.' ) Priority = 'UInt32 | Optional | The Priority parameter specifies the priority of the policy. The highest priority policy will take action over lower priority policies if two policies are applicable for a file.' ExchangeSenderMemberOf = @( 'String | Optional | The ExchangeSenderMemberOf parameter specifies the distribution groups, mail-enabled security groups, or dynamic distribution groups to include in the auto-labeling policy.' ) AddSharePointLocationException = @( 'String | Optional | The AddSharePointLocation parameter specifies the SharePoint Online sites to add to the list of included sites when you aren''t using the value All for the SharePointLocation parameter.' ) ExchangeSenderException = @( 'String | Optional | The ExchangeSenderException parameter specifies which senders to exclude in the policy.' ) AddOneDriveLocationException = @( 'String | Optional | This parameter specifies the OneDrive for Business sites to exclude when you use the value All for the OneDriveLocation parameter.' ) OneDriveLocationException = @( 'String | Optional | The AddOneDriveLocationException parameter specifies the OneDrive for Business sites to add to the list of excluded sites when you use the value All for the OneDriveLocation parameter.' ) Name = 'String | Required | The Name parameter specifies the unique name for the sensitivity label. The maximum length is 64 characters. If the value contains spaces, enclose the value in quotation marks.' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' ExchangeSender = @( 'String | Optional | The ExchangeSender parameter specifies which senders to include in the policy.' ) Ensure = 'String | Optional | Specify if this label policy should exist or not. | Present / Absent' ApplySensitivityLabel = 'String | Optional | The ApplySensitivityLabel parameter specifies the label to use for the auto label policy.' RemoveSharePointLocationException = @( 'String | Optional | The RemoveSharePointLocationException parameter specifies the SharePoint Online sites to remove from the list of excluded sites when you use the value All for the SharePointLocation parameter.' ) RemoveSharePointLocation = @( 'String | Optional | The RemoveSharePointLocation parameter specifies the SharePoint Online sites to remove from the list of included sites when you aren''t using the value All for the SharePointLocation parameter.' ) OneDriveLocation = @( 'String | Optional | The OneDriveLocation parameter specifies the OneDrive for Business sites to include. You identify the site by its URL value, or you can use the value.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' RemoveOneDriveLocation = @( 'String | Optional | The RemoveOneDriveLocation parameter specifies the OneDrive for Business sites to remove from the list of included sites when you aren''t using the value All for the OneDriveLocation parameter.' ) AddOneDriveLocation = @( 'String | Optional | The AddOneDriveLocation parameter specifies the OneDrive for Business sites to add to the list of included sites when you aren''t using the value All for the OneDriveLocation parameter.' ) RemoveExchangeLocation = @( 'String | Optional | The RemoveExchangeLocation parameter removes locations on Exchange from the policy.' ) SharePointLocationException = @( 'String | Optional | This parameter specifies the SharePoint Online sites to exclude when you use the value All for the SharePointLocation parameter.' ) Mode = 'String | Optional | The Mode parameter specifies the action and notification level of the auto-labeling policy. | Enable / Disable / TestWithNotifications / TestWithoutNotifications' } ) AutoSensitivityLabelRules = @( @{ RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition for the auto-labeling policy rule that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) FromAddressMatchesPatterns = 'String | Optional | The FromAddressMatchesPatterns parameter specifies a condition for the auto-labeling policy rule that looks for text patterns in the sender''s email address by using regular expressions.' ExceptIfFrom = @( 'String | Optional | The ExceptIfFrom parameter specifies an exception for the auto-labeling policy rule that looks for messages from specific senders. You can use any value that uniquely identifies the sender.' ) FromAddressContainsWords = 'String | Optional | The FromAddressContainsWords parameter specifies a condition for the auto-labeling policy rule that looks for words or phrases in the sender''s email address. You can specify multiple words or phrases separated by commas.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter specifies a condition for the auto-labeling policy rule that looks for messages sent to members of distribution groups, dynamic distribution groups, or mail-enabled security groups. You identify the groups by email address.' ) ExceptIfProcessingLimitExceeded = 'Boolean | Optional | The ExceptIfProcessingLimitExceeded parameter specifies an exception for the auto-labeling policy rule that looks for files where scanning couldn''t complete.' ExceptIfContentContainsSensitiveInformation = @{ Operator = 'String | Optional | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Groups = @( @{ Operator = 'String | Required | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Labels = @( @{ name = 'String | Required | Name of the Sensitive Label' id = 'String | Optional | Id of the Sensitive Information label' type = 'String | Optional | Type of the Sensitive Information label' } ) Name = 'String | Required | Name of the group' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | Name of the Rule.' ExceptIfAnyOfRecipientAddressMatchesPatterns = 'String | Optional | The ExceptIfAnyOfRecipientAddressMatchesPatterns parameter specifies an exception for the auto-labeling policy rule that looks for text patterns in recipient email addresses by using regular expressions. ' ProcessingLimitExceeded = 'Boolean | Optional | The ProcessingLimitExceeded parameter specifies a condition for the auto-labeling policy rule that looks for files where scanning couldn''t complete. You can use this condition to create rules that work together to identify and process messages where the content couldn''t be fully scanned.' ExceptIfAccessScope = 'String | Optional | The ExceptIfAccessScopeAccessScope parameter specifies an exception for the auto-labeling policy rule that''s based on the access scope of the content. The rule isn''t applied to content that matches the specified access scope. Valid values are: InOrganization, NotInOrganization, None | InOrganization / NotInOrganization / None' Workload = 'String | Required | Workload the rule is associated with. Value can be: Exchange, SharePoint, OneDriveForBusiness | Exchange / SharePoint / OneDriveForBusiness' ExceptIfDocumentIsUnsupported = 'Boolean | Optional | The ExceptIfDocumentIsUnsupported parameter specifies an exception for the auto-labeling policy rule that looks for files that can''t be scanned.' ExceptIfFromAddressContainsWords = 'String | Optional | The ExceptIfFromAddressContainsWords parameter specifies an exception for the auto-labeling policy rule that looks for words or phrases in the sender''s email address. You can specify multiple words or phrases separated by commas.' AnyOfRecipientAddressMatchesPatterns = 'String | Optional | The AnyOfRecipientAddressMatchesPatterns parameter specifies a condition for the auto-labeling policy rule that looks for text patterns in recipient email addresses by using regular expressions.' Policy = 'String | Required | Name of the associated Policy.' ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception for the auto-labeling policy rule that looks for recipients in messages. You can use any value that uniquely identifies the recipient. ' ) SentTo = @( 'String | Optional | The SentTo parameter specifies a condition for the auto-sensitivity policy rule that looks for recipients in messages. You can use any value that uniquely identifies the recipient.' ) HeaderMatchesPatterns = @{ Name = 'String | Required | Name of the header pattern' Values = @( 'String | Required | Regular expressions for the pattern' ) } ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception for the auto-labeling policy rule that looks for recipients with email address in the specified domains. You can specify multiple domains separated by commas.' ) Comment = 'String | Optional | The Comment parameter specifies an optional comment.' ContentExtensionMatchesWords = 'String | Optional | The ContentExtensionMatchesWords parameter specifies a condition for the auto-labeling policy rule that looks for words in file name extensions. You can specify multiple words separated by commas.' SenderIPRanges = @( 'String | Optional | The SenderIpRanges parameter specifies a condition for the auto-sensitivity policy rule that looks for senders whose IP addresses matches the specified value, or fall within the specified ranges.' ) AnyOfRecipientAddressContainsWords = 'String | Optional | The AnyOfRecipientAddressContainsWords parameter specifies a condition for the auto-labeling policy rule that looks for words or phrases in recipient email addresses. You can specify multiple words or phrases separated by commas.' SenderDomainIs = @( 'String | Optional | The SenderDomainIs parameter specifies a condition for the auto-labeling policy rule that looks for messages from senders with email address in the specified domains. ' ) ExceptIfSenderDomainIs = @( 'String | Optional | The ExceptIfSenderDomainIs parameter specifies an exception for the auto-labeling policy rule that looks for messages from senders with email address in the specified domains. You can specify multiple values separated by commas.' ) Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' ExceptIfSubjectMatchesPatterns = 'String | Optional | The ExceptIfSubjectMatchesPatterns parameter specifies an exception for the auto-labeling policy rule that looks for text patterns in the Subject field of messages by using regular expressions.' ExceptIfFromMemberOf = @( 'String | Optional | The ExceptIfFromMemberOf parameter specifies an exception for the auto-labeling policy rule that looks for messages sent by group members. You identify the group members by their email addresses. You can enter multiple values separated by commas.' ) DocumentIsUnsupported = 'Boolean | Optional | The DocumentIsUnsupported parameter specifies a condition for the auto-labeling policy rule that looks for files that can''t be scanned.' ExceptIfSentToMemberOf = @( 'String | Optional | The ExceptIfSentToMemberOf parameter specifies an exception for the auto-labeling policy rule that looks for messages sent to members of distribution groups, dynamic distribution groups, or mail-enabled security groups. You identify the groups by email address. You can specify multiple values separated by commas.' ) RuleErrorAction = 'String | Optional | The RuleErrorAction parameter specifies what to do if an error is encountered during the evaluation of the rule. Valid values are: Ignore, RetryThenBlock, *blank* | Ignore / RetryThenBlock / ' ExceptIfContentExtensionMatchesWords = @( 'String | Optional | The ExceptIfContentExtensionMatchesWords parameter specifies an exception for the auto-labeling policy rule that looks for words in file name extensions. You can specify multiple words separated by commas.' ) AccessScope = 'String | Optional | The AccessScope parameter specifies a condition for the auto-labeling policy rule that''s based on the access scope of the content. The rule is applied to content that matches the specified access scope. Valid values are: InOrganization, NotInOrganization, None | InOrganization / NotInOrganization / None' ExceptIfAnyOfRecipientAddressContainsWords = 'String | Optional | The ExceptIfAnyOfRecipientAddressContainsWords parameter specifies an exception for the auto-labeling policy rule that looks for words or phrases in recipient email addresses. You can specify multiple words separated by commas.' ExceptIfSenderIPRanges = @( 'String | Optional | The ExceptIfSenderIpRanges parameter specifies an exception for the auto-labeling policy rule that looks for senders whose IP addresses matches the specified value, or fall within the specified ranges.' ) ContentContainsSensitiveInformation = @{ Operator = 'String | Optional | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Groups = @( @{ Operator = 'String | Required | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Labels = @( @{ name = 'String | Required | Name of the Sensitive Label' id = 'String | Optional | Id of the Sensitive Information label' type = 'String | Optional | Type of the Sensitive Information label' } ) Name = 'String | Required | Name of the group' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) } UniqueId = 'String | Required | Unique ID to identify this specific object' ExceptIfFromAddressMatchesPatterns = 'String | Optional | The ExceptIfFromAddressMatchesPatterns parameter specifies an exception for the auto-labeling policy rule that looks for text patterns in the sender''s email address by using regular expressions. ' ExceptIfHeaderMatchesPatterns = @( 'String | Optional | The HeaderMatchesPatterns parameter specifies an exception for the auto-labeling policy rule that looks for text patterns in a header field by using regular expressions.' ) ReportSeverityLevel = 'String | Optional | The ReportSeverityLevel parameter specifies the severity level of the incident report for content detections based on the rule. Valid values are: None, Low, Medium, High | None / Low / Medium / High' SubjectMatchesPatterns = 'String | Optional | The SubjectMatchesPatterns parameter specifies a condition for the auto-labeling policy rule that looks for text patterns in the Subject field of messages by using regular expressions.' DocumentIsPasswordProtected = 'Boolean | Optional | The DocumentIsPasswordProtected parameter specifies a condition for the auto-labeling policy rule that looks for password protected files (because the contents of the file can''t be inspected). Password detection only works for Office documents and .zip files. ' Disabled = 'Boolean | Optional | The Disabled parameter specifies whether the auto-labeling policy rule is enabled or disabled.' ExceptIfDocumentIsPasswordProtected = 'Boolean | Optional | The ExceptIfDocumentIsPasswordProtected parameter specifies an exception for the auto-labeling policy rule that looks for password protected files (because the contents of the file can''t be inspected). Password detection only works for Office documents and .zip files. ' } ) CaseHoldPolicies = @( @{ Comment = 'String | Optional | The Comment parameter specifies an optional comment.' Name = 'String | Required | The Name parameter specifies the unique name of the case hold policy.' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the policy is enabled or disabled.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' Case = 'String | Required | The Case parameter specifies the eDiscovery case that you want to associate with the case hold policy.' UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SharePointLocation = @( 'String | Optional | The SharePointLocation parameter specifies the SharePoint Online and OneDrive for Business sites to include. You identify a site by its URL value.' ) PublicFolderLocation = @( 'String | Optional | The PublicFolderLocation parameter specifies that you want to include all public folders in the case hold policy. You use the value All for this parameter.' ) ExchangeLocation = @( 'String | Optional | The ExchangeLocation parameter specifies the mailboxes to include in the policy.' ) } ) CaseHoldRules = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the rule exists, absent ensures it is removed | Present / Absent' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' Disabled = 'Boolean | Optional | The Disabled parameter specifies whether the case hold rule is enabled or disabled.' Policy = 'String | Required | The Policy parameter specifies the case hold policy that contains the rule. You can use any value that uniquely identifies the policy.' Name = 'String | Required | The Name parameter specifies a unique name for the case hold rule.' ContentMatchQuery = 'String | Optional | The ContentMatchQuery parameter specifies a content search filter. Use this parameter to create a query-based hold so only the content that matches the specified search query is placed on hold. This parameter uses a text search string or a query that''s formatted by using the Keyword Query Language (KQL).' } ) ComplianceCases = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | The description of the case.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if this case should exist or not. | Present / Absent' Name = 'String | Required | The Name parameter specifies the unique name of the compliance case.' Status = 'String | Optional | Status for the case. Can either be ''Active'' or ''Closed'' | Active / Closed' } ) ComplianceSearchs = @( @{ Description = 'String | Optional | The Description parameter specifies an optional description for the compliance search. If the value contains spaces, enclose the value in quotation marks.' Name = 'String | Required | The Name parameter specifies the unique name of the complaiance tag.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IncludeUserAppContent = 'Boolean | Optional | The IncludeUserAppContent parameter specifies that you want to search the cloud-based storage location for users who don''t have a regular Office 365 user account in your organization. These types of users include users without an Exchange Online license who use Office applications, Office 365 guest users, and on-premises users whose identity is synchronized with your Office 365 organization.' PublicFolderLocation = @( 'String | Optional | The PublicFolderLocation parameter specifies that you want to include all public folders in the search. You use the value All for this parameter.' ) Case = 'String | Optional | Compliance Case (eDiscovery) that this Search is associated with' AllowNotFoundExchangeLocationsEnabled = 'Boolean | Optional | The AllowNotFoundExchangeLocationsEnabled parameter specifies whether to include mailboxes other than regular user mailboxes in the compliance search.' Ensure = 'String | Optional | Specify if this search should exist or not. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' ContentMatchQuery = 'String | Optional | The ContentMatchQuery parameter specifies a content search filter. This parameter uses a text search string or a query that''s formatted by using the Keyword Query Language (KQL).' ExchangeLocation = @( 'String | Optional | The ExchangeLocation parameter specifies the mailboxes to include.' ) SharePointLocationExclusion = @( 'String | Optional | This parameter specifies the SharePoint Online sites to exclude when you use the value All for the SharePointLocation parameter. You identify the site by its URL value.' ) SharePointLocation = @( 'String | Optional | The SharePointLocation parameter specifies the SharePoint Online sites to include. You identify the site by its URL value, or you can use the value All to include all sites.' ) HoldNames = @( 'String | Optional | The HoldNames parameter specifies that the content locations that have been placed on hold in the specified eDiscovery case will be searched. You use the value All for this parameter. You also need to specify the name of an eDiscovery case by using the Case parameter.' ) Language = 'String | Optional | The Language parameter specifies the language for the compliance search. Valid input for this parameter is a supported culture code value from the Microsoft .NET Framework CultureInfo class. For example, da-DK for Danish or ja-JP for Japanese.' ExchangeLocationExclusion = @( 'String | Optional | This parameter specifies the mailboxes to exclude when you use the value All for the ExchangeLocation parameter.' ) } ) ComplianceSearchActions = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Action = 'String | Required | The Action parameter specifies what type of action to define. Accepted values are Export, Retention and Purge. | Export / Preview / Purge / Retention' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SearchName = 'String | Required | The SearchName parameter specifies the name of the existing content search to associate with the content search action. You can specify multiple content searches separated by commas.' Ensure = 'String | Optional | Specify if this action should exist or not. | Present / Absent' FileTypeExclusionsForUnindexedItems = @( 'String | Optional | The FileTypeExclusionsForUnindexedItems specifies the file types to exclude because they can''t be indexed. You can specify multiple values separated by commas.' ) PurgeType = 'String | Optional | The PurgeType parameter specifies how to remove items when the action is Purge. | SoftDelete / HardDelete' RetryOnError = 'Boolean | Optional | The RetryOnError switch specifies whether to retry the action on any items that failed without re-running the entire action all over again.' ActionScope = 'String | Optional | The ActionScope parameter specifies the items to include when the action is Export. | IndexedItemsOnly / UnindexedItemsOnly / BothIndexedAndUnindexedItems' IncludeCredential = 'Boolean | Optional | The IncludeCredential switch specifies whether to include the credential in the results.' IncludeSharePointDocumentVersions = 'Boolean | Optional | The IncludeSharePointDocumentVersions parameter specifies whether to export previous versions of the document when you use the Export switch.' EnableDedupe = 'Boolean | Optional | The EnableDedupe parameter eliminates duplication of messages when you export content search results.' } ) ComplianceTags = @( @{ FilePlanProperty = @{ FilePlanPropertyCitation = 'String | Optional | File plan citation. Can get a list by running Get-FilePlanPropertyCitation.' FilePlanPropertyAuthority = 'String | Optional | File plan Authority. Can get list by running Get-FilePlanPropertyAuthority.' FilePlanPropertyCategory = 'String | Optional | File plan category. Can get a list by running Get-FilePlanPropertyCategory.' FilePlanPropertyDepartment = 'String | Optional | File plan department. Can get list by running Get-FilePlanPropertyDepartment.' FilePlanPropertyReferenceId = 'String | Optional | File plan reference id. Can get a list by running Get-FilePlanPropertyReferenceId.' FilePlanPropertySubCategory = 'String | Optional | File plan subcategory. Can get a list by running Get-FilePlanPropertySubCategory.' } RetentionDuration = 'String | Optional | The RetentionDuration parameter specifies the hold duration for the retention rule. Valid values are: An integer - The hold duration in days, Unlimited - The content is held indefinitely.' IsRecordLabel = 'Boolean | Optional | The IsRecordLabel parameter specifies whether the label is a record label.' Name = 'String | Required | The Name parameter specifies the unique name of the complaiance tag.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RetentionAction = 'String | Optional | The RetentionAction parameter specifies the action for the label. Valid values are: Delete, Keep or KeepAndDelete. | Delete / Keep / KeepAndDelete' Notes = 'String | Optional | The Notes parameter specifies an optional note. If you specify a value that contains spaces, enclose the value in quotation marks, for example: ''This is a user note''' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' RetentionType = 'String | Optional | The RetentionType parameter specifies whether the retention duration is calculated from the content creation date, tagged date, or last modification date. Valid values are: CreationAgeInDays, EventAgeInDays,ModificationAgeInDays, or TaggedAgeInDays. | CreationAgeInDays / EventAgeInDays / ModificationAgeInDays / TaggedAgeInDays' EventType = 'String | Optional | The EventType parameter specifies the retention rule that''s associated with the label.' ReviewerEmail = @( 'String | Optional | The ReviewerEmail parameter specifies the email address of a reviewer for Delete and KeepAndDelete retention actions. You can specify multiple email addresses separated by commas.' ) Regulatory = 'Boolean | Optional | Regulatory description' } ) DeviceConditionalAccessPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the policy is enabled.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' Name = 'String | Required | The name of the Device Conditional Access Policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } ) DeviceConditionalAccessRules = @( @{ AllowSimplePassword = 'Boolean | Optional | The AllowSimplePassword parameter specifies whether to allow simple or non-complex passwords on devices.' CameraEnabled = 'Boolean | Optional | The BluetoothEnabled parameter specifies whether to enable or disable Bluetooth on devices.' EnableRemovableStorage = 'Boolean | Optional | The EnableRemovableStorage parameter specifies whether removable storage can be used by devices.' AllowAssistantWhileLocked = 'Boolean | Optional | The AllowAssistantWhileLocked parameter specifies whether to allow the use of the voice assistant while devices are locked.' AntiVirusSignatureStatus = 'UInt32 | Optional | The AntiVirusSignatureStatus parameter specifies the antivirus signature status.' FirewallStatus = 'Boolean | Optional | The FirewallStatus parameter specifies the acceptable firewall status values on devices.' AllowAppStore = 'Boolean | Optional | The AllowAppStore parameter specifies whether to allow access to the app store on devices.' WorkFoldersSyncUrl = 'String | Optional | The WorkFoldersSyncUrl parameter specifies the URL that''s used to synchronize company data on devices.' AllowiCloudBackup = 'Boolean | Optional | The AllowiCloudBackup parameter specifies whether to allow Apple iCloud Backup from devices.' AppsRating = 'String | Optional | The AppsRating parameter species the maximum or most restrictive rating of apps that are allowed on devices.' MaxPasswordAttemptsBeforeWipe = 'UInt32 | Optional | The MaxPasswordAttemptsBeforeWipe parameter specifies the number of incorrect password attempts that cause devices to be automatically wiped.' PasswordQuality = 'UInt32 | Optional | The PasswordQuality parameter specifies the minimum password quality rating that''s required for device passwords. Password quality is a numeric scale that indicates the security and complexity of the password. A higher quality value indicates a more secure password.' PhoneMemoryEncrypted = 'Boolean | Optional | The PhoneMemoryEncrypted parameter specifies whether to encrypt the memory on devices.' EmailAddress = 'String | Optional | The EmailAddress parameter specifies the email address.' BluetoothEnabled = 'Boolean | Optional | The BluetoothEnabled parameter specifies whether to enable or disable Bluetooth on devices.' AllowVoiceDialing = 'Boolean | Optional | The AllowVoiceDialing parameter specifies whether to allow voice-activated telephone dialing.' AllowConvenienceLogon = 'Boolean | Optional | The AllowConvenienceLogon parameter specifies whether to allow convenience logons on devices.' MaxPasswordGracePeriod = 'UInt32 | Optional | The MaxPasswordGracePeriod parameter specifies the length of time users are allowed to reset expired passwords on devices.' AllowVoiceAssistant = 'Boolean | Optional | The AllowVoiceAssistant parameter specifies whether to allow using the voice assistant on devices.' ForceAppStorePassword = 'Boolean | Optional | The ForceAppStorePassword parameter specifies whether to require a password to use the app store on devices.' Policy = 'String | Optional | Name of the associated policy.' TVShowsRating = 'String | Optional | The TVShowsRating parameter species the maximum or most restrictive rating of television shows that are allowed on devices. You specify the country/region rating system to use with the RegionRatings parameter.' AllowJailbroken = 'Boolean | Optional | The AllowJailbroken parameter specifies whether to allow access to your organization by jailbroken or rooted devices.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowDiagnosticSubmission = 'Boolean | Optional | The AllowDiagnosticSubmission parameter specifies whether to allow diagnostic submissions from devices.' AutoUpdateStatus = 'String | Optional | The AutoUpdateStatus parameter specifies the update settings for devices.' WLANEnabled = 'Boolean | Optional | The WLANEnabled parameter specifies whether Wi-Fi is enabled devices.' Name = 'String | Required | Name for the rule.' AccountName = 'String | Optional | The AccountName parameter specifies the account name.' AllowScreenshot = 'Boolean | Optional | The AllowScreenshot parameter specifies whether to allow screenshots on devices.' PasswordExpirationDays = 'UInt32 | Optional | The PasswordExpirationDays parameter specifies the number of days that the same password can be used on devices before users are required to change their passwords.' PasswordTimeout = 'String | Optional | The PasswordTimeout parameter specifies the length of time that devices can be inactive before a password is required to reactivate them.' AllowiCloudPhotoSync = 'Boolean | Optional | The AllowiCloudPhotoSync parameter specifies whether to allow Apple iCloud Photos sync on devices.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' AllowPassbookWhileLocked = 'Boolean | Optional | The AllowPassbookWhileLocked parameter specifies whether to allow the use of Apple Passbook while devices are locked.' AllowVideoConferencing = 'Boolean | Optional | The AllowVideoConferencing parameter specifies whether to allow video conferencing on devices. ' PasswordRequired = 'Boolean | Optional | The PasswordRequired parameter specifies whether a password is required to access devices.' PasswordMinimumLength = 'UInt32 | Optional | The PasswordMinimumLength parameter specifies the minimum number of characters that are required for device passwords.' MoviesRating = 'String | Optional | The MoviesRating parameter species the maximum or most restrictive rating of movies that are allowed on devices. You specify the country/region rating system to use with the RegionRatings parameter.' PasswordHistoryCount = 'UInt32 | Optional | The PasswordHistoryCount parameter specifies the minimum number of unique new passwords that are required on devices before an old password can be reused.' AntiVirusStatus = 'UInt32 | Optional | The AntiVirusStatus parameter specifies the antivirus status.' UserAccountControlStatus = 'String | Optional | The UserAccountControlStatus parameter specifies how User Account Control messages are presented on devices.' RequireEmailProfile = 'Boolean | Optional | The RequireEmailProfile parameter specifies whether an email profile is required on devices.' UniqueId = 'String | Required | Unique ID to identify this specific object' ForceEncryptedBackup = 'Boolean | Optional | The ForceEncryptedBackup parameter specifies whether to force encrypted backups for devices.' AccountUserName = 'String | Optional | The AccountUserName parameter specifies the account user name.' AllowiCloudDocSync = 'Boolean | Optional | The AllowiCloudDocSync parameter specifies whether to allow Apple iCloud Documents & Data sync on devices.' PasswordComplexity = 'UInt32 | Optional | The PasswordComplexity parameter specifies the password complexity.' TargetGroups = @( 'String | Optional | The display names of the graoups targeted by the policy.' ) ExchangeActiveSyncHost = 'String | Optional | The ExchangeActiveSyncHost parameter specifies the Exchange ActiveSync host.' PasswordMinComplexChars = 'UInt32 | Optional | The PasswordMinComplexChars parameter specifies the minimum number of complex characters that are required for device passwords. A complex character isn''t a letter.' SystemSecurityTLS = 'Boolean | Optional | The SystemSecurityTLS parameter specifies whether TLS encryption is used on devices.' RegionRatings = 'String | Optional | The RegionRatings parameter specifies the rating system (country/region) to use for movie and television ratings with the MoviesRating and TVShowsRating parameters.' SmartScreenEnabled = 'Boolean | Optional | The SmartScreenEnabled parameter specifies whether to requireWindows SmartScreen on devices.' } ) DeviceConfigurationPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Enabled = 'Boolean | Optional | The Enabled parameter specifies whether the policy is enabled.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' Name = 'String | Required | The name of the Device Configuration Policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } ) DeviceConfigurationRules = @( @{ AllowSimplePassword = 'Boolean | Optional | The AllowSimplePassword parameter specifies whether to allow simple or non-complex passwords on devices.' CameraEnabled = 'Boolean | Optional | The BluetoothEnabled parameter specifies whether to enable or disable Bluetooth on devices.' EnableRemovableStorage = 'Boolean | Optional | The EnableRemovableStorage parameter specifies whether removable storage can be used by devices.' AllowAssistantWhileLocked = 'Boolean | Optional | The AllowAssistantWhileLocked parameter specifies whether to allow the use of the voice assistant while devices are locked.' AntiVirusSignatureStatus = 'UInt32 | Optional | The AntiVirusSignatureStatus parameter specifies the antivirus signature status.' FirewallStatus = 'Boolean | Optional | The FirewallStatus parameter specifies the acceptable firewall status values on devices.' AllowAppStore = 'Boolean | Optional | The AllowAppStore parameter specifies whether to allow access to the app store on devices.' WorkFoldersSyncUrl = 'String | Optional | The WorkFoldersSyncUrl parameter specifies the URL that''s used to synchronize company data on devices.' AllowiCloudBackup = 'Boolean | Optional | The AllowiCloudBackup parameter specifies whether to allow Apple iCloud Backup from devices.' AppsRating = 'String | Optional | The AppsRating parameter species the maximum or most restrictive rating of apps that are allowed on devices.' MaxPasswordAttemptsBeforeWipe = 'UInt32 | Optional | The MaxPasswordAttemptsBeforeWipe parameter specifies the number of incorrect password attempts that cause devices to be automatically wiped.' PasswordQuality = 'UInt32 | Optional | The PasswordQuality parameter specifies the minimum password quality rating that''s required for device passwords. Password quality is a numeric scale that indicates the security and complexity of the password. A higher quality value indicates a more secure password.' PhoneMemoryEncrypted = 'Boolean | Optional | The PhoneMemoryEncrypted parameter specifies whether to encrypt the memory on devices.' EmailAddress = 'String | Optional | The EmailAddress parameter specifies the email address.' BluetoothEnabled = 'Boolean | Optional | The BluetoothEnabled parameter specifies whether to enable or disable Bluetooth on devices.' AllowVoiceDialing = 'Boolean | Optional | The AllowVoiceDialing parameter specifies whether to allow voice-activated telephone dialing.' AllowConvenienceLogon = 'Boolean | Optional | The AllowConvenienceLogon parameter specifies whether to allow convenience logons on devices.' MaxPasswordGracePeriod = 'UInt32 | Optional | The MaxPasswordGracePeriod parameter specifies the length of time users are allowed to reset expired passwords on devices.' AllowVoiceAssistant = 'Boolean | Optional | The AllowVoiceAssistant parameter specifies whether to allow using the voice assistant on devices.' ForceAppStorePassword = 'Boolean | Optional | The ForceAppStorePassword parameter specifies whether to require a password to use the app store on devices.' Policy = 'String | Optional | Name of the associated policy.' TVShowsRating = 'String | Optional | The TVShowsRating parameter species the maximum or most restrictive rating of television shows that are allowed on devices. You specify the country/region rating system to use with the RegionRatings parameter.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowDiagnosticSubmission = 'Boolean | Optional | The AllowDiagnosticSubmission parameter specifies whether to allow diagnostic submissions from devices.' AutoUpdateStatus = 'String | Optional | The AutoUpdateStatus parameter specifies the update settings for devices.' WLANEnabled = 'Boolean | Optional | The WLANEnabled parameter specifies whether Wi-Fi is enabled devices.' Name = 'String | Required | Name for the rule.' AccountName = 'String | Optional | The AccountName parameter specifies the account name.' AllowScreenshot = 'Boolean | Optional | The AllowScreenshot parameter specifies whether to allow screenshots on devices.' PasswordExpirationDays = 'UInt32 | Optional | The PasswordExpirationDays parameter specifies the number of days that the same password can be used on devices before users are required to change their passwords.' PasswordTimeout = 'String | Optional | The PasswordTimeout parameter specifies the length of time that devices can be inactive before a password is required to reactivate them.' AllowiCloudPhotoSync = 'Boolean | Optional | The AllowiCloudPhotoSync parameter specifies whether to allow Apple iCloud Photos sync on devices.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' AllowPassbookWhileLocked = 'Boolean | Optional | The AllowPassbookWhileLocked parameter specifies whether to allow the use of Apple Passbook while devices are locked.' AllowVideoConferencing = 'Boolean | Optional | The AllowVideoConferencing parameter specifies whether to allow video conferencing on devices. ' PasswordRequired = 'Boolean | Optional | The PasswordRequired parameter specifies whether a password is required to access devices.' PasswordMinimumLength = 'UInt32 | Optional | The PasswordMinimumLength parameter specifies the minimum number of characters that are required for device passwords.' MoviesRating = 'String | Optional | The MoviesRating parameter species the maximum or most restrictive rating of movies that are allowed on devices. You specify the country/region rating system to use with the RegionRatings parameter.' PasswordHistoryCount = 'UInt32 | Optional | The PasswordHistoryCount parameter specifies the minimum number of unique new passwords that are required on devices before an old password can be reused.' AntiVirusStatus = 'UInt32 | Optional | The AntiVirusStatus parameter specifies the antivirus status.' UserAccountControlStatus = 'String | Optional | The UserAccountControlStatus parameter specifies how User Account Control messages are presented on devices.' RequireEmailProfile = 'Boolean | Optional | The RequireEmailProfile parameter specifies whether an email profile is required on devices.' UniqueId = 'String | Required | Unique ID to identify this specific object' ForceEncryptedBackup = 'Boolean | Optional | The ForceEncryptedBackup parameter specifies whether to force encrypted backups for devices.' AccountUserName = 'String | Optional | The AccountUserName parameter specifies the account user name.' AllowiCloudDocSync = 'Boolean | Optional | The AllowiCloudDocSync parameter specifies whether to allow Apple iCloud Documents & Data sync on devices.' PasswordComplexity = 'UInt32 | Optional | The PasswordComplexity parameter specifies the password complexity.' TargetGroups = @( 'String | Optional | The display names of the graoups targeted by the policy.' ) ExchangeActiveSyncHost = 'String | Optional | The ExchangeActiveSyncHost parameter specifies the Exchange ActiveSync host.' PasswordMinComplexChars = 'UInt32 | Optional | The PasswordMinComplexChars parameter specifies the minimum number of complex characters that are required for device passwords. A complex character isn''t a letter.' SystemSecurityTLS = 'Boolean | Optional | The SystemSecurityTLS parameter specifies whether TLS encryption is used on devices.' RegionRatings = 'String | Optional | The RegionRatings parameter specifies the rating system (country/region) to use for movie and television ratings with the MoviesRating and TVShowsRating parameters.' SmartScreenEnabled = 'Boolean | Optional | The SmartScreenEnabled parameter specifies whether to requireWindows SmartScreen on devices.' } ) DLPCompliancePolicies = @( @{ ThirdPartyAppDlpLocation = @( 'String | Optional | The ThirdPartyAppDlpLocation parameter specifies the non-Microsoft cloud apps to include in the DLP policy. You can use the value All to include all connected apps.' ) PowerBIDlpLocationException = @( 'String | Optional | The PowerBIDlpLocationException parameter specifies the Power BI workspace IDs to exclude from the DLP policy when you use the value All for the PowerBIDlpLocation parameter. Only workspaces hosted in Premium Gen2 capacities are permitted.' ) OneDriveLocationException = @( 'String | Optional | This parameter specifies the OneDrive for Business sites to exclude when you use the value All for the OneDriveLocation parameter. You identify the site by its URL value.' ) Priority = 'UInt32 | Optional | Priority for the Policy.' EndpointDlpLocationException = @( 'String | Optional | The EndpointDlpLocationException parameter specifies the user accounts to exclude from Endpoint DLP when you use the value All for the EndpointDlpLocation parameter. You identify the account by name or email address.' ) Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EndpointDlpLocation = @( 'String | Optional | The EndpointDLPLocation parameter specifies the user accounts to include in the DLP policy for Endpoint DLP when they are logged on to an onboarded device. You identify the account by name or email address. You can use the value All to include all user accounts.' ) Name = 'String | Required | The Name parameter specifies the unique name of the DLP policy. If the value contains spaces, enclose the value in quotation marks.' OneDriveLocation = @( 'String | Optional | The OneDriveLocation parameter specifies the OneDrive for Business sites to include. You identify the site by its URL value, or you can use the value All to include all sites.' ) OnPremisesScannerDlpLocation = @( 'String | Optional | The OnPremisesScannerDlpLocation parameter specifies the on-premises file shares and SharePoint document libraries and folders to include in the DLP policy. You can use the value All to include all on-premises file shares and SharePoint document libraries and folders.' ) TeamsLocationException = @( 'String | Optional | Teams locations to exclude.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' ExchangeLocation = @( 'String | Optional | The ExchangeLocation parameter specifies Exchange Online mailboxes to include in the DLP policy. You can only use the value All for this parameter to include all mailboxes.' ) SharePointLocationException = @( 'String | Optional | This parameter specifies the SharePoint Online sites to exclude when you use the value All for the SharePointLocation parameter. You identify the site by its URL value.' ) SharePointLocation = @( 'String | Optional | The SharePointLocation parameter specifies the SharePoint Online sites to include. You identify the site by its URL value, or you can use the value All to include all sites.' ) OnPremisesScannerDlpLocationException = @( 'String | Optional | The OnPremisesScannerDlpLocationException parameter specifies the on-premises file shares and SharePoint document libraries and folders to exclude from the DLP policy if you use the value All for the OnPremisesScannerDlpLocation parameter.' ) ExchangeSenderMemberOf = @( 'String | Optional | Exchange members to include.' ) ThirdPartyAppDlpLocationException = @( 'String | Optional | The ThirdPartyAppDlpLocationException parameter specifies the non-Microsoft cloud apps to exclude from the DLP policy when you use the value All for the ThirdPartyAppDlpLocation parameter.' ) Mode = 'String | Optional | The Mode parameter specifies the action and notification level of the DLP policy. Valid values are: Enable, TestWithNotifications, TestWithoutNotifications, Disable and PendingDeletion. | Enable / TestWithNotifications / TestWithoutNotifications / Disable / PendingDeletion' TeamsLocation = @( 'String | Optional | Teams locations to include' ) PowerBIDlpLocation = @( 'String | Optional | The PowerBIDlpLocation parameter specifies the Power BI workspace IDs to include in the DLP policy. Only workspaces hosted in Premium Gen2 capacities are permitted. You can use the value All to include all supported workspaces.' ) ExchangeSenderMemberOfException = @( 'String | Optional | Exchange members to exclude.' ) } ) DLPComplianceRules = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DocumentNameMatchesPatterns = @( 'String | Optional | The DocumentNameMatchesPatterns parameter specifies a condition for the DLP rule that looks for text patterns in the name of message attachments by using regular expressions.' ) ExceptIfSubjectOrBodyMatchesPatterns = @( 'String | Optional | The ExceptIfSubjectOrBodyMatchesPatterns parameter specifies an exception for the rule that looks for text patterns in the Subject field or body of messages.' ) ExceptIfRecipientDomainIs = @( 'String | Optional | The ExceptIfRecipientDomainIs parameter specifies an exception for the DLP rule that looks for recipients with email addresses in the specified domains.' ) ContentIsNotLabeled = 'Boolean | Optional | The ContentIsNotLabeled parameter specifies if the content is labeled. A True or False condition.' ExceptIfFromAddressContainsWords = @( 'String | Optional | The ExceptIfFromAddressContainsWords parameter specifies an exception for the DLP rule that looks for words or phrases in the sender''s email address.' ) ExceptIfProcessingLimitExceeded = 'Boolean | Optional | The ExceptIfProcessingLimitExceeded parameter specifies an exception for the DLP rule that looks for files where scanning couldn''t complete.' DocumentNameMatchesWords = @( 'String | Optional | The DocumentNameMatchesWords parameter specifies a condition for the DLP rule that looks for words or phrases in the name of message attachments. ' ) NotifyPolicyTipCustomText = 'String | Optional | The NotifyPolicyTipCustomText parameter specifies the custom text in the Policy Tip notification message that''s shown to recipients when the conditions of the rule are met. The maximum length is 256 characters. HTML tags and tokens (variables) aren''t supported.' NotifyAllowOverride = @( 'String | Optional | The NotifyAllowOverride parameter specifies the notification override options when the conditions of the rule are met. | FalsePositive / WithoutJustification / WithJustification' ) ExceptIfSenderDomainIs = @( 'String | Optional | The ExceptIfSenderDomainIs parameter specifies an exception for the DLP rule that looks for messages from senders with email address in the specified domains. ' ) SubjectOrBodyMatchesPatterns = @( 'String | Optional | The SubjectOrBodyMatchesPatterns parameter specifies a condition for the rule that looks for text patterns in the Subject field or body of messages.' ) NotifyUser = @( 'String | Optional | The NotifyUser parameter specifies an action for the DLP rule that notifies the specified users when the conditions of the rule are met.' ) ProcessingLimitExceeded = 'Boolean | Optional | The ProcessingLimitExceeded parameter specifies a condition for the DLP rule that looks for files where scanning couldn''t complete.' ExceptIfAnyOfRecipientAddressContainsWords = @( 'String | Optional | he ExceptIfAnyOfRecipientAddressContainsWords parameter specifies an exception for the DLP rule that looks for words or phrases in recipient email addresses.' ) ExceptIfSenderIPRanges = @( 'String | Optional | The ExceptIfSenderIpRanges parameter specifies an exception for the DLP rule that looks for senders whose IP addresses matches the specified value, or fall within the specified ranges.' ) FromAddressMatchesPatterns = @( 'String | Optional | The FromAddressMatchesPatterns parameter specifies a condition for the DLP rule that looks for text patterns in the sender''s email address by using regular expressions. ' ) AdvancedRule = 'String | Optional | The AdvancedRule parameter uses complex rule syntax that supports multiple AND, OR, and NOT operators and nested groups' DocumentIsPasswordProtected = 'Boolean | Optional | The DocumentIsPasswordProtected parameter specifies a condition for the DLP rule that looks for password protected files (because the contents of the file can''t be inspected). Password detection only works for Office documents and .zip files.' GenerateAlert = @( 'String | Optional | The GenerateAlert parameter specifies an action for the DLP rule that notifies the specified users when the conditions of the rule are met.' ) ExceptIfSubjectMatchesPatterns = @( 'String | Optional | The ExceptIfSubjectMatchesPatterns parameter specifies an exception for the DLP rule that looks for text patterns in the Subject field of messages by using regular expressions.' ) ContentExtensionMatchesWords = @( 'String | Optional | The ContentExtensionMatchesWords parameter specifies a condition for the DLP rule that looks for words in file name extensions. You can specify multiple words separated by commas.' ) HasSenderOverride = 'Boolean | Optional | The SenderOverride parameter specifies a condition for the rule that looks for messages where the sender chose to override a DLP policy.' ExceptIfDocumentIsPasswordProtected = 'Boolean | Optional | The ExceptIfDocumentIsPasswordProtected parameter specifies an exception for the DLP rule that looks for password protected files (because the contents of the file can''t be inspected). Password detection only works for Office documents and .zip files. ' BlockAccessScope = 'String | Optional | The BlockAccessScope parameter specifies the scope of the block access action. | All / PerUser / None' ExceptIfSubjectOrBodyContainsWords = @( 'String | Optional | The ExceptIfSubjectOrBodyContainsWords parameter specifies an exception for the rule that looks for words in the Subject field or body of messages.' ) ExceptIfMessageTypeMatches = @( 'String | Optional | The ExceptIfMessageTypeMatches parameter specifies an exception for the rule that looks for messages of the specified type.' ) ExceptIfContentContainsSensitiveInformation = @{ Operator = 'String | Optional | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Groups = @( @{ Operator = 'String | Required | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Labels = @( @{ name = 'String | Required | Name of the Sensitive Label' id = 'String | Optional | Id of the Sensitive Information label' type = 'String | Optional | Type of the Sensitive Information label' } ) Name = 'String | Required | Name of the group' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) } ExceptIfFromAddressMatchesPatterns = @( 'String | Optional | The ExceptIfFromAddressMatchesPatterns parameter specifies an exception for the DLP rule that looks for text patterns in the sender''s email address by using regular expressions.' ) AnyOfRecipientAddressContainsWords = @( 'String | Optional | The AnyOfRecipientAddressContainsWords parameter specifies a condition for the DLP rule that looks for words or phrases in recipient email addresses.' ) RecipientDomainIs = @( 'String | Optional | The RecipientDomainIs parameter specifies a condition for the DLP rule that looks for recipients with email addresses in the specified domains.' ) IncidentReportContent = @( 'String | Optional | The IncidentReportContent parameter specifies the content to include in the report when you use the GenerateIncidentReport parameter. | All / Default / DetectionDetails / Detections / DocumentAuthor / DocumentLastModifier / MatchedItem / OriginalContent / RulesMatched / Service / Severity / Title / RetentionLabel / SensitivityLabel' ) Comment = 'String | Optional | The Comment parameter specifies an optional comment. If you specify a value that contains spaces, enclose the value in quotation marks.' ExceptIfHasSenderOverride = 'Boolean | Optional | The ExceptIfHasSenderOverride parameter specifies an exception for the rule that looks for messages where the sender chose to override a DLP policy.' GenerateIncidentReport = @( 'String | Optional | The GenerateIncidentReport parameter specifies an action for the DLP rule that sends an incident report to the specified users when the conditions of the rule are met.' ) Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' AccessScope = 'String | Optional | The AccessScope parameter specifies a condition for the DLP rule that''s based on the access scope of the content. The rule is applied to content that matches the specified access scope. | InOrganization / NotInOrganization / None' RemoveRMSTemplate = 'Boolean | Optional | The RemoveRMSTemplate parameter specifies an action for the DLP rule that removes Office 365 Message Encryption from messages and their attachments.' FromScope = @( 'String | Optional | The FromScope parameter specifies wether messages from inside or outside the organisation are in scope for the DLP rule.' ) ExceptIfContentPropertyContainsWords = @( 'String | Optional | The ExceptIfContentPropertyContainsWords parameter specifies an exception for the DLP rule that''s based on a property match in content.' ) ExceptIfDocumentNameMatchesPatterns = @( 'String | Optional | The ExceptIfDocumentNameMatchesPatterns parameter specifies an exception for the DLP rule that looks for text patterns in the name of message attachments by using regular expressions.' ) ContentCharacterSetContainsWords = @( 'String | Optional | The ContentCharacterSetContainsWords parameter specifies a condition for the rule that looks for character set names in messages. You can specify multiple values separated by commas.' ) AnyOfRecipientAddressMatchesPatterns = @( 'String | Optional | The AnyOfRecipientAddressMatchesPatterns parameter specifies a condition for the DLP rule that looks for text patterns in recipient email addresses by using regular expressions.' ) NotifyEmailCustomText = 'String | Optional | The NotifyEmailCustomText parameter specifies the custom text in the email notification message that''s sent to recipients when the conditions of the rule are met.' ExceptIfDocumentNameMatchesWords = @( 'String | Optional | The ExceptIfDocumentNameMatchesWords parameter specifies an exception for the DLP rule that looks for words or phrases in the name of message attachments.' ) ExceptIfSentTo = @( 'String | Optional | The ExceptIfSentTo parameter specifies an exception for the DLP rule that looks for recipients in messages. You identify the recipients by email address.' ) Policy = 'String | Required | Name of the associated DLP Compliance Policy.' ExceptIfContentCharacterSetContainsWords = @( 'String | Optional | The ExceptIfContentCharacterSetContainsWords parameter specifies an exception for the rule that looks for character set names in messages.' ) ContentContainsSensitiveInformation = @{ Operator = 'String | Optional | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Groups = @( @{ Operator = 'String | Required | Operator | And / Or' SensitiveInformation = @( @{ maxconfidence = 'String | Optional | Maximum Confidence level value for the Sensitive Information' id = 'String | Optional | Id of the Sensitive Information Content' minconfidence = 'String | Optional | Minimum Confidence level value for the Sensitive Information' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Content' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) Labels = @( @{ name = 'String | Required | Name of the Sensitive Label' id = 'String | Optional | Id of the Sensitive Information label' type = 'String | Optional | Type of the Sensitive Information label' } ) Name = 'String | Required | Name of the group' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) } SubjectOrBodyContainsWords = @( 'String | Optional | The SubjectOrBodyContainsWords parameter specifies a condition for the rule that looks for words in the Subject field or body of messages.' ) ExceptIfFromScope = @( 'String | Optional | The ExceptIfFromScope parameter specifies wether messages from inside or outside the organisation are in scope for the DLP rule.' ) BlockAccess = 'Boolean | Optional | The BlockAccess parameter specifies an action for the DLP rule that blocks access to the source item when the conditions of the rule are met. $true: Blocks further access to the source item that matched the rule. The owner, author, and site owner can still access the item. $false: Allows access to the source item that matched the rule. This is the default value.' SentToMemberOf = @( 'String | Optional | The SentToMemberOf parameter specifies a condition for the DLP rule that looks for messages sent to members of distribution groups, dynamic distribution groups, or mail-enabled security groups.' ) StopPolicyProcessing = 'Boolean | Optional | The StopPolicyProcessing parameter specifies an action that stops processing more DLP policy rules.' Disabled = 'Boolean | Optional | The Disabled parameter specifies whether the DLP rule is disabled.' ReportSeverityLevel = 'String | Optional | The ReportSeverityLevel parameter specifies the severity level of the incident report for content detections based on the rule. | Low / Medium / High / None' ExceptIfDocumentIsUnsupported = 'Boolean | Optional | The ExceptIfDocumentIsUnsupported parameter specifies an exception for the DLP rule that looks for files that can''t be scanned.' MessageTypeMatches = @( 'String | Optional | The MessageTypeMatches parameter specifies a condition for the DLP rule that looks for types of SMIME message patterns.' ) RuleErrorAction = 'String | Optional | The RuleErrorAction parameter specifies what to do if an error is encountered during the evaluation of the rule. | Ignore / RetryThenBlock' ContentPropertyContainsWords = @( 'String | Optional | The ContentPropertyContainsWords parameter specifies a condition for the DLP rule that''s based on a property match in content. The rule is applied to content that contains the specified property.' ) DocumentIsUnsupported = 'Boolean | Optional | The DocumentIsUnsupported parameter specifies a condition for the DLP rule that looks for files that can''t be scanned.' SubjectMatchesPatterns = @( 'String | Optional | The SubjectMatchesPatterns parameter specifies a condition for the DLP rule that looks for text patterns in the Subject field of messages by using regular expressions.' ) SubjectContainsWords = @( 'String | Optional | The SubjectContainsWords parameter specifies a condition for the DLP rule that looks for words or phrases in the Subject field of messages. You can specify multiple words or phrases separated by commas.' ) ExceptIfContentExtensionMatchesWords = @( 'String | Optional | The ExceptIfContentExtensionMatchesWords parameter specifies an exception for the DLP rule that looks for words in file name extensions. You can specify multiple words separated by commas.' ) Name = 'String | Required | Name of the Rule.' DocumentContainsWords = @( 'String | Optional | The DocumentContainsWords parameter specifies a condition for the DLP rule that looks for words in message attachments. Only supported attachment types are checked.' ) ExceptIfSubjectContainsWords = @( 'String | Optional | The ExceptIfSubjectContainsWords parameter specifies an exception for the DLP rule that looks for words or phrases in the Subject field of messages.' ) FromAddressContainsWords = @( 'String | Optional | The FromAddressContainsWords parameter specifies a condition for the DLP rule that looks for words or phrases in the sender''s email address.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' ExceptIfAnyOfRecipientAddressMatchesPatterns = @( 'String | Optional | The ExceptIfAnyOfRecipientAddressMatchesPatterns parameter specifies an exception for the DLP rule that looks for text patterns in recipient email addresses by using regular expressions.' ) SetHeader = @( 'String | Optional | The SetHeader The SetHeader parameter specifies an action for the DLP rule that adds or modifies a header field and value in the message header. You can specify multiple header name and value pairs separated by commas' ) } ) FilePlanPropertyAuthorities = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The Name parameter specifies the unique name of the Authority.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if this authority should exist or not. | Present / Absent' } ) FilePlanPropertyCategories = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The Name parameter specifies the unique name of the category.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if this category should exist or not. | Present / Absent' } ) FilePlanPropertyCitations = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if this citation should exist or not. | Present / Absent' Name = 'String | Required | The Name parameter specifies the unique name of the citation.' CitationJurisdiction = 'String | Optional | Jurisdiction of the citation.' CitationUrl = 'String | Optional | URL of the citation.' } ) FilePlanPropertyDepartments = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The Name parameter specifies the unique name of the department.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if this department should exist or not. | Present / Absent' } ) FilePlanPropertyReferenceIds = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The Name parameter specifies the unique name of the reference id.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if this reference id should exist or not. | Present / Absent' } ) FilePlanPropertySubCategories = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Category = 'String | Required | The Category parameter specifies the name of the parent category associated with the sub-category.' Name = 'String | Required | The Name parameter specifies the unique name of the sub-category.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if this category should exist or not. | Present / Absent' } ) InsiderRiskEntityLists = @( @{ ExceptionKeyworkGroups = @( 'String | Optional | List of keywords for exception.' ) Description = 'String | Optional | Description for the group or setting.' Sites = @( @{ Guid = 'String | Optional | Unique identifier of the site.' Url = 'String | Required | Url of the site.' Name = 'String | Optional | Name of the site.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) TrainableClassifiers = @( 'String | Optional | List of trainable classifiers.' ) DisplayName = 'String | Optional | The display name of the group or setting.' Ensure = 'String | Optional | Specify if this entity should exist or not. | Present / Absent' ExcludedSensitiveInformationTypeGroups = @( 'String | Optional | List of excluded sensitive information types.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ExcludedFilePathGroups = @( 'String | Optional | List of excluded file paths.' ) Name = 'String | Required | The name of the group or setting.' ExcludedSiteGroups = @( 'String | Optional | List of excluded sites.' ) Domains = @( @{ Dmn = 'String | Required | Domain name.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' isMLSubDmn = 'Boolean | Optional | Defines if the entry should include multi-level subdomains or not.' } ) UniqueId = 'String | Required | Unique ID to identify this specific object' FilePaths = @( 'String | Optional | List of file paths.' ) SensitiveInformationTypes = @( 'String | Optional | List of sensitive information types.' ) ExcludedFileTypeGroups = @( 'String | Optional | List of excluded file types.' ) ExcludedDomainGroups = @( 'String | Optional | List of excluded domains.' ) FileTypes = @( 'String | Optional | List of file types.' ) Keywords = @( 'String | Optional | List of keywords.' ) ListType = 'String | Required | The setting type.' ExcludedKeyworkGroups = @( 'String | Optional | List of excluded keywords.' ) ExcludedClassifierGroups = @( 'String | Optional | List of excluded trainable classifiers.' ) } ) InsiderRiskPolicies = @( @{ EpoBrowseToPhishingSites = 'Boolean | Optional | Official documentation to come.' AzureStorageAccountOrContainerDeleted = 'Boolean | Optional | Official documentation to come.' EmployeeAccessedNeighbourData = 'Boolean | Optional | Official documentation to come.' CCInappropriateImagesSent = 'Boolean | Optional | Official documentation to come.' InScopeTimeSpan = 'String | Optional | Official documentation to come.' CCInappropriateContentSent = 'Boolean | Optional | Official documentation to come.' ProfileInScopeTimeSpan = 'UInt32 | Optional | Official documentation to come.' BoxContentDelete = 'Boolean | Optional | Official documentation to come.' HighSeverityAlertsEnabled = 'Boolean | Optional | Official documentation to come.' EpoBrowseToViolenceSites = 'Boolean | Optional | Official documentation to come.' McasActivityFromInfrequentCountry = 'Boolean | Optional | Official documentation to come.' CPUUtilizationLimit = 'UInt32 | Optional | Official documentation to come.' EpoFileCopiedToRemoteDesktopSession = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionMediumProfileInsightSeverity = 'UInt32 | Optional | Official documentation to come.' EpoBrowseToCriminalActivitySites = 'Boolean | Optional | Official documentation to come.' PeerCumulativeExfiltrationDetector = 'Boolean | Optional | Official documentation to come.' TeamsMemberAddedExternal = 'Boolean | Optional | Official documentation to come.' SpoDownloadV2 = 'Boolean | Optional | Official documentation to come.' McasMultipleVMDeletion = 'Boolean | Optional | Official documentation to come.' EpoBrowseToHackingSites = 'Boolean | Optional | Official documentation to come.' CopyToPersonalCloud = 'Boolean | Optional | Official documentation to come.' EmailExternal = 'Boolean | Optional | Official documentation to come.' PriorityUserGroupMember = 'Boolean | Optional | Official documentation to come.' CumulativeExfiltrationDetector = 'Boolean | Optional | Official documentation to come.' PhysicalAccess = 'Boolean | Optional | Official documentation to come.' SpoFileDeleted = 'Boolean | Optional | Official documentation to come.' CCFinancialRegulatoryRiskyTextSent = 'Boolean | Optional | Official documentation to come.' SpoFolderDeletedFromSecondStageRecycleBin = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionLowProfileGeneratedIssueSeverity = 'UInt32 | Optional | Official documentation to come.' AzureElevateAccessToAllSubscriptions = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionLowProfileInsightTypes = @( 'String | Optional | Official documentation to come.' ) NotificationDetailsEnabled = 'Boolean | Optional | Official documentation to come.' AzureSQLServerFirewallRuleUpdated = 'Boolean | Optional | Official documentation to come.' EpoBrowseToCultSites = 'Boolean | Optional | Official documentation to come.' TeamsChatFileSharedExternal = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionMediumProfileConfirmedIssueSeverity = 'UInt32 | Optional | Official documentation to come.' DropboxContentDelete = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionHighProfileInsightCount = 'UInt32 | Optional | Official documentation to come.' McasMultipleVMCreation = 'Boolean | Optional | Official documentation to come.' PoliciesHealthEnabled = 'Boolean | Optional | Official documentation to come.' AlertVolume = 'String | Optional | Official documentation to come.' DropboxContentAccess = 'Boolean | Optional | Official documentation to come.' EpoCopyToClipboardFromSensitiveFile = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionMediumProfileInsightTypes = @( 'String | Optional | Official documentation to come.' ) AdaptiveProtectionLowProfileConfirmedIssue = 'Boolean | Optional | Official documentation to come.' SecurityAlertDefenseEvasion = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionLowProfileInsightSeverity = 'UInt32 | Optional | Official documentation to come.' FileVolCutoffLimits = 'String | Optional | Official documentation to come.' PotentialHighImpactUser = 'Boolean | Optional | Official documentation to come.' EpoBrowseToMalwareSites = 'Boolean | Optional | Official documentation to come.' McasSuspiciousCloudTrailLoggingChange = 'Boolean | Optional | Official documentation to come.' EpoFileDownloadedFromBlacklistedDomain = 'Boolean | Optional | Official documentation to come.' EmployeeAccessedHighVolumePatientData = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionHighProfileInsightSeverity = 'UInt32 | Optional | Official documentation to come.' AdaptiveProtectionHighProfileGeneratedIssueSeverity = 'UInt32 | Optional | Official documentation to come.' ClipDeletionEnabled = 'Boolean | Optional | Official documentation to come.' RetainSeverityAfterTriage = 'Boolean | Optional | Official documentation to come.' OptInIRMDataExport = 'Boolean | Optional | Official documentation to come.' RecordingTimeframePreEventInSec = 'String | Optional | Official documentation to come.' BandwidthCapInMb = 'String | Optional | Official documentation to come.' PowerBISemanticModelsDeleted = 'Boolean | Optional | Official documentation to come.' SpoAccessRequest = 'Boolean | Optional | Official documentation to come.' PowerBIReportsExported = 'Boolean | Optional | Official documentation to come.' EmployeeAccessedRestrictedData = 'Boolean | Optional | Official documentation to come.' McasMultipleFailedLogins = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionMediumProfileSourceType = 'UInt32 | Optional | Official documentation to come.' SpoFileSharing = 'Boolean | Optional | Official documentation to come.' AzureResourceThreatProtectionSettingsUpdated = 'Boolean | Optional | Official documentation to come.' AWSS3BucketDeleted = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionMediumProfileConfirmedIssue = 'Boolean | Optional | Official documentation to come.' GoogleDriveContentAccess = 'Boolean | Optional | Official documentation to come.' EpoBrowseToKeyloggerSites = 'Boolean | Optional | Official documentation to come.' EpoBrowseToIllegalSoftwareSites = 'Boolean | Optional | Official documentation to come.' EnableTeam = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionMediumProfileInsightCount = 'UInt32 | Optional | Official documentation to come.' EpoFileArchived = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionLowProfileSourceType = 'UInt32 | Optional | Official documentation to come.' SpoFolderDeleted = 'Boolean | Optional | Official documentation to come.' AnalyticsTurnedOffEnabled = 'Boolean | Optional | Official documentation to come.' PowerBISensitivityLabelRemovedFromArtifacts = 'Boolean | Optional | Official documentation to come.' CopyToUSB = 'Boolean | Optional | Official documentation to come.' SessionRecordingEnabled = 'Boolean | Optional | Official documentation to come.' SpoDownload = 'Boolean | Optional | Official documentation to come.' McasSuspiciousCloudCreation = 'Boolean | Optional | Official documentation to come.' BoxContentAccess = 'Boolean | Optional | Official documentation to come.' HighSeverityAlertsRoleGroups = @( 'String | Optional | Official documentation to come.' ) OfflineRecordingStorageLimitInMb = 'String | Optional | Official documentation to come.' OdbSyncDownload = 'Boolean | Optional | Official documentation to come.' RecordingTimeframePostEventInSec = 'String | Optional | Official documentation to come.' EpoBrowseToChildAbuseSites = 'Boolean | Optional | Official documentation to come.' SpoSiteInternalUserAdded = 'Boolean | Optional | Official documentation to come.' SpoSiteExternalUserAdded = 'Boolean | Optional | Official documentation to come.' LookbackTimeSpan = 'UInt32 | Optional | Official documentation to come.' SecurityAlertUnwantedSoftware = 'Boolean | Optional | Official documentation to come.' DropboxContentDownload = 'Boolean | Optional | Official documentation to come.' EpoBrowseToGamblingSites = 'Boolean | Optional | Official documentation to come.' EpoRemovableMediaMount = 'Boolean | Optional | Official documentation to come.' BoxContentDownload = 'Boolean | Optional | Official documentation to come.' DropboxContentExternallyShared = 'Boolean | Optional | Official documentation to come.' EpoBrowseToPornographySites = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionHighProfileConfirmedIssue = 'Boolean | Optional | Official documentation to come.' UserHistory = 'Boolean | Optional | Official documentation to come.' AzureSQLServerFirewallRuleDeleted = 'Boolean | Optional | Official documentation to come.' Mcas3rdPartyAppFileDelete = 'Boolean | Optional | Official documentation to come.' AnomalyDetections = 'Boolean | Optional | Official documentation to come.' McasMultipleStorageDeletion = 'Boolean | Optional | Official documentation to come.' SpoFileLabelDowngraded = 'Boolean | Optional | Official documentation to come.' TeamsChannelFileSharedExternal = 'Boolean | Optional | Official documentation to come.' GoogleDriveContentDelete = 'Boolean | Optional | Official documentation to come.' TeamsChannelMemberAddedExternal = 'Boolean | Optional | Official documentation to come.' EpoBrowseToLlmSites = 'Boolean | Optional | Official documentation to come.' SpoFileDeletedFromSecondStageRecycleBin = 'Boolean | Optional | Official documentation to come.' SpoFileDeletedFromFirstStageRecycleBin = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionLowProfileInsightCount = 'UInt32 | Optional | Official documentation to come.' AdaptiveProtectionMediumProfileGeneratedIssueSeverity = 'UInt32 | Optional | Official documentation to come.' SpoFileAccessed = 'Boolean | Optional | Official documentation to come.' Print = 'Boolean | Optional | Official documentation to come.' AzureSQLServerAuditingSettingsUpdated = 'Boolean | Optional | Official documentation to come.' EpoBrowseToUnallowedDomain = 'Boolean | Optional | Official documentation to come.' InsiderRiskScenario = 'String | Required | Name of the scenario supported by the policy.' PowerBIReportsDownloaded = 'Boolean | Optional | Official documentation to come.' EmployeeAccessedEmployeePatientData = 'Boolean | Optional | Official documentation to come.' TeamsFileDownload = 'Boolean | Optional | Official documentation to come.' Mcas3rdPartyAppFileSharing = 'Boolean | Optional | Official documentation to come.' UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | Name of the insider risk policy.' PowerBISensitivityLabelDowngradedForArtifacts = 'Boolean | Optional | Official documentation to come.' PowerBIReportsDeleted = 'Boolean | Optional | Official documentation to come.' DLPUserRiskSync = 'Boolean | Optional | Official documentation to come.' HistoricTimeSpan = 'String | Optional | Official documentation to come.' SpoFolderSharing = 'Boolean | Optional | Official documentation to come.' AWSS3PublicAccessEnabled = 'Boolean | Optional | Official documentation to come.' SpoApprovedAccess = 'Boolean | Optional | Official documentation to come.' McasSuspiciousAdminActivities = 'Boolean | Optional | Official documentation to come.' EmployeeAccessedFamilyData = 'Boolean | Optional | Official documentation to come.' AnalyticsNewInsightEnabled = 'Boolean | Optional | Official documentation to come.' GPUUtilizationLimit = 'UInt32 | Optional | Official documentation to come.' EpoFileDownloadedFromEnterpriseDomain = 'Boolean | Optional | Official documentation to come.' EpoHiddenFileCreated = 'Boolean | Optional | Official documentation to come.' SpoFileLabelRemoved = 'Boolean | Optional | Official documentation to come.' EpoFileDeleted = 'Boolean | Optional | Official documentation to come.' Anonymization = 'Boolean | Optional | Official documentation to come.' Mcas3rdPartyAppDownload = 'Boolean | Optional | Official documentation to come.' PoliciesHealthRoleGroups = @( 'String | Optional | Official documentation to come.' ) AdaptiveProtectionLowProfileConfirmedIssueSeverity = 'UInt32 | Optional | Official documentation to come.' RaiseAuditAlert = 'Boolean | Optional | Official documentation to come.' McasTerminatedEmployeeActivity = 'Boolean | Optional | Official documentation to come.' PowerBIDashboardsDeleted = 'Boolean | Optional | Official documentation to come.' EpoFileRenamed = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionEnabled = 'Boolean | Optional | Determines if Adaptive Protection is enabled for Purview.' AdaptiveProtectionHighProfileSourceType = 'UInt32 | Optional | Official documentation to come.' SpoSiteSharing = 'Boolean | Optional | Official documentation to come.' GoogleDriveContentExternallyShared = 'Boolean | Optional | Official documentation to come.' SpoSyncDownload = 'Boolean | Optional | Official documentation to come.' EpoBrowseToHateIntoleranceSites = 'Boolean | Optional | Official documentation to come.' AWSS3BlockPublicAccessDisabled = 'Boolean | Optional | Official documentation to come.' SpoFolderDeletedFromFirstStageRecycleBin = 'Boolean | Optional | Official documentation to come.' EpoCopyToNetworkShare = 'Boolean | Optional | Official documentation to come.' NotificationDetailsRoleGroups = @( 'String | Optional | Official documentation to come.' ) MDATPTriageStatus = 'String | Optional | Official documentation to come.' AWSS3ServerLoggingDisabled = 'Boolean | Optional | Official documentation to come.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' TeamsFolderSharedExternal = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionHighProfileInsightTypes = @( 'String | Optional | Official documentation to come.' ) PowerBIReportsViewed = 'Boolean | Optional | Official documentation to come.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) BoxContentExternallyShared = 'Boolean | Optional | Official documentation to come.' AdaptiveProtectionHighProfileConfirmedIssueSeverity = 'UInt32 | Optional | Official documentation to come.' SpoSiteLabelRemoved = 'Boolean | Optional | Official documentation to come.' EpoFileStagedToCentralLocation = 'Boolean | Optional | Official documentation to come.' TeamsSensitiveMessage = 'Boolean | Optional | Official documentation to come.' EpoSensitiveFileRead = 'Boolean | Optional | Official documentation to come.' OdbDownload = 'Boolean | Optional | Official documentation to come.' McasImpossibleTravel = 'Boolean | Optional | Official documentation to come.' } ) LabelPolicies = @( @{ AddModernGroupLocationException = @( 'String | Optional | The AddModernGroupLocationException parameter specifies the Microsoft 365 Groups to add to exclusions when you''re using the value All for the ModernGroupLocation parameter.' ) RemoveModernGroupLocation = @( 'String | Optional | The RemoveModernGroupLocation parameter specifies the Microsoft 365 Groups to remove from the policy.' ) Name = 'String | Required | The Name parameter specifies the unique name for the sensitivity label. The maximum length is 64 characters. If the value contains spaces, enclose the value in quotation marks.' ModernGroupLocation = @( 'String | Optional | The ModernGroupLocation parameter specifies the Microsoft 365 Groups to include in the policy.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) RemoveExchangeLocation = @( 'String | Optional | The RemoveExchangeLocation parameter specifies the mailboxes to remove from the policy.' ) AddExchangeLocation = @( 'String | Optional | The AddExchangeLocation parameter specifies the mailboxes to add in the existing policy.' ) RemoveLabels = @( 'String | Optional | The RemoveLabels parameter specifies the sensitivity labels that are removed from the policy. You can use any value that uniquely identifies the label.' ) Labels = @( 'String | Optional | The Labels parameter specifies the sensitivity labels that are associated with the policy. You can use any value that uniquely identifies the label.' ) ExchangeLocation = @( 'String | Optional | The ExchangeLocation parameter specifies the mailboxes to include in the policy.' ) Ensure = 'String | Optional | Specify if this label policy should exist or not. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' RemoveModernGroupLocationException = @( 'String | Optional | The RemoveModernGroupLocationException parameter specifies the Microsoft 365 Groups to remove from excluded values when you''re using the value All for the ModernGroupLocation parameter.' ) ModernGroupLocationException = @( 'String | Optional | The ModernGroupLocationException parameter specifies the Microsoft 365 Groups to exclude when you''re using the value All for the ModernGroupLocation parameter.' ) AddModernGroupLocation = @( 'String | Optional | The AddModernGroupLocation parameter specifies the Microsoft 365 Groups to add to include the policy.' ) ExchangeLocationException = @( 'String | Optional | The ExchangeLocationException parameter specifies the mailboxes to exclude when you use the value All for the ExchangeLocation parameter.' ) AddExchangeLocationException = @( 'String | Optional | The AddExchangeLocationException parameter specifies the mailboxes to add to exclusions when you use the value All for the ExchangeLocation parameter.' ) AddLabels = @( 'String | Optional | The AddLabels parameter specifies the sensitivity labels to add to the policy. You can use any value that uniquely identifies the label.' ) AdvancedSettings = @( @{ Key = 'String | Optional | Advanced settings key.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = @( 'String | Optional | Advanced settings value.' ) } ) RemoveExchangeLocationException = @( 'String | Optional | The RemoveExchangeLocationException parameter specifies the mailboxes to remove when you use the value All for the ExchangeLocation parameter.' ) } ) PolicyConfig = @{ UnallowedApp = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Name of the application.' Executable = 'String | Optional | Name of the executable file.' } ) SiteGroups = @( @{ addresses = @( @{ AddressUpper = 'String | Optional | TBD' AddressLower = 'String | Optional | TBD' Url = 'String | Optional | TBD' UniqueId = 'String | Required | [Unique ID to identify this specific object]' MatchType = 'String | Optional | TBD' } ) Name = 'String | Optional | TBD' Id = 'String | Optional | TBD' } ) UnallowedBluetoothApp = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Name of the application.' Executable = 'String | Optional | Name of the executable file.' } ) UnallowedCloudSyncApp = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Name of the application.' Executable = 'String | Optional | Name of the executable file.' } ) PathExclusion = @( 'String | Optional | TBD' ) NetworkPathExclusion = 'String | Optional | TBD' EvidenceStoreSettings = @{ FileEvidenceIsEnabled = 'Boolean | Optional | TBD' NumberOfDaysToRetain = 'UInt32 | Optional | TBD' Store = 'String | Optional | TBD' StorageAccounts = @( @{ Name = 'String | Optional | TBD' UniqueId = 'String | Required | [Unique ID to identify this specific object]' BlobUri = 'String | Optional | TBD' } ) } serverDlpEnabled = 'Boolean | Optional | TBD' UnallowedBrowser = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Name of the application.' Executable = 'String | Optional | Name of the executable file.' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) VPNSettings = @( 'String | Optional | TBD' ) QuarantineParameters = @{ FileReplacementText = 'String | Optional | TBD' MacQuarantinePath = 'String | Optional | TBD' QuarantinePath = 'String | Optional | TBD' EnableQuarantineForCloudSyncApps = 'Boolean | Optional | TBD' ShouldReplaceFile = 'Boolean | Optional | TBD' } EnableSpoAipMigration = 'Boolean | Optional | TBD' EnableLabelCoauth = 'Boolean | Optional | TBD' CloudAppMode = 'String | Optional | TBD' BusinessJustificationList = @( @{ Enable = 'Boolean | Optional | TBD' justificationText = 'String | Optional | TBD' Id = 'String | Optional | TBD' } ) CustomBusinessJustificationNotification = 'UInt32 | Optional | TBD' CloudAppRestrictionList = @( 'String | Optional | TBD' ) AdvancedClassificationEnabled = 'Boolean | Optional | TBD' BandwidthLimitEnabled = 'Boolean | Optional | TBD' AuditFileActivity = 'Boolean | Optional | TBD' DailyBandwidthLimitInMB = 'UInt32 | Optional | TBD' MacDefaultPathExclusionsEnabled = 'Boolean | Optional | TBD' IncludePredefinedUnallowedBluetoothApps = 'Boolean | Optional | TBD' NetworkPathEnforcementEnabled = 'Boolean | Optional | TBD' MacPathExclusion = @( 'String | Optional | TBD' ) DLPNetworkShareGroups = @( @{ groupName = 'String | Optional | TBD' UniqueId = 'String | Required | [Unique ID to identify this specific object]' groupId = 'String | Optional | TBD' networkPaths = @( 'String | Optional | TBD' ) } ) DLPAppGroups = @( @{ Apps = @( @{ Quarantine = 'Boolean | Optional | TBD' Name = 'String | Optional | TBD' UniqueId = 'String | Required | [Unique ID to identify this specific object]' ExecutableName = 'String | Optional | TBD' } ) Description = 'String | Optional | TBD' Name = 'String | Optional | TBD' Id = 'String | Optional | TBD' } ) DLPRemovableMediaGroups = @( @{ groupName = 'String | Optional | TBD' removableMedia = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' removableMediaPID = 'String | Optional | TBD' serialNumberId = 'String | Optional | TBD' alias = 'String | Optional | TBD' hardwareId = 'String | Optional | TBD' name = 'String | Optional | TBD' removableMediaVID = 'String | Optional | TBD' deviceId = 'String | Optional | TBD' instancePathId = 'String | Optional | TBD' } ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) DLPPrinterGroups = @( @{ printers = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' corporatePrinter = 'Boolean | Optional | TBD' usbPrinterId = 'String | Optional | TBD' usbPrinter = 'Boolean | Optional | TBD' alias = 'String | Optional | TBD' ipRange = @{ fromAddress = 'String | Optional | TBD' toAddress = 'String | Optional | TBD' } printToLocal = 'Boolean | Optional | TBD' name = 'String | Optional | TBD' universalPrinter = 'Boolean | Optional | TBD' printToFile = 'Boolean | Optional | TBD' usbPrinterVID = 'String | Optional | TBD' } ) groupName = 'String | Optional | TBD' UniqueId = 'String | Required | [Unique ID to identify this specific object]' groupId = 'String | Optional | TBD' } ) } ProtectionAlerts = @( @{ NotificationEnabled = 'Boolean | Optional | NotificationEnabled true or false' NotifyUserThrottleWindow = 'UInt32 | Optional | Specifies the time interval in minutes that''s used by the NotifyUserThrottleThreshold parameter' Threshold = 'UInt32 | Optional | Specifies the number of detections that trigger the alert policy within the time period specified by the TimeWindow parameter. A valid value is an integer that''s greater than or equal to 3.' Operation = @( 'String | Optional | Specifies the activities that are monitored by the alert policy' ) NotifyUser = @( 'String | Optional | Specifies the SMTP address of the user who receives notification messages for the alert policy. You can specify multiple values separated by commas' ) NotifyUserThrottleThreshold = 'UInt32 | Optional | Specifies the maximum number of notifications for the alert policy within the time period specified by the NotifyUserThrottleWindow parameter. Once the maximum number of notifications has been reached in the time period, no more notifications are sent for the alert.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PrivacyManagementScopedSensitiveInformationTypesForCounting = @( 'String | Optional | PrivacyManagementScopedSensitiveInformationTypesForCounting' ) NotificationCulture = 'String | Optional | Specifies the language or locale that''s used for notifications. For example, da-DK for Danish' AggregationType = 'String | Optional | Specifies how the alert policy triggers alerts for multiple occurrences of monitored activity | None / SimpleAggregation / AnomalousAggregation / CustomAggregation' NotifyUserSuppressionExpiryDate = 'DateTime | Optional | Specifies whether to temporarily suspend notifications for the alert policy. Until the specified date-time, no notifications are sent for detected activities.' AlertBy = @( 'String | Optional | Specifies the scope for aggregated alert policies' ) VolumeThreshold = 'UInt32 | Optional | Volume Threshold' TimeWindow = 'UInt32 | Optional | Specifies the time interval in minutes for number of detections specified by the Threshold parameter. A valid value is an integer that''s greater than 60 (one hour).' PrivacyManagementScopedSensitiveInformationTypes = @( 'String | Optional | PrivacyManagementScopedSensitiveInformationTypes' ) Comment = 'String | Optional | Specifies an optional comment' Category = 'String | Optional | Specifies a category for the alert policy' AlertFor = @( 'String | Optional | This parameter is reserved for internal Microsoft use' ) Ensure = 'String | Optional | Specify if this alert should exist or not. | Present / Absent' Disabled = 'Boolean | Optional | Enables or disables the alert policy' Severity = 'String | Optional | specifies the severity of the detection | Low / Medium / High / Informational' Filter = 'String | Optional | The Filter parameter uses OPATH syntax to filter the results by the specified properties and values' NotifyUserOnFilterMatch = 'Boolean | Optional | Specifies whether to trigger an alert for a single event when the alert policy is configured for aggregated activity' ThreatType = 'String | Optional | Specifies the type of activities that are monitored by the alert policy | Activity / Malware / Phish / Malicious / MaliciousUrlClick / MailFlow' UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | Specifies the unique name for the alert policy' PrivacyManagementScopedSensitiveInformationTypesThreshold = 'UInt64 | Optional | PrivacyManagementScopedSensitiveInformationTypesThreshold' } ) RecordReviewNotificationTemplateConfig = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsCustomizedReminderTemplate = 'Boolean | Optional | The IsCustomizedReminderTemplate switch specifies whether to use a customized review reminder instead of the system default reminder.' CustomizedNotificationDataString = 'String | Optional | The CustomizedNotificationDataString parameter specifies the customized review notification text to use. If the value contains spaces, enclose the value in quotation marks.' IsCustomizedNotificationTemplate = 'Boolean | Optional | The IsCustomizedNotificationTemplate switch specifies whether to use a customized review notification instead of the system default notification.' CustomizedReminderDataString = 'String | Optional | The CustomizedReminderDataString parameter specifies the customized review reminder text to use. If the value contains spaces, enclose the value in quotation marks.' } RetentionCompliancePolicies = @( @{ Comment = 'String | Optional | The Comment parameter specifies an optional comment.' PublicFolderLocation = @( 'String | Optional | The PublicFolderLocation parameter specifies that you want to include all public folders in the retention policy. You use the value All for this parameter.' ) OneDriveLocationException = @( 'String | Optional | This parameter specifies the OneDrive for Business sites to exclude when you use the value All for the OneDriveLocation parameter. You identify the site by its URL value.' ) TeamsChatLocationException = @( 'String | Optional | This parameter specifies the SharePoint Online sites to exclude when you use the value All for the TeamsChatLocation parameter. You identify the site by its URL value.' ) Name = 'String | Required | The Name parameter specifies the unique name of the retention policy.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SkypeLocation = @( 'String | Optional | The SkypeLocation parameter specifies the Skype for Business Online users to include in the policy.' ) TeamsChannelLocationException = @( 'String | Optional | This parameter specifies the SharePoint Online sites to exclude when you use the value All for the TeamsChannelLocation parameter. You identify the site by its URL value.' ) OneDriveLocation = @( 'String | Optional | The OneDriveLocation parameter specifies the OneDrive for Business sites to include. You identify the site by its URL value, or you can use the value All to include all sites.' ) ExchangeLocation = @( 'String | Optional | The ExchangeLocation parameter specifies the mailboxes to include.' ) SkypeLocationException = @( 'String | Optional | This parameter is reserved for internal Microsoft use.' ) TeamsChatLocation = @( 'String | Optional | The TeamsChatLocation parameter specifies the Teams Chat to include in the policy.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' RestrictiveRetention = 'Boolean | Optional | The RestrictiveRetention parameter specifies whether Preservation Lock is enabled for the policy.' ExchangeLocationException = @( 'String | Optional | This parameter specifies the mailboxes to remove from the list of excluded mailboxes when you use the value All for the ExchangeLocation parameter' ) DynamicScopeLocation = @( 'String | Optional | Location of the dynamic scope for this policy.' ) TeamsChannelLocation = @( 'String | Optional | The TeamsChannelLocation parameter specifies the Teams Channel to include in the policy.' ) SharePointLocationException = @( 'String | Optional | This parameter specifies the SharePoint Online sites to exclude when you use the value All for the SharePointLocation parameter. You identify the site by its URL value.' ) ModernGroupLocationException = @( 'String | Optional | The ModernGroupLocationException parameter specifies the Office 365 groups to exclude when you''re using the value All for the ModernGroupLocation parameter.' ) SharePointLocation = @( 'String | Optional | The SharePointLocation parameter specifies the SharePoint Online sites to include. You identify the site by its URL value, or you can use the value All to include all sites.' ) ModernGroupLocation = @( 'String | Optional | The ModernGroupLocation parameter specifies the Office 365 groups to include in the policy.' ) Enabled = 'Boolean | Optional | Determines if the policy is enabled or not.' } ) RetentionComplianceRules = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | The Name parameter specifies the unique name of the retention rule.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' ContentMatchQuery = 'String | Optional | The ContentMatchQuery parameter specifies a content search filter.' RetentionDurationDisplayHint = 'String | Optional | The RetentionDurationDisplayHint parameter specifies the units that are used to display the retention duration in the Security and Compliance Center. Valid values are: Days, Months or Years. | Days / Months / Years' RetentionComplianceAction = 'String | Optional | The RetentionComplianceAction parameter specifies the retention action for the rule. Valid values are: Delete, Keep and KeepAndDelete. | Delete / Keep / KeepAndDelete' RetentionDuration = 'String | Optional | The RetentionDuration parameter specifies the hold duration for the retention rule. Valid values are: An integer - The hold duration in days, Unlimited - The content is held indefinitely.' ExcludedItemClasses = @( 'String | Optional | The ExcludedItemClasses parameter specifies the types of messages to exclude from the rule. You can use this parameter only to exclude items from a hold policy, which excludes the specified item class from being held. Using this parameter won''t exclude items from deletion policies. Typically, you use this parameter to exclude voicemail messages, IM conversations, and other Skype for Business Online content from being held by a hold policy.' ) Policy = 'String | Required | The Policy parameter specifies the policy to contain the rule.' ExpirationDateOption = 'String | Optional | The ExpirationDateOption parameter specifies whether the expiration date is calculated from the content creation date or last modification date. Valid values are: CreationAgeInDays and ModificationAgeInDays. | CreationAgeInDays / ModificationAgeInDays' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Comment = 'String | Optional | The Comment parameter specifies an optional comment.' } ) RetentionEventTypes = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Comment = 'String | Optional | The Comment parameter specifies an optional comment.' Name = 'String | Required | The Name parameter specifies the unique name of the retention event type.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' } ) RoleGroups = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | The Description parameter specifies the description that''s displayed when the role group is viewed using the Get-RoleGroup cmdlet. Enclose the description in quotation marks' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if the Role Group should exist or not. | Present / Absent' Roles = @( 'String | Optional | The Roles parameter specifies the management roles to assign to the role group when it''s created. If a role name contains spaces, enclose the name in quotation marks. If you want to assign more that one role, separate the role names with commas.' ) Name = 'String | Required | The Name parameter specifies the name of the role. The maximum length of the name is 64 characters.' DisplayName = 'String | Optional | The DisplayName parameter specifies the friendly name of the role group. If the name contains spaces, enclose the name in quotation marks. This parameter has a maximum length of 256 characters.' } ) RoleGroupMembers = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | The Description parameter specifies the description that''s displayed when the role group is viewed using the Get-RoleGroup cmdlet. Enclose the description in quotation marks' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if the Role Group Members should exist or not. | Present / Absent' Name = 'String | Required | The Name parameter specifies the name of the role. The maximum length of the name is 64 characters.' Members = @( 'String | Optional | The Members parameter specifies the mailboxes or mail-enabled USGs to add as a member of the role group. You can identify the user or group by the name, DN, or primary SMTP address value. You can specify multiple members separated by commas (Value1,Value2,...ValueN). If the value contains spaces, enclose the value in quotation marks' ) } ) SecurityFilters = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Action = 'String | Optional | The Action parameter filters the results by the type of search action that a filter is applied to. | Export / Preview / Purge / Search / All' Filters = @( 'String | Optional | The Filters parameter specifies the search criteria for the compliance security filter. The filters are applied to the users specified by the Users parameter. You can create three different types of filters: Mailbox filter, Mailbox content filter or Site and site content filter' ) Ensure = 'String | Optional | Specify if this label policy should exist or not. | Present / Absent' Region = 'String | Optional | The Region parameter specifies the satellite location for multi-geo tenants to conduct eDiscovery searches in. | APC / AUS / CAN / EUR / FRA / GBR / IND / JPN / LAM / NAM / ' Users = @( 'String | Optional | The User parameter filters the results by the user who gets a filter applied to their searches. Acceptable values are : The alias or email address of a user, All or The name of a role group' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | The Description parameter specifies a description for the compliance security filter. The maximum length is 256 characters. If the value contains spaces, enclose the value in quotation marks (").' FilterName = 'String | Required | The FilterName parameter specifies the name of the compliance security filter that you want to view. If the value contains spaces, enclose the value in quotation marks (").' } ) SensitivityLabels = @( @{ ApplyContentMarkingHeaderFontSize = 'SInt32 | Optional | The ApplyContentMarkingHeaderFontSize parameter specifies the font size (in points) of the header text.' EncryptionRightsDefinitions = 'String | Optional | The EncryptionRightsDefinitions parameter specifies the rights users have when accessing protected. This parameter uses the syntax Identity1:Rights1,Rights2;Identity2:Rights3,Rights4. For example, john@contoso.com:VIEW,EDIT;microsoft.com:VIEW.' SiteAndGroupProtectionBlockAccess = 'Boolean | Optional | The SiteAndGroupProtectionBlockAccess parameter blocks access.' ApplyWaterMarkingText = 'String | Optional | The ApplyWaterMarkingText parameter specifies the watermark text. If the value contains spaces, enclose the value in quotation marks.' DisplayName = 'String | Optional | The DisplayName parameter specifies the display name for the sensitivity label. The display name appears in the Microsoft Office and is used by Outlook users to select the appropriate sensitivity label before they send a message.' ApplyContentMarkingFooterMargin = 'SInt32 | Optional | The ApplyContentMarkingFooterMargin parameter specifies the size (in points) of the footer margin.' ApplyWaterMarkingFontColor = 'String | Optional | The ApplyWaterMarkingFontColor parameter specifies the color of the watermark text. This parameter accepts a hexadecimal color code value in the format #xxxxxx.' EncryptionProtectionType = 'String | Optional | The EncryptionProtectionType parameter specifies the protection type for encryption. | Template / RemoveProtection / UserDefined' AutoLabelingSettings = @{ AutoApplyType = 'String | Required | Specifies what to do when content matches the conditions | Automatic / Recommend' Operator = 'String | Required | How to process the various groups | And / Or' Groups = @( @{ Operator = 'String | Required | How to process the Sensitive Information Types and Trainable Classifiers | And / Or' TrainableClassifier = @( @{ id = 'String | Optional | Id of the Trainable Classifier' name = 'String | Required | Name of the Trainable Classifier' } ) SensitiveInformationType = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' confidencelevel = 'String | Optional | Confidence level value for the Sensitive Information | Low / Medium / High' classifiertype = 'String | Optional | Type of Classifier value for the Sensitive Information' mincount = 'String | Optional | Minimum Count value for the Sensitive Information' name = 'String | Required | Name of the Sensitive Information Type' maxcount = 'String | Optional | Maximum Count value for the Sensitive Information' } ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' Name = 'String | Required | Name of the group' } ) PolicyTip = 'String | Optional | Display this message to users when the label is applied' } AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SiteAndGroupProtectionAllowAccessToGuestUsers = 'Boolean | Optional | The SiteAndGroupProtectionAllowAccessToGuestUsers parameter enables or disables access to guest users.' ApplyContentMarkingHeaderEnabled = 'Boolean | Optional | The ApplyContentMarkingHeaderEnabled parameter enables or disables the Apply Content Marking Header action for the label.' Tooltip = 'String | Optional | The ToolTip parameter specifies the default tooltip and sensitivity label description that''s seen by users. It the value contains spaces, enclose the value in quotation marks.' SiteAndGroupExternalSharingControlType = 'String | Optional | The SiteAndGroupExternalSharingControlType parameter specifies the external user sharing setting for the label. | ExternalUserAndGuestSharing / ExternalUserSharingOnly / ExistingExternalUserSharingOnly / Disabled' ApplyContentMarkingHeaderText = 'String | Optional | The ApplyContentMarkingHeaderText parameter specifies the header text. If the value contains spaces, enclose the value in quotation marks.' Priority = 'UInt32 | Optional | The Priority parameter specifies a priority value for the sensitivity label that determines the order of label processing. A lower integer value indicates a highter priority.' EncryptionRightsUrl = 'String | Optional | The EncryptionRightsUrl parameter specifies the URL for hold your own key (HYOK) protection.' ParentId = 'String | Optional | The ParentId parameter specifies the parent label that you want this label to be under (a sublabel). You can use any value that uniquely identifies the parent sensitivity label for example name.' Comment = 'String | Optional | The Comment parameter specifies an optional comment.' ApplyContentMarkingFooterEnabled = 'Boolean | Optional | The ApplyContentMarkingFooterEnabled parameter specifies whether to enable or disable the sensitivity label.' ApplyWaterMarkingLayout = 'String | Optional | The ApplyWaterMarkingAlignment parameter specifies the watermark alignment. | Horizontal / Diagonal' ApplyContentMarkingFooterFontSize = 'SInt32 | Optional | The ApplyContentMarkingFooterFontSize parameter specifies the font size (in points) of the footer text.' ApplyContentMarkingHeaderFontColor = 'String | Optional | The ApplyContentMarkingHeaderFontColor parameter specifies the color of the header text. This parameter accepts a hexadecimal color code value in the format #xxxxxx. The default value is #000000.' SiteAndGroupProtectionPrivacy = 'String | Optional | The SiteAndGroupProtectionPrivacy parameter specifies the privacy level for the label. | Public / Private / Unspecified' EncryptionOfflineAccessDays = 'SInt32 | Optional | The EncryptionOfflineAccessDays parameter specifies the number of days that offline access is allowed.' ApplyContentMarkingFooterText = 'String | Optional | The ApplyContentMarkingFooterText parameter specifies the footer text. If the value contains spaces, enclose the value in quotation marks.' ApplyWaterMarkingFontSize = 'SInt32 | Optional | The ApplyWaterMarkingFontSize parameter specifies the font size (in points) of the watermark text.' Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' EncryptionDoNotForward = 'Boolean | Optional | The EncryptionDoNotForward parameter specifies whether the Do Not Forward template is applied.' EncryptionEnabled = 'Boolean | Optional | The EncryptionEnabled parameter specifies whether encryption in enabled.' ApplyContentMarkingHeaderAlignment = 'String | Optional | The ApplyContentMarkingHeaderAlignment parameter specifies the header alignment. | Left / Center / Right' ApplyContentMarkingHeaderMargin = 'SInt32 | Optional | The ApplyContentMarkingHeaderMargin parameter specifies the size (in points) of the header margin.' AdvancedSettings = @( @{ Key = 'String | Optional | Advanced settings key.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = @( 'String | Optional | Advanced settings value.' ) } ) ApplyContentMarkingFooterAlignment = 'String | Optional | The ApplyContentMarkingFooterAlignment parameter specifies the footer alignment. | Left / Center / Right' SiteAndGroupProtectionAllowLimitedAccess = 'Boolean | Optional | The SiteAndGroupProtectionAllowLimitedAccess parameter enables or disables limited access.' ApplyWaterMarkingEnabled = 'Boolean | Optional | The ApplyWaterMarkingEnabled parameter enables or disables the Apply Watermarking Header action for the label.' SiteAndGroupProtectionAllowEmailFromGuestUsers = 'Boolean | Optional | The SiteAndGroupProtectionAllowEmailFromGuestUsers parameter enables or disables email from guest users.' UniqueId = 'String | Required | Unique ID to identify this specific object' ApplyContentMarkingFooterFontColor = 'String | Optional | The ApplyContentMarkingFooterFontColor parameter specifies the color of the footer text. This parameter accepts a hexadecimal color code value in the format #xxxxxx. The default value is #000000.' EncryptionPromptUser = 'Boolean | Optional | The EncryptionPromptUser parameter specifies whether to set the label with user defined permission in Word, Excel, and PowerPoint.' SiteAndGroupProtectionEnabled = 'Boolean | Optional | The SiteAndGroupProtectionEnabled parameter enables or disables the Site and Group Protection action for the labels.' EncryptionEncryptOnly = 'Boolean | Optional | The EncryptionEncryptOnly parameter specifies whether the encrypt-only template is applied.' Name = 'String | Required | The Name parameter specifies the unique name for the sensitivity label. The maximum length is 64 characters. If the value contains spaces, enclose the value in quotation marks.' LocaleSettings = @( @{ LabelSettings = @( @{ Key = 'String | Optional | Advanced settings key.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = @( 'String | Optional | Advanced settings value.' ) } ) localeKey = 'String | Optional | Name of the Local key.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) ContentType = @( 'String | Optional | The ContentType parameter specifies where the sensitivity label can be applied. | File, Email / Site, UnifiedGroup / PurviewAssets / Teamwork / SchematizedData' ) EncryptionContentExpiredOnDateInDaysOrNever = 'String | Optional | The EncryptionContentExpiredOnDateInDaysOrNever parameter specifies when the encrypted content expires. Valid values are integer or never.' SiteAndGroupProtectionAllowFullAccess = 'Boolean | Optional | The SiteAndGroupProtectionAllowFullAccess parameter enables or disables full access.' } ) SupervisoryReviewPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' Comment = 'String | Optional | The Comment parameter specifies an optional comment. If you specify a value that contains spaces, enclose the value in quotation marks.' Name = 'String | Required | The Name parameter specifies the unique name for the supervisory review policy. The name can''t exceed 64 characters. If the value contains spaces, enclose the value in quotation marks.' Reviewers = @( 'String | Required | The Reviewers parameter specifies the SMTP addresses of the reviewers for the supervisory review policy. You can specify multiple email addresses separated by commas.' ) } ) SupervisoryReviewRules = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if this rule should exist or not. | Present / Absent' Condition = 'String | Optional | The Condition parameter specifies the conditions and exceptions for the rule.' SamplingRate = 'UInt32 | Optional | The SamplingRate parameter specifies the percentage of communications for review. If you want reviewers to review all detected items, use the value 100.' Policy = 'String | Required | The Policy parameter specifies the supervisory review policy that''s assigned to the rule. You can use any value that uniquely identifies the policy.' Name = 'String | Required | The Name parameter specifies the unique name for the supervisory review policy. The name can''t exceed 64 characters. If the value contains spaces, enclose the value in quotation marks.' } ) UnifiedAuditLogRetentionPolicies = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | The description for the audit log retention policy' Operations = @( 'String | Optional | Specifies the audit log operations that are retained by the policy' ) Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' RetentionDuration = 'String | Optional | How long audit log records are kept | SevenDays / OneMonth / ThreeMonths / SixMonths / NineMonths / TwelveMonths / ThreeYears / FiveYears / SevenYears / TenYears' Name = 'String | Required | Unique name for the audit log retention policy' RecordTypes = @( 'String | Optional | Specifies the audit logs of a specific record type that are retained by the policy.' ) Priority = 'UInt32 | Optional | Priority value for the policy that determines the order of policy processing.' UserIds = @( 'String | Optional | Specifies the audit logs that are retained by the policy based on the ID of the user who performed the action' ) } ) } Sentinel = @{ AlertRules = @( @{ SuppressionDuration = 'String | Optional | The suppression (in ISO 8601 duration format) to wait since last time this alert rule been triggered.' DisplayNamesFilter = @( 'String | Optional | The alerts'' displayNames on which the cases will be generated.' ) Description = 'String | Optional | The name of the workspace.' DisplayNamesExcludeFilter = @( 'String | Optional | The alerts'' displayNames on which the cases will not be generated.' ) Tactics = @( 'String | Optional | The tactics of the alert rule' ) Query = 'String | Optional | The query that creates alerts for this rule.' DisplayName = 'String | Required | The display name of the indicator' Enabled = 'Boolean | Optional | Determines whether this alert rule is enabled or disabled.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ProductFilter = 'String | Optional | The alerts'' productName on which the cases will be generated' SubscriptionId = 'String | Optional | The name of the resource group. The name is case insensitive.' SuppressionEnabled = 'String | Optional | Determines whether the suppression for this alert rule is enabled or disabled.' Severity = 'String | Optional | The severity for alerts created by this alert rule.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' EntityMappings = @( @{ fieldMappings = @( @{ UniqueId = 'String | Required | [Unique ID to identify this specific object]' columnName = 'String | Optional | Name of the column' identifier = 'String | Optional | Identifier of the associated field.' } ) UniqueId = 'String | Required | [Unique ID to identify this specific object]' entityType = 'String | Optional | Type of entity.' } ) QueryPeriod = 'String | Optional | The period (in ISO 8601 duration format) that this alert rule looks at.' AlertRuleTemplateName = 'String | Optional | The Name of the alert rule template used to create this rule.' Techniques = @( 'String | Optional | The techniques of the alert rule' ) TriggerThreshold = 'UInt32 | Optional | The threshold triggers this alert rule.' Id = 'String | Optional | The unique id of the indicator.' SeveritiesFilter = @( 'String | Optional | The alerts'' severities on which the cases will be generated' ) ResourceGroupName = 'String | Optional | The name of the resource group. The name is case insensitive.' TriggerOperator = 'String | Optional | The operation against the threshold that triggers alert rule.' AlertDetailsOverride = @{ alertDescriptionFormat = 'String | Optional | The format containing columns name(s) to override the alert description' alertDynamicProperties = @( @{ alertProperty = 'String | Optional | Dynamic property key.' alertPropertyValue = 'String | Optional | Dynamic property value.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' } ) alertTacticsColumnName = 'String | Optional | The column name to take the alert tactics from' alertDisplayNameFormat = 'String | Optional | The format containing columns name(s) to override the alert name' alertSeverityColumnName = 'String | Optional | The column name to take the alert severity from' } EventGroupingSettings = @{ aggregationKind = 'String | Optional | The event grouping aggregation kinds' } SubTechniques = @( 'String | Optional | The sub-techniques of the alert rule' ) CustomDetails = @( @{ DetailValue = 'String | Optional | Associated value with the custom detail.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' DetailKey = 'String | Optional | Key of the custom detail.' } ) QueryFrequency = 'String | Optional | The frequency (in ISO 8601 duration format) for this alert rule to run.' WorkspaceName = 'String | Optional | The name of the workspace.' IncidentConfiguration = @{ groupingConfiguration = @{ enabled = 'Boolean | Optional | Grouping enabled' matchingMethod = 'String | Optional | Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.' reopenClosedIncident = 'Boolean | Optional | Re-open closed matching incidents' lookbackDuration = 'String | Optional | Limit the group to alerts created within the lookback duration (in ISO 8601 duration format)' groupByAlertDetails = @( @{ DisplayName = 'String | Optional | Display name of the alert detail.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Severity = 'String | Optional | Severity level associated with the alert detail.' } ) groupByEntities = @( 'String | Optional | A list of entity types to group by (when matchingMethod is Selected). Only entities defined in the current alert rule may be used.' ) groupByCustomDetails = @( 'String | Optional | A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.' ) } createIncident = 'Boolean | Optional | Create incidents from alerts triggered by this analytics rule' } Kind = 'String | Optional | The kind of the alert rule' } ) Settings = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' EntityAnalyticsIsEnabled = 'Boolean | Optional | Specififies if Entity Analyticsshould be enabled or not.' UebaDataSource = @( 'String | Optional | The list of Data sources associated with the UEBA.' ) AnomaliesIsEnabled = 'Boolean | Optional | Specififies if Anomaly detection should be enabled or not.' ResourceGroupName = 'String | Required | The Resource Group Name' WorkspaceName = 'String | Required | The name of the workspace.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EyesOnIsEnabled = 'Boolean | Optional | Specififies if Auditing and Health Monitoring should be enabled or not.' SubscriptionId = 'String | Optional | Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.' } ) ThreatIntelligenceIndicators = @( @{ ThreatTypes = @( 'String | Optional | Threat types' ) Id = 'String | Optional | The unique id of the indicator.' Source = 'String | Optional | Source type.' WorkspaceName = 'String | Optional | The name of the workspace.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ValidUntil = 'String | Optional | Valid until' DisplayName = 'String | Required | The display name of the indicator' Labels = @( 'String | Optional | Labels of threat intelligence entity' ) Pattern = 'String | Optional | Pattern of a threat intelligence entity' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' ThreatIntelligenceTags = @( 'String | Optional | List of tags' ) ValidFrom = 'String | Optional | Valid from' SubscriptionId = 'String | Optional | The name of the resource group. The name is case insensitive.' ResourceGroupName = 'String | Optional | The name of the resource group. The name is case insensitive.' PatternType = 'String | Optional | Pattern type of a threat intelligence entity' Description = 'String | Optional | The name of the workspace.' Confidence = 'UInt32 | Optional | Confidence of threat intelligence entity' Revoked = 'String | Optional | Is threat intelligence entity revoked' KillChainPhases = @( 'String | Optional | Kill chain phases' ) } ) Watchlists = @( @{ DefaultDuration = 'String | Optional | The default duration of a watchlist (in ISO 8601 duration format)' Id = 'String | Optional | The id (a Guid) of the watchlist' SubscriptionId = 'String | Optional | The name of the resource group. The name is case insensitive.' WorkspaceName = 'String | Optional | The name of the workspace.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SourceType = 'String | Optional | The source of the watchlist. Only accepts ''Local file'' and ''Remote storage''. And it must included in the request.' Name = 'String | Required | Tha name of the watchlist.' RawContent = 'String | Optional | The raw content that represents to watchlist items to create. Example : This line will be skipped header1,header2 value1,value2' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Absent / Present' Alias = 'String | Optional | The watchlist alias' ItemsSearchKey = 'String | Optional | The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.' DisplayName = 'String | Optional | The display name of the watchlist.' ResourceGroupName = 'String | Optional | The name of the resource group. The name is case insensitive.' Description = 'String | Optional | A description of the watchlist' NumberOfLinesToSkip = 'UInt32 | Optional | The number of lines in a csv content to skip before the header' } ) } SharePoint = @{ AccessControlSettings = @{ Ensure = 'String | Optional | Only value accepted is ''Present'' | Present / Absent' EmailAttestationReAuthDays = 'UInt32 | Optional | Sets email attestation re-auth days' EnableRestrictedAccessControl = 'Boolean | Optional | Enables or disables the restricted access control.' ConditionalAccessPolicy = 'String | Optional | Blocks or limits access to SharePoint and OneDrive content from un-managed devices. | AllowFullAccess / AllowLimitedAccess / BlockAccess / ProtectionLevel' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) EmailAttestationRequired = 'Boolean | Optional | Sets email attestation to required' StartASiteFormUrl = 'String | Optional | Specifies URL of the form to load in the Start a Site dialog. The valid values are:<emptyString> (default) - Blank by default, this will also remove or clear any value that has been set.Full URL - Example: https://contoso.sharepoint.com/path/to/form' IPAddressEnforcement = 'Boolean | Optional | Allows access from network locations that are defined by an administrator.' DisplayStartASiteOption = 'Boolean | Optional | Determines whether tenant users see the Start a Site menu option' DisallowInfectedFileDownload = 'Boolean | Optional | Prevents the Download button from being displayed on the Virus Found warning page.' ExternalServicesEnabled = 'Boolean | Optional | Enables external services for a tenant. External services are defined as services that are not in the Office 365 datacenters.' IPAddressAllowList = 'String | Optional | Configures multiple IP addresses or IP address ranges (IPv4 or IPv6). Use commas to separate multiple IP addresses or IP address ranges.' IPAddressWACTokenLifetime = 'UInt32 | Optional | Office webapps TokenLifeTime in minutes' } Apps = @( @{ Path = 'String | Required | The path the the app package on disk.' Ensure = 'String | Optional | Present ensures the site collection exists, absent ensures it is removed | Present / Absent' Overwrite = 'Boolean | Optional | Overwrites the existing app package if it already exists.' Publish = 'Boolean | Optional | This will deploy/trust an app into the app catalog.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The name of the App.' } ) BrowserIdleSignout = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Enabled = 'Boolean | Optional | Enables the browser idle sign-out policy' WarnAfter = 'String | Optional | Specifies a time interval of inactivity before the user gets a warning about being signed out' SignOutAfter = 'String | Optional | Specifies a time interval of inactivity before the user gets signed out' } HomeSite = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Url = 'String | Optional | The URL of the home site collection' Ensure = 'String | Optional | Present ensures the site collection is registered as home site, absent ensures it is unregistered | Present / Absent' } HubSites = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Url = 'String | Required | The URL of the site collection' Description = 'String | Optional | The description of the hub site' Ensure = 'String | Optional | Present ensures the site collection is registered as hub site, absent ensures it is unregistered | Present / Absent' RequiresJoinApproval = 'Boolean | Optional | Does the hub site require approval to join' AllowedToJoin = @( 'String | Optional | The users or mail-enabled security groups which are allowed to associate their site with a hub site' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) LogoUrl = 'String | Optional | The url to the logo of the hub site' SiteDesignId = 'String | Optional | The guid of the site design to link to the hub site' Title = 'String | Optional | The title of the hub site' } ) OrgAssetsLibraries = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' ThumbnailUrl = 'String | Optional | Indicates the absolute URL of the library to be designated as a central location for organization Indicates the URL of the background image used when the library is publicly displayed. If no thumbnail URL is indicated, the card will have a gray background.' Ensure = 'String | Optional | Specify if the SPO Org Assets library should exist or not. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) LibraryUrl = 'String | Required | Indicates the absolute URL of the library to be designated as a central location for organization assets.' CdnType = 'String | Optional | Specifies the CDN type. The valid values are public or private. | Public / Private' } ) PropertyBags = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Url = 'String | Required | Url of the site where to configure the PropertyBag property.' Key = 'String | Required | Key that should be configured.' Ensure = 'String | Optional | Specify if this policy should exist or not. | Present / Absent' Value = 'String | Required | Value of the assigned key.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } ) RetentionLabelsSettings = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MetadataEditBlockingEnabled = 'Boolean | Optional | Set metadata edit blocking enabled setting.' AllowFilesWithKeepLabelToBeDeletedODB = 'Boolean | Optional | Set whether files with Keep Label can be deleted in OneDrive for Business.' AdvancedRecordVersioningDisabled = 'Boolean | Optional | Set to enable or disable the advanced record versioning.' AllowFilesWithKeepLabelToBeDeletedSPO = 'Boolean | Optional | Set whether files with Keep Label can be deleted in SharePoint Online.' } SearchManagedProperties = @( @{ Searchable = 'Boolean | Optional | Enables querying against the content of the managed property. The content of this managed property is included in the full-text index. For example, if the property is ''author'', a simple query for ''Smith'' returns items containing the word ''Smith'' and items whose author property contains ''Smith''.' Description = 'String | Optional | Description of the Managed Property' Type = 'String | Required | The Type of the Managed Property | Text / Integer / Decimal / DateTime / YesNo / Double / Binary' FullTextContext = 'UInt32 | Optional | Defines the context of a managed property within its full-text index.' Name = 'String | Required | The Name of the Managed Property' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) MappedCrawledProperties = @( 'String | Optional | Names of the crawled properties that are mapped to this managed property' ) UniqueId = 'String | Required | Unique ID to identify this specific object' TokenNormalization = 'Boolean | Optional | Enable to return results independent of letter casing and diacritics(for example accented characters) used in the query.' LanguageNeutralTokenization = 'Boolean | Optional | By default, search depends on language when it breaks queries and content into parts (tokenization). Select language neutral tokenization if you have multilingual content and this managed property contains tags that are based on metadata term sets or other identifiers.' FinerQueryTokenization = 'Boolean | Optional | By default, search tokenizes queries coarser than content. If a managed property ''ID'' contains the string ''1-23-456#7'', and you query ID:''1-23'', you might not get a partial match because search didn''t break the query into small enough parts. Consider selecting finer query tokenization if the content of this managed property contains separators such as dots and dashes. Finer query tokenization makes queries against this managed property slower.' AllowMultipleValues = 'Boolean | Optional | Allow multiple values of the same type in this managed property. For example, if this is the ''author'' managed property, and a document has multiple authors, each author name will be stored as a separate value in this managed property.' Ensure = 'String | Optional | Present ensures the Search Managed Property exists. | Present' FullTextIndex = 'String | Optional | Defines which full-text index the Managed Property is stored in.' Aliases = @( 'String | Optional | Define an alias for a managed property if you want to use the alias instead of the managed property name in queries and in search results. Use the original managed property and not the alias to map to a crawled property. Use an alias if you don''t want to or don''t have permission to create a new managed property.' ) CompanyNameExtraction = 'Boolean | Optional | Enables the system to extract company name entities from the managed property when crawling new or updated items. Afterwards, the extracted entities can be used to set up refiners in the web part.' CompleteMatching = 'Boolean | Optional | By default, search returns partial matches between queries against this managed property and its content. Select Complete Matching for search to return exact matches instead. If a managed property ''Title'' contains ''Contoso Sites'', only the query Title: ''Contoso Sites'' will give a result.' Refinable = 'String | Optional | Yes: Enables using the property as a refiner for search results in the front end. You must manually configure the refiner in the web part. Yes - latent: Enables switching refinable to active later, without having to do a full re-crawl when you switch. Both options require a full crawl to take effect. | No / Yes - latent / Yes' Safe = 'Boolean | Optional | Enables this managed property to be returned for queries executed by anonymous users. Enable this setting for managed properties that do not contain sensitive information and are appropriate for anonymous users to view.' Retrievable = 'Boolean | Optional | Enables the content of this managed property to be returned in search results. Enable this setting for managed properties that are relevant to present in search results.' Queryable = 'Boolean | Optional | Enables querying against the specific Managed Property. The Managed Property field name must be included in the query, either specified in the query itself or included in the query programmatically. If the Managed Property is ''author'', the query must contain ''author:Smith''.' Sortable = 'String | Optional | Yes: Enables sorting the result set based on the property before the result set is returned. Use for example for large result sets that cannot be sorted and retrieved at the same time. Yes - latent: Enables switching sortable to active later, without having to do a full re-crawl when you switch. Both options require a full crawl to take effect. | No / Yes - latent / Yes' } ) SearchResultSources = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Name = 'String | Required | The Name of the Result Source.' Description = 'String | Optional | Description of the Result Source.' Type = 'String | Optional | Select SharePoint Search Results to search over the entire index. Select People Search Results to enable query processing specific to People Search, such as phonetic name matching or nickname matching. Only people profiles will be returned from a People Search source. | SharePoint / People' Ensure = 'String | Optional | Present ensures the Search Result Source exists. | Present' SourceURL = 'String | Optional | Address of the root site collection of the remote SharePoint farm or Exchange server.' ShowPartialSearch = 'Boolean | Optional | Show partial search or not' UseAutoDiscover = 'Boolean | Optional | Specifies if AutoDiscover should be used for the Exchange Source URL' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) QueryTransform = 'String | Optional | Change incoming queries to use this new query text instead. Include the incoming query in the new text by using the query variable ''{searchTerms}''.' Protocol = 'String | Required | The protocol of the Result Source. | Local / Remote / OpenSearch / Exchange' } ) SharingSettings = @{ NotifyOwnersWhenItemsReshared = 'Boolean | Optional | When this parameter is set to $true and another user re-shares a document from a user�??s OneDrive for Business, the OneDrive for Business owner is notified by e-mail.' DefaultLinkPermission = 'String | Optional | Specifies the link permission on the tenant level. Valid values to set are View and Edit. A value of None will be set to Edit as its the default value. | None / View / Edit' RequireAcceptingAccountMatchInvitedAccount = 'Boolean | Optional | DEPRECATED' FolderAnonymousLinkType = 'String | Optional | Configures anonymous link types for folders | View / Edit' PreventExternalUsersFromResharing = 'Boolean | Optional | Allow or deny external users re-sharing' ShowPeoplePickerSuggestionsForGuestUsers = 'Boolean | Optional | Enables the administrator to hide the guest users claim in the People Picker.' FileAnonymousLinkType = 'String | Optional | Configures anonymous link types for files | View / Edit' ExternalUserExpirationRequired = 'Boolean | Optional | Enable Guest access to a site or Onedrive to expire after' ExternalUserExpireInDays = 'UInt32 | Optional | Specifies Number of days for Guest Access links to expire.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Only accepted value is ''Present''. | Present / Absent' DefaultSharingLinkType = 'String | Optional | Lets administrators choose what type of link appears is selected in the ''Get a link'' sharing dialog box in OneDrive for Business and SharePoint Online | None / Direct / Internal / AnonymousAccess' ShowAllUsersClaim = 'Boolean | Optional | Enables the administrator to hide the All Users claim groups in People Picker.' ShowEveryoneExceptExternalUsersClaim = 'Boolean | Optional | Enables the administrator to hide the Everyone except external users claim in the People Picker.' ProvisionSharedWithEveryoneFolder = 'Boolean | Optional | Creates a Shared with Everyone folder in every user''s new OneDrive for Business document library.' ShowEveryoneClaim = 'Boolean | Optional | Enables the administrator to hide the Everyone claim in the People Picker.' SharingCapability = 'String | Optional | Configures sharing capability for SharePoint | ExistingExternalUserSharingOnly / ExternalUserAndGuestSharing / Disabled / ExternalUserSharingOnly' MySiteSharingCapability = 'String | Optional | Configures sharing capability for mysite (onedrive) | ExistingExternalUserSharingOnly / ExternalUserAndGuestSharing / Disabled / ExternalUserSharingOnly' SharingAllowedDomainList = @( 'String | Optional | Specifies a list of email domains that is allowed for sharing with the external collaborators. Entry values as an array of domains.' ) SharingBlockedDomainList = @( 'String | Optional | Specifies a list of email domains that is blocked or prohibited for sharing with the external collaborators. Entry values as an array of domains.' ) SharingDomainRestrictionMode = 'String | Optional | Specifies the external sharing mode for domains. | None / AllowList / BlockList' RequireAnonymousLinksExpireInDays = 'UInt32 | Optional | Specifies all anonymous links that have been created (or will be created) will expire after the set number of days.' EnableGuestSignInAcceleration = 'Boolean | Optional | Accelerates guest-enabled site collections as well as member-only site collections when the SignInAccelerationDomain parameter is set.' BccExternalSharingInvitations = 'Boolean | Optional | When the feature is enabled, all external sharing invitations that are sent will blind copy the e-mail messages listed in the BccExternalSharingsInvitationList.' BccExternalSharingInvitationsList = 'String | Optional | Specifies a list of e-mail addresses to be BCC''d when the BCC for External Sharing feature is enabled.Multiple addresses can be specified by creating a comma separated list with no spaces.' } Sites = @( @{ TimeZoneId = 'UInt32 | Required | TimeZone ID of the site collection.' SharingCapability = 'String | Optional | Specifies what the sharing capabilities are for the site. Possible values: Disabled, ExternalUserSharingOnly, ExternalUserAndGuestSharing, ExistingExternalUserSharingOnly. | Disabled / ExistingExternalUserSharingOnly / ExternalUserSharingOnly / ExternalUserAndGuestSharing' Template = 'String | Optional | Specifies with template of site to create.' DisableFlows = 'Boolean | Optional | Disables Microsoft Flow for this site.' RestrictedToRegion = 'String | Optional | Defines geo-restriction settings for this site | NoRestriction / BlockMoveOnly / BlockFull / Unknown' Url = 'String | Required | The URL of the site collection.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SharingBlockedDomainList = 'String | Optional | Specifies a list of email domains that is blocked for sharing with the external collaborators.' DefaultLinkPermission = 'String | Optional | Specifies the default link permission for the site collection. None - Respect the organization default link permission. View - Sets the default link permission for the site to ''view'' permissions. Edit - Sets the default link permission for the site to ''edit'' permissions. | None / View / Edit' HubUrl = 'String | Optional | The URL of the Hub site the site collection needs to get connected to.' StorageWarningLevel = 'UInt32 | Optional | Specifies the warning level for the storage quota in megabytes. This value must not exceed the values set for the StorageMaximumLevel parameter.' Title = 'String | Required | The title of the site collection.' CommentsOnSitePagesDisabled = 'Boolean | Optional | Specifies if comments on site pages are enabled or disabled.' SharingDomainRestrictionMode = 'String | Optional | Specifies the external sharing mode for domains. | None / AllowList / BlockList' SharingAllowedDomainList = 'String | Optional | Specifies a list of email domains that is allowed for sharing with the external collaborators. Use the space character as the delimiter.' Ensure = 'String | Optional | Present ensures the site collection exists, absent ensures it is removed | Present / Absent' DisableAppViews = 'String | Optional | Disables App Views. | Unknown / Disabled / NotDisabled' SocialBarOnSitePagesDisabled = 'Boolean | Optional | Disables or enables the Social Bar for Site Collection.' Owner = 'String | Required | Specifies the owner of the site.' AnonymousLinkExpirationInDays = 'UInt32 | Optional | Specifies that all anonymous/anyone links that have been created (or will be created) will expire after the set number of days. Only applies if OverrideTenantAnonymousLinkExpirationPolicy is set to true. To remove the expiration requirement, set the value to zero (0)' UniqueId = 'String | Required | Unique ID to identify this specific object' DisableCompanyWideSharingLinks = 'String | Optional | Disables Company wide sharing links. | Unknown / Disabled / NotDisabled' OverrideTenantAnonymousLinkExpirationPolicy = 'Boolean | Optional | False - Respect the organization-level policy for anonymous or anyone link expiration. True - Override the organization-level policy for anonymous or anyone link expiration (can be more or less restrictive)' AllowSelfServiceUpgrade = 'Boolean | Optional | Specifies if the site administrator can upgrade the site collection.' DefaultSharingLinkType = 'String | Optional | Specifies the default link type for the site collection. None - Respect the organization default sharing link type. AnonymousAccess - Sets the default sharing link for this site to an Anonymous Access or Anyone link. Internal - Sets the default sharing link for this site to the ''organization'' link or company shareable link. Direct - Sets the default sharing link for this site to the ''Specific people'' link. | None / AnonymousAccess / Internal / Direct' DenyAddAndCustomizePages = 'Boolean | Optional | Determines whether the Add And Customize Pages right is denied on the site collection. For more information about permission levels, see User permissions and permission levels in SharePoint.' StorageMaximumLevel = 'UInt32 | Optional | Specifies the storage quota for this site collection in megabytes. This value must not exceed the company''s available quota.' LocaleId = 'UInt32 | Optional | Specifies the language of the new site collection. Defaults to the current language of the web connected to.' ShowPeoplePickerSuggestionsForGuestUsers = 'Boolean | Optional | To enable the option to search for existing guest users at Site Collection Level, set this parameter to $true.' } ) SiteAuditSettingsItems = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Url = 'String | Required | URL of the site collection to configure.' UniqueId = 'String | Required | Unique ID to identify this specific object' AuditFlags = 'String | Required | Audit flag for the site collection. Can be ''All'' or ''None''. | All / None' } ) SiteDesigns = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Used to add or remove site design. | Present / Absent' WebTemplate = 'String | Optional | Web template to which the site design is applied to when invoked. | CommunicationSite / TeamSite / GrouplessTeamSite' IsDefault = 'Boolean | Optional | Is site design applied by default to web templates.' Version = 'UInt32 | Optional | Site design version number.' SiteScriptNames = @( 'String | Optional | The names of the site design scripts.' ) Title = 'String | Required | The title of the site design.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PreviewImageAltText = 'String | Optional | Site design alternate preview image text.' PreviewImageUrl = 'String | Optional | Site design preview image url.' Description = 'String | Optional | Description of site design.' } ) SiteDesignRightss = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' SiteDesignTitle = 'String | Required | The title of the site design' Ensure = 'String | Optional | Used to add or remove list of users from site design rights. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UserPrincipals = @( 'String | Optional | List of user principals with seperated by commas to site design rights.' ) Rights = 'String | Required | Rights to grant user principals on site design rights. | View / None' } ) SiteGroups = @( @{ Url = 'String | Required | The URL of the site.' PermissionLevels = @( 'String | Optional | The permission level of the site group' ) Ensure = 'String | Optional | Used to add or remove site design. | Present / Absent' Owner = 'String | Optional | The owner (email address) of the site group' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The name of the site group' } ) SiteScripts = @( @{ Description = 'String | Optional | The description of the site script.' Ensure = 'String | Optional | Present ensures the site script exists, absent ensures it is removed | Present / Absent' Content = 'String | Optional | A JSON string containing the site script.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Optional | ID of the site Script' Title = 'String | Required | The title of the site script.' } ) StorageEntities = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Description = 'String | Optional | Description of storage entity.' SiteUrl = 'String | Required | The url of site collection or tenant.' Key = 'String | Required | The key of the storage entity.' Ensure = 'String | Optional | Used to add or remove storage entity. | Present / Absent' Value = 'String | Optional | Value of the storage entity.' EntityScope = 'String | Optional | Scope of the storage entity. | Tenant / Site' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Comment = 'String | Optional | Comment for the storage entity.' } ) TenantCdnEnableds = @( @{ CdnType = 'String | Required | Specifies the CDN type. The valid values are public or private. | Public / Private' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Enable = 'Boolean | Optional | Specify to enable or disable tenant CDN.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Get-PNPTenantCdnEnabled always returns a value, only support value is Present | Present' } ) TenantCdnPolicies = @( @{ CDNType = 'String | Required | Type of Content Delivery Network. Can be ''Private'' or ''Public''. | Private / Public' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IncludeFileExtensions = @( 'String | Optional | List of file extensions to include in the Policy.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' ExcludeRestrictedSiteClassifications = @( 'String | Optional | List of site classifications to exclude.' ) } ) TenantSettings = @{ EnableAIPIntegration = 'Boolean | Optional | Boolean indicating if Azure Information Protection (AIP) should be enabled on the tenant.' CommentsOnSitePagesDisabled = 'Boolean | Optional | Set to false to enable a comment section on all site pages, users who have access to the pages can leave comments. Set to true to disable this feature.' AllowSelectSGsInODBListInTenant = @( 'String | Optional | List of security groups to include in OneDrive access restrictions' ) ExemptNativeUsersFromTenantLevelRestricedAccessControl = 'Boolean | Optional | Determines whether or not we need to include external participants in shared channels for SharePoint access restriction.' MarkNewFilesSensitiveByDefault = 'String | Optional | Allow or block external sharing until at least one Office DLP policy scans the content of the file. | AllowExternalSharing / BlockExternalSharing' HideSyncButtonOnTeamSite = 'Boolean | Optional | To enable or disable Sync button on Team sites' SocialBarOnSitePagesDisabled = 'Boolean | Optional | Disables or enables the Social Bar. It will give users the ability to like a page, see the number of views, likes, and comments on a page, and see the people who have liked a page.' DisabledWebPartIds = @( 'String | Optional | Provide GUID for the Web Parts that are to be disabled on the Sharepoint Site' ) DenySelectSGsInODBListInTenant = @( 'String | Optional | List of security groups to exclude in OneDrive access restrictions' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowSelectSecurityGroupsInSPSitesList = @( 'String | Optional | List of security groups to include in SharePoint access restrictions.' ) DenySelectSecurityGroupsInSPSitesList = @( 'String | Optional | List of security groups to exclude in SharePoint access restrictions' ) Ensure = 'String | Optional | Only accepted value is ''Present''. | Present / Absent' TenantDefaultTimezone = 'String | Optional | The default timezone of a tenant for newly created sites.' LegacyAuthProtocolsEnabled = 'Boolean | Optional | Setting this parameter prevents Office clients using non-modern authentication protocols from accessing SharePoint Online resources.' OfficeClientADALDisabled = 'Boolean | Optional | When set to true this will disable the ability to use Modern Authentication that leverages ADAL across the tenant.' UsePersistentCookiesForExplorerView = 'Boolean | Optional | Lets SharePoint issue a special cookie that will allow this feature to work even when Keep Me Signed In is not selected.' SignInAccelerationDomain = 'String | Optional | Specifies the home realm discovery value to be sent to Azure Active Directory (AAD) during the user sign-in process.' MinCompatibilityLevel = 'UInt32 | Optional | Specifies the lower bound on the compatibility level for new sites.' SearchResolveExactEmailOrUPN = 'Boolean | Optional | Removes the search capability from People Picker. Note, recently resolved names will still appear in the list until browser cache is cleared or expired.' MaxCompatibilityLevel = 'UInt32 | Optional | Specifies the upper bound on the compatibility level for new sites.' UserVoiceForFeedbackEnabled = 'Boolean | Optional | Allow feedback via UserVoice.' ApplyAppEnforcedRestrictionsToAdHocRecipients = 'Boolean | Optional | When the feature is enabled, all guest users are subject to conditional access policy. By default guest users who are accessing SharePoint Online files with pass code are exempt from the conditional access policy.' OwnerAnonymousNotification = 'Boolean | Optional | Specifies whether an email notification should be sent to the OneDrive for Business owners when an anonymous links are created or changed.' HideDefaultThemes = 'Boolean | Optional | Defines if the default themes are visible or hidden' FilePickerExternalImageSearchEnabled = 'Boolean | Optional | Sets whether webparts that support inserting images, like for example Image or Hero webpart, the Web search (Powered by Bing) should allow choosing external images.' PublicCdnAllowedFileTypes = 'String | Optional | Configure filetypes allowed for PublicCDN' PublicCdnEnabled = 'Boolean | Optional | Configure PublicCDN' NotificationsInSharePointEnabled = 'Boolean | Optional | When set to $true, users aren''t able to share with security groups or SharePoint groups.' UseFindPeopleInPeoplePicker = 'Boolean | Optional | When set to $true, users aren''t able to share with security groups or SharePoint groups.' } Themes = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Palette = @( @{ Property = 'String | Optional | Name of the property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Color value in Hexadecimal.' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) IsInverted = 'Boolean | Optional | This value should be false for light themes and true for dark themes; it controls whether SharePoint uses dark or light theme colors to render text on colored backgrounds.' Ensure = 'String | Optional | Only accepted value is ''Present''. | Present / Absent' Name = 'String | Required | The name of the theme, which appears in the theme picker UI and is also used by administrators and developers to refer to the theme in PowerShell cmdlets or calls to the SharePoint REST API.' } ) UserProfileProperties = @( @{ UserName = 'String | Required | Username of the user to configure the profile properties for. E.g. John.Smith@contoso.com' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) UniqueId = 'String | Required | Unique ID to identify this specific object' Properties = @( @{ Key = 'String | Optional | Name of the User Profile Property.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' Value = 'String | Optional | Value of the User Profile Property.' } ) Ensure = 'String | Optional | Only accepted value is ''Present''. | Present' } ) } Teams = @{ AppPermissionPolicies = @( @{ GlobalCatalogAppsType = 'String | Optional | The types of apps for the Global Catalog.' PrivateCatalogAppsType = 'String | Optional | The types of apps for the Private Catalog.' Description = 'String | Optional | Enables administrators to provide explanatory text to accompany a Teams app permission policy.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' GlobalCatalogApps = @( 'String | Optional | The list of apps for the Global Catalog.' ) DefaultCatalogAppsType = 'String | Optional | The types of apps for the Default Catalog.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Unique identifier to be assigned to the new Teams app permission policy. Use the ''Global'' Identity if you wish to assign this policy to the entire tenant.' PrivateCatalogApps = @( 'String | Optional | The list of apps for the Private Catalog.' ) DefaultCatalogApps = @( 'String | Optional | The list of apps for the Default Catalog.' ) } ) AppSetupPolicies = @( @{ Description = 'String | Optional | Enables administrators to provide explanatory text to accompany a Teams app setup policy.' AppPresetMeetingList = @( 'String | Optional | Choose which apps and meeting extensions you want to be installed in your users'' personal Teams environment and in meetings they create. Users can install other available apps from the Teams app store.' ) AllowSideLoading = 'Boolean | Optional | This is also known as side loading. This setting determines if a user can upload a custom app package in the Teams app. Turning it on lets you create or develop a custom app to be used personally or across your organization without having to submit it to the Teams app store. Uploading a custom app also lets you test an app before you distribute it more widely by only assigning it to a single user or group of users.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' PinnedMessageBarApps = @( 'String | Optional | Apps are pinned in messaging extensions and into the ellipsis menu.' ) PinnedAppBarApps = @( 'String | Optional | Pinning an app displays the app in the app bar in Teams client. Admins can pin apps and they can allow users to pin apps. Pinning is used to highlight apps that are needed the most by users and promote ease of access.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Unique identifier to be assigned to the new Teams app setup policy. Use the ''Global'' Identity if you wish to assign this policy to the entire tenant.' AllowUserPinning = 'Boolean | Optional | If you turn this on, the user''s existing app pins will be added to the list of pinned apps set in this policy. Users can rearrange, add, and remove pins as they choose. If you turn this off, the user''s existing app pins will be removed and replaced with the apps defined in this policy.' AppPresetList = @( 'String | Optional | Choose which apps and messaging extensions you want to be installed in your users'' personal Teams environment and in meetings they create. Users can install other available apps from the Teams app store.' ) } ) AudioConferencingPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowTollFreeDialin = 'Boolean | Optional | Determines whether users of the Policy can have Toll free numbers' MeetingInvitePhoneNumbers = 'String | Optional | Determines the list of audio-conferencing Toll- and Toll-free telephone numbers that will be included in meetings invites created by users of this policy.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Specify the name of the policy that you are creating' } ) CallHoldPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Enables administrators to provide explanatory text to accompany a Teams call hold policy.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Unique identifier to be assigned to the new Teams call hold policy. Use the ''Global'' Identity if you wish to assign this policy to the entire tenant.' AudioFileId = 'String | Optional | A string representing the ID referencing an audio file uploaded via the Import-CsOnlineAudioFile cmdlet.' } ) CallingPolicies = @( @{ AllowCallRedirect = 'String | Optional | Setting this parameter provides the ability to configure call redirection capabilities on Teams phones. | Enabled / Disabled / UserOverride' AllowSIPDevicesCalling = 'Boolean | Optional | Determines whether the user is allowed to use SIP devices for calling on behalf of a Teams client.' Description = 'String | Optional | Description of the Teams Calling Policy.' Identity = 'String | Required | Identity of the Teams Calling Policy.' LiveCaptionsEnabledTypeForCalling = 'String | Optional | Determines whether real-time captions are available for the user in Teams meetings. Set this to DisabledUserOverride to allow user to turn on live captions. Set this to Disabled to prohibit. | DisabledUserOverride / Disabled' AllowCallForwardingToPhone = 'Boolean | Optional | Enables call forwarding or simultaneous ringing of inbound calls to any phone number.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowTranscriptionforCalling = 'Boolean | Optional | Determines whether post-meeting captions and transcriptions are allowed in a user''s meetings. Set this to TRUE to allow. Set this to FALSE to prohibit.' AllowDelegation = 'Boolean | Optional | Enables inbound calls to be routed to delegates; allows delegates to make outbound calls on behalf of the users for whom they have delegated permissions.' CallRecordingExpirationDays = 'UInt32 | Optional | Sets the expiration of the recorded 1:1 calls.' SpamFilteringEnabledType = 'String | Optional | Setting this parameter determines whether calls identified as Spam will be rejected or not (probably). Valid options are: Enabled, Disabled. | Enabled / Disabled' AllowCallForwardingToUser = 'Boolean | Optional | Enables call forwarding or simultaneous ringing of inbound calls to other users in your tenant.' BusyOnBusyEnabledType = 'String | Optional | Setting this parameter lets you configure how incoming calls are handled when a user is already in a call or conference or has a call placed on hold. New or incoming calls will be rejected with a busy signal. Valid options are: Enabled, Disabled and Unanswered. | Enabled / Disabled / Unanswered / UserOverride' Ensure = 'String | Optional | Present ensures the policyexists, absent ensures it is removed. | Present / Absent' MusicOnHoldEnabledType = 'String | Optional | Setting this parameter allows you to turn on or turn off music on hold when a PSTN caller is placed on hold. It is turned on by default. Valid options are: Enabled, Disabled, UserOverride. For now setting the value to UserOverride is the same as Enabled. This setting does not apply to call park and SLA boss delegate features. Valid options are: Enabled, Disabled, UserOverride. | Enabled / Disabled / UserOverride' AutoAnswerEnabledType = 'String | Optional | This setting allows the tenant admin to enable or disable the Auto-Answer setting. Valid options are: Enabled, Disabled. | Enabled / Disabled' SafeTransferEnabled = 'String | Optional | This parameter is not available for use. Valid options are: Enabled, Disabled, UserOverride. | Enabled / Disabled / UserOverride' AllowCallGroups = 'Boolean | Optional | Enables inbound calls to be routed to call groups.' AllowVoicemail = 'String | Optional | Enables inbound calls to be routed to voice mail. Valid options are: AlwaysEnabled, AlwaysDisabled, UserOverride. | AlwaysEnabled / AlwaysDisabled / UserOverride' AllowPrivateCalling = 'Boolean | Optional | Controls all calling capabilities in Teams. Turning this off will turn off all calling functionality in Teams. If you use Skype for Business for calling, this policy will not affect calling functionality in Skype for Business.' PreventTollBypass = 'Boolean | Optional | Setting this parameter to True will send calls through PSTN and incur charges rather than going through the network and bypassing the tolls.' AllowCloudRecordingForCalls = 'Boolean | Optional | Setting this parameter to True will allows 1:1 Calls to be recorded.' AllowWebPSTNCalling = 'Boolean | Optional | Allows PSTN calling from the Team web client' } ) CallParkPolicies = @( @{ PickupRangeEnd = 'UInt64 | Optional | Specify the maximum value that a rendered pickup code can take. Value can be from 10 to 9999. Note: PickupRangeStart must be smaller than PickupRangeEnd.' Description = 'String | Optional | Description of the Teams Call Park Policy.' PickupRangeStart = 'UInt64 | Optional | Specify the minimum value that a rendered pickup code can take. Value can be from 10 to 9999.' AllowCallPark = 'Boolean | Optional | If set to true, customers will be able to leverage the call park feature to place calls on hold and then decide how the call should be handled - transferred to another department, retrieved using the same phone, or retrieved using a different phone.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' ParkTimeoutSeconds = 'UInt64 | Optional | Specify the number of seconds to wait before ringing the parker when the parked call hasn''t been picked up. Value can be from 120 to 1800 (seconds).' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | A unique identifier for the policy - this will be used to retrieve the policy later on to assign it to specific users.' } ) CallQueues = @( @{ AgentAlertTime = 'UInt16 | Optional | The Name parameter specifies a unique name for the Call Queue.' TimeoutRedirectPersonTextToSpeechPrompt = 'String | Optional | The TimeoutRedirectPersonTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to a person in the organization due to timeout.' TimeoutDisconnectAudioFilePrompt = 'String | Optional | The TimeoutDisconnectAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being disconnected due to timeout.' TimeoutRedirectPhoneNumberAudioFilePrompt = 'String | Optional | The TimeoutRedirectPhoneNumberAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to an external PSTN phone number due to timeout.' Users = @( 'String | Optional | The Users parameter lets you add agents to the Call Queue. This parameter expects a list of user unique identifiers (GUID).' ) AllowOptOut = 'Boolean | Optional | The AllowOptOut parameter indicates whether or not agents can opt in or opt out from taking calls from a Call Queue.' PresenceBasedRouting = 'Boolean | Optional | The PresenceBasedRouting parameter indicates whether or not presence based routing will be applied while call being routed to Call Queue agents. When set to False, calls will be routed to agents who have opted in to receive calls, regardless of their presence state. When set to True, opted-in agents will receive calls only when their presence state is Available.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Name = 'String | Required | The Name parameter specifies a unique name for the Call Queue.' TimeoutActionTarget = 'String | Optional | The TimeoutActionTarget represents the target of the timeout action. If the TimeoutAction is set to Forward, this parameter must be set to a Guid or a telephone number with a mandatory ''tel:'' prefix. If the TimeoutAction is set to SharedVoicemail, this parameter must be set to an Office 365 Group ID. Otherwise, this field is optional.' OverflowDisconnectTextToSpeechPrompt = 'String | Optional | The OverflowDisconnectTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being disconnected due to overflow.' OverflowRedirectPersonAudioFilePrompt = 'String | Optional | The OverflowRedirectPersonAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to a person in the organization due to overflow.' OverflowRedirectVoiceAppAudioFilePrompt = 'String | Optional | The OverflowRedirectVoiceAppAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to a voice application due to overflow.' OverflowThreshold = 'UInt16 | Optional | The OverflowThreshold parameter defines the number of calls that can be in the queue at any one time before the overflow action is triggered. The OverflowThreshold can be any integer value between 0 and 200, inclusive. A value of 0 causes calls not to reach agents and the overflow action to be taken immediately.' ChannelId = 'String | Optional | Id of the channel to connect a call queue to.' TimeoutDisconnectTextToSpeechPrompt = 'String | Optional | The TimeoutDisconnectTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being disconnected due to timeout.' UseDefaultMusicOnHold = 'Boolean | Optional | The UseDefaultMusicOnHold parameter indicates that this Call Queue uses the default music on hold. This parameter cannot be specified together with MusicOnHoldAudioFileId.' OverflowActionTarget = 'String | Optional | The OverflowActionTarget parameter represents the target of the overflow action. If the OverFlowAction is set to Forward, this parameter must be set to a Guid or a telephone number with a mandatory ''tel:'' prefix. If the OverflowAction is set to SharedVoicemail, this parameter must be set to a group ID (Microsoft 365, Distribution list, or Mail-enabled security). Otherwise, this parameter is optional.' MusicOnHoldAudioFileId = 'String | Optional | The MusicOnHoldFileContent parameter represents music to play when callers are placed on hold. This is the unique identifier of the audio file. This parameter is required if the UseDefaultMusicOnHold parameter is not specified.' TimeoutRedirectVoiceAppAudioFilePrompt = 'String | Optional | The TimeoutRedirectVoiceAppAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to a voice application due to timeout.' OverflowRedirectVoiceAppTextToSpeechPrompt = 'String | Optional | The OverflowRedirectVoiceAppsTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to a voice application due to overflow.' ConferenceMode = 'Boolean | Optional | The ConferenceMode parameter indicates whether or not Conference mode will be applied on calls for this Call queue. Conference mode significantly reduces the amount of time it takes for a caller to be connected to an agent, after the agent accepts the call.' OverflowRedirectVoicemailTextToSpeechPrompt = 'String | Optional | The OverflowRedirectVoicemailTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to a person''s voicemail due to overflow.' TimeoutRedirectPhoneNumberTextToSpeechPrompt = 'String | Optional | The TimeoutRedirectPhoneNumberTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to an external PSTN phone number due to timeout.' TimeoutAction = 'String | Optional | The TimeoutAction parameter defines the action to take if the timeout threshold is reached. The TimeoutAction property must be set to one of the following values: Disconnect, Forward, Voicemail, and SharedVoicemail. The default value is Disconnect. | Disconnect / Forward / Voicemail / SharedVoicemail' EnableOverflowSharedVoicemailTranscription = 'Boolean | Optional | The EnableOverflowSharedVoicemailTranscription parameter is used to turn on transcription for voicemails left by a caller on overflow. This parameter is only applicable when OverflowAction is set to SharedVoicemail.' OverflowSharedVoicemailTextToSpeechPrompt = 'String | Optional | The OverflowRedirectVoicemailTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to a person''s voicemail due to overflow.' Ensure = 'String | Optional | Present ensures the Team Message Policy exists, absent ensures it is removed | Present / Absent' OverflowRedirectVoicemailAudioFilePrompt = 'String | Optional | The OverflowRedirectVoiceMailAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to a person''s voicemail due to overflow.' OverflowRedirectPhoneNumberAudioFilePrompt = 'String | Optional | The OverflowRedirectPhoneNumberAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to an external PSTN phone number due to overflow.' OverflowAction = 'String | Optional | The OverflowAction parameter designates the action to take if the overflow threshold is reached. The OverflowAction property must be set to one of the following values: DisconnectWithBusy, Forward, Voicemail, and SharedVoicemail. The default value is DisconnectWithBusy. | DisconnectWithBusy / Forward / Voicemail / SharedVoicemail' DistributionLists = @( 'String | Optional | The DistributionLists parameter lets you add all the members of the distribution lists to the Call Queue. This is a list of distribution list GUIDs. A service wide configurable maximum number of DLs per Call Queue are allowed. Only the first N (service wide configurable) agents from all distribution lists combined are considered for accepting the call. Nested DLs are supported. O365 Groups can also be used to add members to the Call Queue.' ) TimeoutSharedVoicemailTextToSpeechPrompt = 'String | Optional | The TimeoutSharedVoicemailTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is to be played as a greeting to the caller when transferred to shared voicemail on timeout. This parameter becomes a required parameter when TimeoutAction is SharedVoicemail and TimeoutSharedVoicemailAudioFilePrompt is null.' OverflowRedirectPhoneNumberTextToSpeechPrompt = 'String | Optional | The OverflowRedirectPhoneNumberTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to an external PSTN phone number due to overflow.' WelcomeMusicAudioFileId = 'String | Optional | The WelcomeMusicAudioFileId parameter represents the audio file to play when callers are connected with the Call Queue. This is the unique identifier of the audio file.' OverflowRedirectPersonTextToSpeechPrompt = 'String | Optional | The OverflowRedirectPersonTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to a person in the organization due to overflow.' LanguageId = 'String | Optional | The LanguageId parameter indicates the language that is used to play shared voicemail prompts. This parameter becomes a required parameter If either OverflowAction or TimeoutAction is set to SharedVoicemail. You can query the supported languages using the Get-CsAutoAttendantSupportedLanguage cmdlet.' TimeoutThreshold = 'UInt16 | Optional | The TimeoutThreshold parameter defines the time (in seconds) that a call can be in the queue before that call times out. At that point, the system will take the action specified by the TimeoutAction parameter. The TimeoutThreshold can be any integer value between 0 and 2700 seconds (inclusive), and is rounded to the nearest 15th interval. For example, if set to 47 seconds, then it is rounded down to 45. If set to 0, welcome music is played, and then the timeout action will be taken.' OverflowDisconnectAudioFilePrompt = 'String | Optional | The OverflowDisconnectAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being disconnected due to overflow.' UniqueId = 'String | Required | Unique ID to identify this specific object' TimeoutRedirectVoicemailTextToSpeechPrompt = 'String | Optional | The TimeoutRedirectVoicemailTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to a person''s voicemail due to timeout.' OverflowSharedVoicemailAudioFilePrompt = 'String | Optional | The OverflowSharedVoicemailAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is to be played as a greeting to the caller when transferred to shared voicemail on overflow. This parameter becomes a required parameter when OverflowAction is SharedVoicemail and OverflowSharedVoicemailTextToSpeechPrompt is null.' EnableTimeoutSharedVoicemailTranscription = 'Boolean | Optional | The EnableTimeoutSharedVoicemailTranscription parameter is used to turn on transcription for voicemails left by a caller on timeout. This parameter is only applicable when TimeoutAction is set to SharedVoicemail.' AuthorizedUsers = @( 'String | Optional | This is a list of GUIDs for users who are authorized to make changes to this call queue. The users must also have a TeamsVoiceApplications policy assigned. The GUID should contain 32 digits with 4 dashes (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx).' ) OboResourceAccountIds = @( 'String | Optional | The OboResourceAccountIds parameter lets you add resource account with phone number to the Call Queue. The agents in the Call Queue will be able to make outbound calls using the phone number on the resource accounts. This is a list of resource account GUIDs. Only Call Queue managed by a Teams Channel will be able to use this feature.' ) RoutingMethod = 'String | Optional | The RoutingMethod defines how agents will be called in a Call Queue. If the routing method is set to Serial, then agents will be called one at a time. If the routing method is set to Attendant, then agents will be called in parallel. If routing method is set to RoundRobin, the agents will be called using Round Robin strategy so that all agents share the call-load equally. If routing method is set to LongestIdle, the agents will be called based on their idle time, i.e., the agent that has been idle for the longest period will be called. | Attendant / Serial / RoundRobin / LongestIdle' TimeoutRedirectPersonAudioFilePrompt = 'String | Optional | The TimeoutRedirectPersonAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to a person in the organization due to timeout.' TimeoutRedirectVoiceAppTextToSpeechPrompt = 'String | Optional | The TimeoutRedirectVoiceAppsTextToSpeechPrompt parameter indicates the Text-to-Speech (TTS) prompt which is played to the caller when being redirected to a voice application due to timeout.' ChannelUserObjectId = 'String | Optional | Guid should contain 32 digits with 4 dashes (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx). This is the GUID of one of the owners of the team the channels belongs to.' TimeoutSharedVoicemailAudioFilePrompt = 'String | Optional | The TimeoutSharedVoicemailAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is to be played as a greeting to the caller when transferred to shared voicemail on timeout. This parameter becomes a required parameter when TimeoutAction is SharedVoicemail and TimeoutSharedVoicemailTextToSpeechPrompt is null.' TimeoutRedirectVoicemailAudioFilePrompt = 'String | Optional | The TimeoutRedirectVoiceMailAudioFilePrompt parameter indicates the unique identifier for the Audio file prompt which is played to the caller when being redirected to a person''s voicemail due to timeout.' } ) Channels = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' GroupID = 'String | Optional | Team group ID, only used to target a Team when duplicated display names occurs.' DisplayName = 'String | Required | Current channel name' Ensure = 'String | Optional | Present ensures the Team channel exists, absent ensures it is removed | Present / Absent' Description = 'String | Optional | Channel description' NewDisplayName = 'String | Optional | Used to update current channel name' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TeamName = 'String | Required | Name of the team the Channel belongs to' } ) ChannelsPolicies = @( @{ AllowUserToParticipateInExternalSharedChannel = 'Boolean | Optional | Determines whether a user is allowed to participate in a shared channel that has been shared by an external user. Set this to TRUE to allow. Set this FALSE to prohibit.' AllowSharedChannelCreation = 'Boolean | Optional | Determines whether a user is allowed to create a shared channel. Set this to TRUE to allow. Set this FALSE to prohibit.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AllowOrgWideTeamCreation = 'Boolean | Optional | Determines whether a user is allowed to create an org-wide team. Set this to TRUE to allow. Set this FALSE to prohibit.' AllowChannelSharingToExternalUser = 'Boolean | Optional | Determines whether a user is allowed to share a shared channel with an external user. Set this to TRUE to allow. Set this FALSE to prohibit.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Identity of the Teams Channel Policy.' Description = 'String | Optional | Description of the Teams Channel Policy.' AllowPrivateChannelCreation = 'Boolean | Optional | Determines whether a user is allowed to create a private channel. Set this to TRUE to allow. Set this FALSE to prohibit.' EnablePrivateTeamDiscovery = 'Boolean | Optional | Determines whether a user is allowed to discover private teams in suggestions and search results. Set this to TRUE to allow. Set this FALSE to prohibit.' } ) ChannelTabs = @( @{ DisplayName = 'String | Required | Display Name of the Channel Tab.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SortOrderIndex = 'UInt32 | Optional | Index of the sort order for the custom tab.' ContentUrl = 'String | Optional | Url of the content linked to the Channel Tab.' TeamsApp = 'String | Optional | Id of the Teams App associated with the custom tab.' RemoveUrl = 'String | Optional | Url of the location used to remove the app.' Ensure = 'String | Optional | Present ensures the Tab exists, absent ensures it is removed. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' EntityId = 'String | Optional | Id of the Entity linked to the Channel Tab.' ChannelName = 'String | Required | Display Name of the Channel.' WebSiteUrl = 'String | Optional | Url of the website linked to the Channel Tab.' TeamId = 'String | Optional | Unique Id of the Team of the instance on the source tenant.' TeamName = 'String | Required | Display Name of the Team.' } ) ClientConfiguration = @{ AllowSkypeBusinessInterop = 'Boolean | Optional | When set to $true, Teams conversations automatically show up in Skype for Business for users that aren''t enabled for Teams.' ContentPin = 'String | Optional | This setting applies only to Skype for Business Online (not Microsoft Teams) and defines whether the user must provide a secondary form of authentication to access the meeting content from a resource device account. Meeting content is defined as files that are shared to the Content Bin - files that have been attached to the meeting. | NotRequired / RequiredOutsideScheduleMeeting / AlwaysRequired' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ResourceAccountContentAccess = 'String | Optional | Require a secondary form of authentication to access meeting content. | NoAccess / PartialAccess / FullAccess' AllowShareFile = 'Boolean | Optional | Designates whether users are able to leverage ShareFile as a third party storage solution in Microsoft Teams. If $true, users will be able to add ShareFile in the client and interact with the files stored there.' AllowDropBox = 'Boolean | Optional | Designates whether users are able to leverage DropBox as a third party storage solution in Microsoft Teams. If $true, users will be able to add DropBox in the client and interact with the files stored there.' AllowOrganizationTab = 'Boolean | Optional | When set to $true, users will be able to see the organizational chart icon other users'' contact cards, and when clicked, this icon will display the detailed organizational chart.' AllowEmailIntoChannel = 'Boolean | Optional | When set to $true, mail hooks are enabled, and users can post messages to a channel by sending an email to the email address of Teams channel.' AllowGuestUser = 'Boolean | Optional | Designates whether or not guest users in your organization will have access to the Teams client. If $true, guests in your tenant will be able to access the Teams client. Note that this setting has a core dependency on Guest Access being enabled in your Office 365 tenant.' AllowResourceAccountSendMessage = 'Boolean | Optional | Surface Hub uses a device account to provide email and collaboration services (IM, video, voice). This device account is used as the originating identity (the from party) when sending email, IM, and placing calls. As this account is not coming from an individual, identifiable user, it is deemed anonymous because it originated from the Surface Hub''s device account. If set to $true, these device accounts will be able to send chat messages in Skype for Business Online (does not apply to Microsoft Teams).' AllowEgnyte = 'Boolean | Optional | Designates whether users are able to leverage Egnyte as a third party storage solution in Microsoft Teams. If $true, users will be able to add Egnyte in the client and interact with the files stored there.' AllowScopedPeopleSearchandAccess = 'Boolean | Optional | If set to $true, the Exchange address book policy (ABP) will be used to provide customized view of the global address book for each user. This is only a virtual separation and not a legal separation.' AllowGoogleDrive = 'Boolean | Optional | Designates whether users are able to leverage GoogleDrive as a third party storage solution in Microsoft Teams. If $true, users will be able to add Google Drive in the client and interact with the files stored there.' AllowBox = 'Boolean | Optional | Designates whether users are able to leverage Box as a third party storage solution in Microsoft Teams. If $true, users will be able to add Box in the client and interact with the files stored there.' RestrictedSenderList = @( 'String | Optional | Senders domains can be further restricted to ensure that only allowed SMTP domains can send emails to the Teams channels. This is a comma-separated string of the domains you''d like to allow to send emails to Teams channels.' ) } ComplianceRecordingPolicies = @( @{ WarnUserOnRemoval = 'Boolean | Optional | This parameter is reserved for future use.' Description = 'String | Optional | Enables administrators to provide explanatory text to accompany a Teams recording policy. For example, the Description might include information about the users the policy should be assigned to.' Enabled = 'Boolean | Optional | Controls whether this Teams recording policy is active or not.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' ComplianceRecordingApplications = @( @{ Id = 'String | Optional | A name that uniquely identifies the application instance of the policy-based recording application.' ComplianceRecordingPairedApplications = @( 'String | Optional | Determines the other policy-based recording applications to pair with this application to achieve application resiliency. Can only have one paired application.' ) ConcurrentInvitationCount = 'String | Optional | Determines the number of invites to send out to the application instance of the policy-based recording application. Can be set to 1 or 2 only.' RequiredDuringCall = 'Boolean | Optional | Indicates whether the policy-based recording application must be in the call while the call is active.' RequiredBeforeMeetingJoin = 'Boolean | Optional | Indicates whether the policy-based recording application must be in the meeting before the user is allowed to join the meeting.' RequiredBeforeCallEstablishment = 'Boolean | Optional | Indicates whether the policy-based recording application must be in the call before the call is allowed to establish.' RequiredDuringMeeting = 'Boolean | Optional | Indicates whether the policy-based recording application must be in the meeting while the user is in the meeting.' } ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Unique identifier of the application instance of a policy-based recording application to be retrieved.' DisableComplianceRecordingAudioNotificationForCalls = 'Boolean | Optional | Setting this attribute to true disables recording audio notifications for 1:1 calls that are under compliance recording.' } ) CortanaPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Provide a description of your policy to identify purpose of creating it.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Unique identifier for Teams cortana policy you''re creating.' CortanaVoiceInvocationMode = 'String | Optional | The value of this field indicates if Cortana is enabled and mode of invocation. | Disabled / PushToTalkUserOverride / WakeWordPushToTalkUserOverride' } ) DialInConferencingTenantSettings = @{ PinLength = 'UInt32 | Optional | Specifies the number of digits in the automatically generated PINs. Organizers can enter their PIN to start a meeting they scheduled if they join via phone and are the first person to join. The minimum value is 4, the maximum is 12, and the default is 5.' MaskPstnNumbersType = 'String | Optional | This parameter allows tenant administrators to configure masking of PSTN participant phone numbers in the roster view for Microsoft Teams meetings enabled for Audio Conferencing, scheduled within the organization. Possible values are MaskedForExternalUsers, MaskedForAllUsers or NoMasking | MaskedForExternalUsers / MaskedForAllUsers / NoMasking' EntryExitAnnouncementsType = 'String | Optional | Supported entry and exit announcement type.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AutomaticallyMigrateUserMeetings = 'Boolean | Optional | Automatically Migrate User Meetings.' AllowPSTNOnlyMeetingsByDefault = 'Boolean | Optional | Specifies the default value that gets assigned to the ''AllowPSTNOnlyMeetings'' setting of users when they are enabled for dial-in conferencing, or when a user''s dial-in conferencing provider is set to Microsoft. If set to $true, the ''AllowPSTNOnlyMeetings'' setting of the user will also be set to true. If $false, the user setting will be false. The default value for AllowPSTNOnlyMeetingsByDefault is $false.' AutomaticallyReplaceAcpProvider = 'Boolean | Optional | Automatically replace ACP Provider.' EnableEntryExitNotifications = 'Boolean | Optional | Specifies if, by default, announcements are made as users enter and exit a conference call. Set to $true to enable notifications, $false to disable notifications. The default is $true.' EnableDialOutJoinConfirmation = 'Boolean | Optional | Enable Dial out join confirmation.' AutomaticallySendEmailsToUsers = 'Boolean | Optional | Specifies whether advisory emails will be sent to users when the events listed below occur. Setting the parameter to $true enables the emails to be sent, $false disables the emails. The default is $true.' } EmergencyCallingPolicies = @( @{ ExternalLocationLookupMode = 'String | Optional | Enables ExternalLocationLookupMode. This mode allows users to set Emergency addresses for remote locations. | Disabled / Enabled' Description = 'String | Optional | Description of the Teams Emergency Calling Policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' NotificationMode = 'String | Optional | The type of conference experience for security desk notification. | NotificationOnly / ConferenceMuted / ConferenceUnMuted' Identity = 'String | Required | Identity of the Teams Emergency Calling Policy.' NotificationGroup = 'String | Optional | NotificationGroup is a email list of users and groups to be notified of an emergency call.' NotificationDialOutNumber = 'String | Optional | This parameter represents PSTN number which can be dialed out if NotificationMode is set to either of the two Conference values.' EnhancedEmergencyServiceDisclaimer = 'String | Optional | Allows the tenant administrator to configure a text string, which is shown at the top of the Calls app.' } ) EmergencyCallRoutingPolicies = @( @{ AllowEnhancedEmergencyServices = 'Boolean | Optional | Flag to enable Enhanced Emergency Services' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' EmergencyNumbers = @( @{ EmergencyDialMask = 'String | Optional | For each Teams emergency number, you can specify zero or more emergency dial masks. A dial mask is a number that you want to translate into the value of the emergency dial number value when it is dialed.' UniqueId = 'String | Required | [Unique ID to identify this specific object]' OnlinePSTNUsage = 'String | Optional | Specify the online public switched telephone network (PSTN) usage' EmergencyDialString = 'String | Optional | Specifies the emergency phone number.' } ) Description = 'String | Optional | Description of the Teams Emergency Call Routing Policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Identity of the Teams Emergency Call Routing Policy.' } ) EnhancedEncryptionPolicies = @( @{ Description = 'String | Optional | Enables administrators to provide explanatory text to accompany a Teams enhanced encryption policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CallingEndtoEndEncryptionEnabledType = 'String | Optional | Determines whether End-to-end encrypted calling is available for the user in Teams. Set this to DisabledUserOverride to allow user to turn on End-to-end encrypted calls. Set this to Disabled to prohibit.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' MeetingEndToEndEncryption = 'String | Optional | N/A' Identity = 'String | Required | Unique identifier assigned to the Teams enhanced encryption policy.' } ) EventsPolicies = @( @{ Description = 'String | Optional | Description of the Teams Events Policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowedTownhallTypesForRecordingPublish = 'String | Optional | This setting describes how IT admins can control which types of Town Hall attendees can have their recordings published. | None / InviteOnly / EveryoneInCompanyIncludingGuests / Everyone' AllowEventIntegrations = 'Boolean | Optional | This setting governs access to the integrations tab in the event creation workflow.' AllowedQuestionTypesInRegistrationForm = 'String | Optional | This setting governs which users in a tenant can add which registration form questions to an event registration page for attendees to answer when registering for the event. | DefaultOnly / DefaultAndPredefinedOnly / AllQuestions' AllowedWebinarTypesForRecordingPublish = 'String | Optional | This setting describes how IT admins can control which types of webinar attendees can have their recordings published. | None / InviteOnly / EveryoneInCompanyIncludingGuests / Everyone' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AllowEmailEditing = 'String | Optional | This setting governs if a user is allowed to edit the communication emails in Teams Town Hall or Teams Webinar events. | Disabled / Enabled' Identity = 'String | Required | Identity of the Teams Events Policy.' EventAccessType = 'String | Optional | Defines who is allowed to join the event. | Everyone / EveryoneInCompanyExcludingGuests' AllowWebinars = 'String | Optional | Determines if webinars are allowed by the policy or not. | Disabled / Enabled' UseMicrosoftECDN = 'Boolean | Optional | This setting governs whether the global admin disables this property and prevents the organizers from creating town halls that use Microsoft eCDN even though they have been assigned a Teams Premium license.' AllowTownhalls = 'String | Optional | This setting governs if a user can create town halls using Teams Events. | Disabled / Enabled' TownhallChatExperience = 'String | Optional | This setting governs whether the user can enable the Comment Stream chat experience for Town Halls. | Optimized / None' } ) FederationConfiguration = @{ AllowedDomains = @( 'String | Optional | List of federated domains to allow.' ) TreatDiscoveredPartnersAsUnverified = 'Boolean | Optional | When set to True, messages sent from discovered partners are considered unverified. That means that those messages will be delivered only if they were sent from a person who is on the recipient''s Contacts list.' AllowTeamsConsumerInbound = 'Boolean | Optional | Allows people using Teams with an account that''s not managed by an organization, to discover and start communication with users in your organization.' ExternalAccessWithTrialTenants = 'String | Optional | When set to Blocked, all external access with users from Teams subscriptions that contain only trial licenses will be blocked. This means users from these trial-only tenants will not be able to reach to your users via chats, Teams calls, and meetings (using the users authenticated identity) and your users will not be able to reach users in these trial-only tenants. If this setting is set to Blocked, users from the trial-only tenant will also be removed from existing chats. | Allowed / Blocked' AllowPublicUsers = 'Boolean | Optional | When set to True users will be potentially allowed to communicate with users who have accounts on public IM and presence providers.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) BlockedDomains = @( 'String | Optional | List of federated domains to block.' ) AllowFederatedUsers = 'Boolean | Optional | When set to True users will be potentially allowed to communicate with users from other domains.' RestrictTeamsConsumerToExternalUserProfiles = 'Boolean | Optional | When set to True, Teamsconsumer have access only to external user profiles' AllowTeamsConsumer = 'Boolean | Optional | Allows federation with people using Teams with an account that''s not managed by an organization.' SharedSipAddressSpace = 'Boolean | Optional | When set to True, indicates that the users homed on Skype for Business Online use the same SIP domain as users homed on the on-premises version of Skype for Business Server.' } FeedbackPolicies = @( @{ AllowScreenshotCollection = 'Boolean | Optional | Specifies if Screenshot Collection is enabled or not.' ReceiveSurveysMode = 'String | Optional | Specifies if users are allowed to receive the survey. | Enabled / Disabled / EnabledUserOverride' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' EnableFeatureSuggestions = 'Boolean | Optional | Specifies if users are allowed to provide feature suggestions' AllowEmailCollection = 'Boolean | Optional | Specifies if Email Collection is enabled or not.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Specify the name of the Teams Feedback Policy.' UserInitiatedMode = 'String | Optional | Specifies if users are allowed to give feedback.' AllowLogCollection = 'Boolean | Optional | Specifies if Log Collection is enabled or not.' } ) FilesPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SPChannelFilesTab = 'String | Optional | Specifies whether users see the Teams Files channel tab in any channel or in Teams chat. | Enabled / Disabled' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Specifies the policy instance name' NativeFileEntryPoints = 'String | Optional | Specifies whether users see the options to upload files from OneDrive for Business, other cloud storage services configured for the user account, and SharePoint Online | Enabled / Disabled' } ) GroupPoliciesAssignment = @( @{ GroupId = 'String | Optional | GroupId, alternatively to Group Displayname' PolicyType = 'String | Required | Teams PolicyType. The type of the policy to be assigned. Possible values: | ApplicationAccessPolicy / CallingLineIdentity / OnlineAudioConferencingRoutingPolicy / OnlineVoicemailPolicy / OnlineVoiceRoutingPolicy / TeamsAudioConferencingPolicy / TeamsCallHoldPolicy / TeamsCallParkPolicy / TeamsChannelsPolicy / TeamsComplianceRecordingPolicy / TeamsCortanaPolicy / TeamsEmergencyCallingPolicy / TeamsEnhancedEncryptionPolicy / TeamsFeedbackPolicy / TeamsFilesPolicy / TeamsIPPhonePolicy / TeamsMediaLoggingPolicy / TeamsMeetingBroadcastPolicy / TeamsMeetingPolicy / TeamsMessagingPolicy / TeamsMobilityPolicy / TeamsRoomVideoTeleConferencingPolicy / TeamsShiftsPolicy / TeamsUpdateManagementPolicy / TeamsVdiPolicy / TeamsVideoInteropServicePolicy / TenantDialPlan / ExternalAccessPolicy / TeamsAppSetupPolicy / TeamsCallingPolicy / TeamsEventsPolicy / TeamsMeetingBrandingPolicy / TeamsMeetingTemplatePermissionPolicy / TeamsVerticalPackagePolicy' Ensure = 'String | Optional | Present ensures the group policy assignment exists, absent ensures it is removed. | Present / Absent' PolicyName = 'String | Optional | Teams PolicyName. The name of the policy to be assigned.' UniqueId = 'String | Required | Unique ID to identify this specific object' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Priority = 'String | Optional | Teams Priority. The rank of the policy assignment, relative to other group policy assignments for the same policy type' GroupDisplayName = 'String | Required | Group Displayname of the group the policys are assigned to' } ) GuestCallingConfiguration = @{ AllowPrivateCalling = 'Boolean | Required | Designates whether guests who have been enabled for Teams can use calling functionality. If $false, guests cannot call.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) } GuestMeetingConfiguration = @{ AllowIPVideo = 'Boolean | Optional | Determines whether video is enabled in a user''s meetings or calls. Set this to TRUE to allow guests to share their video. Set this to FALSE to prohibit guests from sharing their video.' LiveCaptionsEnabledType = 'String | Optional | Determines whether real-time captions are available for guests in Teams meetings. | Disabled / DisabledUserOverride' AllowTranscription = 'Boolean | Optional | Determines whether guests can enable post-meeting captions and transcriptions in meetings. Set this to TRUE to allow. Set this to FALSE to prohibit.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ScreenSharingMode = 'String | Optional | Determines the mode in which guests can share a screen in calls or meetings. Set this to SingleApplication to allow the user to share an application at a given point in time. Set this to EntireScreen to allow the user to share anything on their screens. Set this to Disabled to prohibit the user from sharing their screens. | Disabled / EntireScreen / SingleApplication' AllowMeetNow = 'Boolean | Optional | Determines whether guests can start ad-hoc meetings. Set this to TRUE to allow guests to start ad-hoc meetings. Set this to FALSE to prohibit guests from starting ad-hoc meetings.' } GuestMessagingConfiguration = @{ AllowImmersiveReader = 'Boolean | Optional | Determines if Immersive Reader is enabled.' AllowGiphy = 'Boolean | Optional | Determines if Giphy are available for use.' AllowUserDeleteChat = 'Boolean | Optional | Turn this setting on to allow users to permanently delete their one-on-one chat, group chat, and meeting chat as participants (this deletes the chat only for them, not other users in the chat).' AllowUserDeleteMessage = 'Boolean | Optional | Determines if a user is allowed to delete their own messages.' AllowUserEditMessage = 'Boolean | Optional | Determines if a user is allowed to edit their own messages.' AllowUserChat = 'Boolean | Optional | Determines if a user is allowed to chat.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowStickers = 'Boolean | Optional | Determines if stickers are available for use.' AllowMemes = 'Boolean | Optional | Determines if memes are available for use.' GiphyRatingType = 'String | Optional | Determines Giphy content restrictions. Default value is Moderate, other options are Strict and NoRestriction. | Moderate / Strict / NoRestriction' } IPPhonePolicies = @( @{ AllowBetterTogether = 'String | Optional | Determines whether Better Together mode is enabled, phones can lock and unlock in an integrated fashion when connected to their Windows PC running a 64-bit Teams desktop client. | Enabled / Disabled' SignInMode = 'String | Optional | Determines the sign in mode for the device when signing in to Teams. | UserSignIn / CommonAreaPhoneSignIn / MeetingSignIn' SearchOnCommonAreaPhoneMode = 'String | Optional | Determines whether a user can search the Global Address List in Common Area Phone Mode. | Enabled / Disabled' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AllowHotDesking = 'Boolean | Optional | Determines whether hot desking mode is enabled.' Description = 'String | Optional | Specifies the description of the policy' HotDeskingIdleTimeoutInMinutes = 'UInt64 | Optional | Determines the idle timeout value in minutes for the signed in user account. When the timeout is reached, the account is logged out.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Specifies the policy instance name' AllowHomeScreen = 'String | Optional | Determines whether the Home Screen feature of the Teams IP Phones is enabled. | Enabled / EnabledUserOverride / Disabled' } ) M365Apps = @( @{ Id = 'String | Required | Application ID of Microsoft Teams app.' Groups = @( 'String | Optional | List of all the groups for whom the app is enabled or disabled.' ) Users = @( 'String | Optional | List of all the users for whom the app is enabled or disabled.' ) AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AssignmentType = 'String | Optional | App availability type. | Everyone / UsersAndGroups / NoOne' IsBlocked = 'Boolean | Optional | The state of the app in the tenant.' } ) MeetingBroadcastConfiguration = @{ SdnLicenseId = 'String | Optional | Specifies the Software Defined Network (SDN) license identifier. This is required and provided by some SDN providers. This parameter is only required if AllowSdnProviderForBroadcastMeeting is set to $true.' SupportURL = 'String | Optional | Specifies a URL where broadcast event attendees can find support information or FAQs specific to that event. The URL will be displayed to the attendees during the broadcast.' SdnProviderName = 'String | Optional | Specifies the Software Defined Network (SDN) provider''s name. This parameter is only required if AllowSdnProviderForBroadcastMeeting is set to $true.' SdnApiToken = 'String | Optional | Specifies the Software Defined Network (SDN) provider''s authentication token which is required to use their SDN license. This is required by some SDN providers who will give you the required token. This parameter is only required if AllowSdnProviderForBroadcastMeeting is set to $true.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) SdnApiTemplateUrl = 'String | Optional | Specifies the Software Defined Network (SDN) provider''s HTTP API endpoint. This information is provided to you by the SDN provider. This parameter is only required if AllowSdnProviderForBroadcastMeeting is set to $true.' AllowSdnProviderForBroadcastMeeting = 'Boolean | Optional | If set to $true, Teams meeting broadcast streams are enabled to take advantage of the network and bandwidth management capabilities of your Software Defined Network (SDN) provider.' } MeetingBroadcastPolicies = @( @{ BroadcastAttendeeVisibilityMode = 'String | Optional | Specifies the attendee visibility mode of the broadcast events created by this user. This setting controls who can watch the broadcast event - e.g. anyone can watch this event including anonymous users or only authenticated users in my company can watch the event. Note: this setting is applicable to broadcast events that use Teams Meeting production only and does not apply when external encoder is used as production method. | Everyone / EveryoneInCompany / InvitedUsersInCompany / EveryoneInCompanyAndExternal / InvitedUsersInCompanyAndExternal' Ensure = 'String | Optional | Present ensures the Policy exists, absent ensures it is removed | Present / Absent' AllowBroadcastTranscription = 'Boolean | Optional | Specifies whether real-time transcription and translation can be enabled in the broadcast event. Note: this setting is applicable to broadcast events that use Teams Meeting production only and does not apply when external encoder is used as production method.' BroadcastRecordingMode = 'String | Optional | Specifies whether broadcast events created by this user are always recorded, never recorded or user can choose whether to record or not. Note: this setting is applicable to broadcast events that use Teams Meeting production only and does not apply when external encoder is used as production method. | AlwaysEnabled / AlwaysDisabled / UserOverride' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The identifier of the Teams Meeting Broadcast Policy.' AllowBroadcastScheduling = 'Boolean | Optional | Specifies whether this user can create broadcast events in Teams. This settng impacts broadcasts that use both self-service and external encoder production methods.' } ) MeetingConfiguration = @{ EnableQoS = 'Boolean | Optional | Determines whether Quality of Service Marking for real-time media (audio, video, screen/app sharing) is enabled in the tenant. Set this to TRUE to enable and FALSE to disable.' LogoURL = 'String | Optional | URL to a logo image. This would be included in the meeting invite. Please ensure this URL is publicly accessible for invites that go beyond your federation boundaries.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ClientVideoPort = 'UInt32 | Optional | Determines the starting port number for client video. Minimum allowed value: 1024 Maximum allowed value: 65535 Default value: 50020.' ClientAppSharingPortRange = 'UInt32 | Optional | Determines the total number of ports available for client sharing or application sharing. Default value is 20.' LegalURL = 'String | Optional | URL to a website containing legal information and meeting disclaimers. This would be included in the meeting invite. Please ensure this URL is publicly accessible for invites that go beyond your federation boundaries.' CustomFooterText = 'String | Optional | Text to be used on custom meeting invitations.' ClientAudioPort = 'UInt32 | Optional | Determines the starting port number for client audio. Minimum allowed value: 1024 Maximum allowed value: 65535 Default value: 50000.' HelpURL = 'String | Optional | URL to a website where users can obtain assistance on joining the meeting.This would be included in the meeting invite. Please ensure this URL is publicly accessible for invites that go beyond your federation boundaries.' ClientMediaPortRangeEnabled = 'Boolean | Optional | Determines whether custom media port and range selections need to be enforced. When set to True, clients will use the specified port range for media traffic. When set to False (the default value) for any available port (from port 1024 through port 65535) will be used to accommodate media traffic.' ClientAppSharingPort = 'UInt32 | Optional | Determines the starting port number for client screen sharing or application sharing. Minimum allowed value: 1024 Maximum allowed value: 65535 Default value: 50040.' ClientAudioPortRange = 'UInt32 | Optional | Determines the total number of ports available for client audio. Default value is 20.' ClientVideoPortRange = 'UInt32 | Optional | Determines the total number of ports available for client video. Default value is 20.' DisableAnonymousJoin = 'Boolean | Optional | Determines whether anonymous users are blocked from joining meetings in the tenant. Set this to TRUE to block anonymous users from joining. Set this to FALSE to allow anonymous users to join meetings.' } MeetingPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) VoiceIsolation = 'String | Optional | Determines whether you provide support for your users to enable voice isolation in Teams meeting calls. | Disabled / Enabled' Copilot = 'String | Optional | This setting allows the admin to choose whether Copilot will be enabled with a persisted transcript or a non-persisted transcript. | Enabled / EnabledWithTranscript' AllowMeetingCoach = 'Boolean | Optional | This setting will allow admins to allow users the option of turning on Meeting Coach during meetings, which provides users with private personalized feedback on their communication and inclusivity.' DesignatedPresenterRoleMode = 'String | Optional | Determines if users can change the default value of the Who can present? setting in Meeting options in the Teams client. This policy setting affects all meetings, including Meet Now meetings. | OrganizerOnlyUserOverride / EveryoneInCompanyUserOverride / EveryoneUserOverride' AttendeeIdentityMasking = 'String | Optional | This setting will allow admins to enable or disable Masked Attendee mode in Meetings. Masked Attendee meetings will hide attendees'' identifying information (e.g., name, contact information, profile photo). | Enabled / Disabled / DisabledUserOverride' AllowAnnotations = 'Boolean | Optional | Determines whether a user can use the Annotation feature' AllowIPAudio = 'Boolean | Optional | Determines whether audio is enabled in a user''s meetings or calls.' AllowWhiteboard = 'Boolean | Optional | Determines whether whiteboard is allowed in a user''s meetings.' AllowAnonymousUsersToDialOut = 'Boolean | Optional | CURRENTLY DISABLED: Determines whether anonymous users can use the Call Me At feature for meeting audio.' StreamingAttendeeMode = 'String | Optional | Controls if Teams uses overflow capability once a meeting reaches its capacity (1,000 users with full functionality). | Disabled / Enabled' ExplicitRecordingConsent = 'String | Optional | This setting will enable Tenant Admins to turn on/off Explicit Recording Consent feature. | Disabled / Enabled' AllowNetworkConfigurationSettingsLookup = 'Boolean | Optional | Determines whether network configuration setting lookups can be made by users who are not Enterprise Voice enabled. It is used to enable Network Roaming policies.' AllowTranscription = 'Boolean | Optional | Determines whether real-time and/or post-meeting captions and transcriptions are allowed in a user''s meetings.' AllowMeetNow = 'Boolean | Optional | Determines whether a user can start ad-hoc meetings.' ForceStreamingAttendeeMode = 'String | Optional | DEPRECATED' RoomAttributeUserOverride = 'String | Optional | Determines whether or not biometric data will be used to distinguish and or attribute in the transcript. | Off / Distinguish / Attribute' AllowPrivateMeetNow = 'Boolean | Optional | Determines whether a user can start private ad-hoc meetings.' AllowUserToJoinExternalMeeting = 'String | Optional | Determines what types of external meetings users can join. Enabled is able join all external meetings. | Enabled / FederatedOnly / Disabled' AllowExternalParticipantGiveRequestControl = 'Boolean | Optional | Determines whether external participants can request or give control of screen sharing during meetings scheduled by this user.' AllowAnonymousUsersToStartMeeting = 'Boolean | Optional | Determines whether anonymous users can initiate a meeting.' AllowMeetingRegistration = 'Boolean | Optional | Controls if a user can create a webinar meeting. The default value is True.' ChannelRecordingDownload = 'String | Optional | Determines how channel meeting recordings are saved, permissioned, and who can download them. | Allow / Block' ScreenSharingMode = 'String | Optional | Determines the mode in which a user can share a screen in calls or meetings. | SingleApplication / EntireScreen / Disabled' RoomPeopleNameUserOverride = 'String | Optional | Determines if people recognition option is enabled for Teams Rooms. Enabling requires the RoomAttributeUserOverride to be Attribute for allowing individual voice and face profiles to be used for recognition in meetings. | Off / On' Description = 'String | Optional | Description of the Teams Meeting Policy.' NewMeetingRecordingExpirationDays = 'SInt32 | Optional | Specifies the number of days before meeting recordings will expire and move to the recycle bin. Value can be from 1 to 99,999 days. NOTE: You may opt to set Meeting Recordings to never expire by entering the value -1.' AllowExternalNonTrustedMeetingChat = 'Boolean | Optional | This field controls whether a user is allowed to chat in external meetings with users from non trusted organizations.' CopyRestriction = 'Boolean | Optional | This parameter enables a setting that controls a meeting option which allows users to disable right-click or Ctrl+C to copy, Copy link, Forward message, and Share to Outlook for meeting chat messages.' AllowNDIStreaming = 'Boolean | Optional | Determines whether a user is able to use NDI (Network Device Interface) in meetings - both for output and input streams.' ConnectToMeetingControls = 'String | Optional | Allows external connections of thirdparty apps to Microsoft Teams. | Enabled / Disabled' AllowWatermarkForCameraVideo = 'Boolean | Optional | This setting allows scheduling meetings with watermarking for video enabled.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AllowWatermarkForScreenSharing = 'Boolean | Optional | This setting allows scheduling meetings with watermarking for screen sharing enabled.' PreferredMeetingProviderForIslandsMode = 'String | Optional | Determines which Outlook Add-in the user will get as preferred Meeting provider(TeamsAndSfb or Teams). | TeamsAndSfb / Teams' AllowOrganizersToOverrideLobbySettings = 'Boolean | Optional | Determines whether organizers can override lobby settings for both VOIP and PSTN.' AllowEngagementReport = 'String | Optional | Determines whether or not a meeting Organizer can track join and leave times for all users within their meetings as well as download a roster. | Enabled / Disabled / ForceEnabled' LiveCaptionsEnabledType = 'String | Optional | Determines whether a user should have the option to view live captions or not in a meeting. | Disabled / DisabledUserOverride' ExternalMeetingJoin = 'String | Optional | Determines whether the user is allowed to join external meetings. | EnabledForAnyone / EnabledForTrustedOrgs / Disabled' DetectSensitiveContentDuringScreenSharing = 'Boolean | Optional | Allows the admin to enable sensitive content detection during screen share.' IPAudioMode = 'String | Optional | Determines whether audio can be turned on in meetings and group calls. | EnabledOutgoingIncoming / Disabled' BlockedAnonymousJoinClientTypes = 'String | Optional | A user can join a Teams meeting anonymously using a Teams client or using a custom application built using Azure Communication Services. When anonymous meeting join is enabled, both types of clients may be used by default. This optional parameter can be used to block one of the client types that can be used. The allowed values are ACS (to block the use of Azure Communication Services clients) or Teams (to block the use of Teams clients). Both can also be specified, separated by a comma, but this is equivalent to disabling anonymous join completely.' LiveInterpretationEnabledType = 'String | Optional | Determines how meeting organizers can configure a meeting for language interpretation, select attendees of the meeting to become interpreters that other attendees can select and listen to the real-time translation they provide.' AutomaticallyStartCopilot = 'String | Optional | This setting gives admins the ability to auto-start Copilot. | Enabled / Disabled' AllowAnonymousUsersToJoinMeeting = 'Boolean | Optional | Determines whether anonymous users can join the meetings that impacted users organize.' MeetingInviteLanguages = 'String | Optional | Controls how the join information in meeting invitations is displayed by enforcing a common language or enabling up to two languages to be displayed. Note: All Teams supported languages can be specified using language codes.' WhoCanRegister = 'String | Optional | Specifies who can attend and register for webinars. | Everyone / EveryoneInCompany' AutoAdmittedUsers = 'String | Optional | Determines what types of participants will automatically be added to meetings organized by this user. Set this to EveryoneInCompany if you would like meetings to place every external user in the lobby but allow all users in the company to join the meeting immediately. Set this to Everyone if you''d like to admit anonymous users by default. Set this to EveryoneInSameAndFederatedCompany if you would like meetings to allow federated users to join like your company''s users, but place all other external users in a lobby. Set this to InvitedUsers if you would like meetings to allow only the invited users. | EveryoneInCompany / Everyone / EveryoneInSameAndFederatedCompany / OrganizerOnly / InvitedUsers / EveryoneInCompanyExcludingGuests' AllowCloudRecording = 'Boolean | Optional | Determines whether cloud recording is allowed in a user''s meetings.' AllowedStreamingMediaInput = 'String | Optional | Enables the use of RTMP-In in Teams meetings.' AllowIPVideo = 'Boolean | Optional | Determines whether video is enabled in a user''s meetings or calls.' SpeakerAttributionMode = 'String | Optional | Determines if users are identified in transcriptions and if they can change the value of the Automatically identify me in meeting captions and transcripts setting. | Disabled / DisabledUserOverride / EnabledUserOverride / Enabled' Identity = 'String | Required | Identity of the Teams Meeting Policy.' AllowCartCaptionsScheduling = 'String | Optional | Determines whether a user can add a URL for captions from a Communications Access Real-Time Translation (CART) captioner for providing real-time captions in meetings. | EnabledUserOverride / DisabledUserOverride / Disabled' AllowOutlookAddIn = 'Boolean | Optional | Determines whether a user can schedule Teams Meetings in Outlook desktop client.' AllowSharedNotes = 'Boolean | Optional | Determines whether users are allowed to take shared notes.' MeetingChatEnabledType = 'String | Optional | Determines whether or not Chat will be enabled, enabled except anonymous or disabled for meetings. | Disabled / Enabled / EnabledExceptAnonymous' QnAEngagementMode = 'String | Optional | This setting enables Microsoft 365 Tenant Admins to Enable or Disable the Questions and Answers experience (Q+A). | Disabled / Enabled' AllowParticipantGiveRequestControl = 'Boolean | Optional | Determines whether participants can request or give control of screen sharing during meetings scheduled by this user.' MediaBitRateKb = 'UInt32 | Optional | Determines the media bit rate for audio/video/app sharing transmissions in meetings.' EnrollUserOverride = 'String | Optional | Determines whether or not users will be able to enroll/capture their Biometric data: Face & Voice. | Disabled / Enabled' AllowPowerPointSharing = 'Boolean | Optional | Determines whether Powerpoint sharing is allowed in a user''s meetings.' AllowDocumentCollaboration = 'String | Optional | This setting will allow admins to choose which users will be able to use the Document Collaboration feature. | Enabled / Disabled' AllowMeetingReactions = 'Boolean | Optional | Determines whether or not meetings created by users with this policy are able to utilize the Meeting Reactions feature.' AllowChannelMeetingScheduling = 'Boolean | Optional | Determines whether a user can schedule channel meetings. Note this only restricts from scheduling and not from joining a meeting scheduled by another user.' VideoFiltersMode = 'String | Optional | Determines the background effects that a user can configure in the Teams client. | NoFilters / BlurOnly / BlurAndDefaultBackgrounds / AllFilters' InfoShownInReportMode = 'String | Optional | This policy controls what kind of information get shown for the user''s attendance in attendance report/dashboard.' LiveStreamingMode = 'String | Optional | Determines whether you provide support for your users to stream their Teams meetings to large audiences through Real-Time Messaging Protocol (RTMP). | Disabled / Enabled' AllowBreakoutRooms = 'Boolean | Optional | Determines whether or not meetings created by users with this policy are able to utilize the Breakout Rooms feature.' AllowRecordingStorageOutsideRegion = 'Boolean | Optional | Determines whether cloud recording can be stored out of region for go-local tenants where recording is not yet enabled.' AllowPSTNUsersToBypassLobby = 'Boolean | Optional | Determines whether PSTN users should be automatically admitted to the meetings.' ParticipantNameChange = 'String | Optional | This setting will enable Tenant Admins to turn on/off participant renaming feature. | Disabled / Enabled' TeamsCameraFarEndPTZMode = 'String | Optional | Determines whether or not meetings created by users with this policy are able to utilize the Camera Far-End PTZ Mode. | Disabled / AutoAcceptInTenant / AutoAcceptAll' AllowPrivateMeetingScheduling = 'Boolean | Optional | Determines whether a user can schedule private meetings. Note this only restricts from scheduling and not from joining a meeting scheduled by another user.' IPVideoMode = 'String | Optional | Determines whether video can be turned on in meetings and group calls. Can only be enabled if IPAudioMode is enabled | EnabledOutgoingIncoming / Disabled' AutoRecording = 'String | Optional | This setting will enable Tenant Admins to turn on/off auto recording feature. | Enabled / Disabled' ContentSharingInExternalMeetings = 'String | Optional | This policy allows admins to determine whether the user can share content in meetings organized by external organizations. The user should have a Teams Premium license to be protected under this policy. | EnabledForAnyone / EnabledForTrustedOrgs / Disabled' } ) MessagingPolicies = @( @{ AllowOwnerDeleteMessage = 'Boolean | Optional | Determines whether owners are allowed to delete all the messages in their team. Set this to TRUE to allow. Set this to FALSE to prohibit.' Description = 'String | Optional | Provide a description of your policy to identify purpose of creating it.' AllowUserChat = 'Boolean | Optional | Determines whether a user is allowed to chat. Set this to TRUE to allow a user to chat across private chat, group chat and in meetings. Set this to FALSE to prohibit all chat.' Identity = 'String | Required | Identity for the teams messaging policy you''re modifying. To modify the global policy, use this syntax: -Identity global. To modify a per-user policy, use syntax similar to this: -Identity TeamsMessagingPolicy.' AllowGiphy = 'Boolean | Optional | Determines whether a user is allowed to access and post Giphys. Set this to TRUE to allow. Set this FALSE to prohibit.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) AllowUserDeleteMessage = 'Boolean | Optional | Determines whether a user is allowed to delete their own messages. Set this to TRUE to allow. Set this to FALSE to prohibit.' ChannelsInChatListEnabledType = 'String | Optional | Possible values are: DisabledUserOverride,EnabledUserOverride. | DisabledUserOverride / EnabledUserOverride' AllowStickers = 'Boolean | Optional | Determines whether a user is allowed to access and post stickers. Set this to TRUE to allow. Set this FALSE to prohibit.' AllowSmartCompose = 'Boolean | Optional | Turn on this setting to let a user get text predictions for chat messages.' AllowUrlPreviews = 'Boolean | Optional | Use this setting to turn automatic URL previewing on or off in messages. Set this to TRUE to turn on. Set this to FALSE to turn off.' Tenant = 'String | Optional | Globally unique identifier (GUID) of the tenant account whose external user communication policy are being created.' AllowCommunicationComplianceEndUserReporting = 'Boolean | Optional | Report inappropriate content.' AllowSmartReply = 'Boolean | Optional | Turn this setting on to enable suggested replies for chat messages. Set this to TRUE to allow. Set this to FALSE to prohibit.' AllowImmersiveReader = 'Boolean | Optional | Determines whether a user is allowed to use Immersive Reader for reading conversation messages. Set this to TRUE to allow. Set this FALSE to prohibit.' AllowUserTranslation = 'Boolean | Optional | Determines whether a user is allowed to translate messages to their client languages. Set this to TRUE to allow. Set this to FALSE to prohibit.' AllowUserEditMessage = 'Boolean | Optional | Determines whether a user is allowed to edit their own messages. Set this to TRUE to allow. Set this to FALSE to prohibit.' AudioMessageEnabledType = 'String | Optional | Determines whether a user is allowed to send audio messages. Possible values are: ChatsAndChannels,ChatsOnly,Disabled. | ChatsAndChannels / ChatsOnly / Disabled' AllowRemoveUser = 'Boolean | Optional | Determines whether a user is allowed to remove a user from a conversation. Set this to TRUE to allow. Set this FALSE to prohibit.' Ensure = 'String | Optional | Present ensures the Team Message Policy exists, absent ensures it is removed | Present / Absent' ReadReceiptsEnabledType = 'String | Optional | Use this setting to specify whether read receipts are user controlled, enabled for everyone, or disabled. Set this to UserPreference, Everyone or None. | UserPreference / Everyone / None' AllowMemes = 'Boolean | Optional | Determines whether a user is allowed to access and post memes. Set this to TRUE to allow. Set this FALSE to prohibit.' AllowFluidCollaborate = 'Boolean | Optional | Determines is Fluid Collaboration should be enabled or not.' AllowSecurityEndUserReporting = 'Boolean | Optional | Report a security concern.' AllowPriorityMessages = 'Boolean | Optional | Determines whether a user is allowed to send priorities messages. Set this to TRUE to allow. Set this FALSE to prohibit.' AllowVideoMessages = 'Boolean | Optional | Determines whether a user is allowed to send video messages in Chat. Set this to TRUE to allow a user to send video messages. Set this to FALSE to prohibit sending video messages.' GiphyRatingType = 'String | Optional | Determines the Giphy content restrictions applicable to a user. Set this to STRICT, MODERATE or NORESTRICTION. | STRICT / MODERATE / NORESTRICTION' AllowUserDeleteChat = 'Boolean | Optional | Turn this setting on to allow users to permanently delete their 1:1, group chat, and meeting chat as participants (this deletes the chat only for them, not other users in the chat).' } ) MobilityPolicies = @( @{ IPVideoMobileMode = 'String | Optional | When set to WifiOnly, prohibits the user from making and receiving video calls or enabling video in meetings using VoIP calls on the mobile device while on a cellular data connection. Possible values are: WifiOnly, AllNetworks. | WifiOnly / AllNetworks' Description = 'String | Optional | Enables administrators to provide explanatory text about the policy. For example, the Description might indicate the users the policy should be assigned to.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Specify the name of the Teams Mobility Policy.' MobileDialerPreference = 'String | Optional | Determines the mobile dialer preference, possible values are: Teams, Native, UserOverride. | Teams / Native / UserOverride' IPAudioMobileMode = 'String | Optional | When set to WifiOnly, prohibits the user from making and receiving calls or joining meetings using VoIP calls on the mobile device while on a cellular data connection. Possible values are: WifiOnly, AllNetworks. | WifiOnly / AllNetworks' } ) NetworkRoamingPolicies = @( @{ Description = 'String | Optional | Description of the new policy to be created.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Specify the name of the Teams Network Roaming Policy.' AllowIPVideo = 'Boolean | Optional | Determines whether video is enabled in a user''s meetings or calls. Set this to TRUE to allow the user to share their video. Set this to FALSE to prohibit the user from sharing their video.' MediaBitRateKb = 'UInt64 | Optional | Determines the media bit rate for audio/video/app sharing transmissions in meetings.' } ) OnlineVoicemailPolicies = @( @{ Identity = 'String | Required | Identity of the Teams Online Voicemail Policy.' EnableTranscriptionTranslation = 'Boolean | Optional | Allows you to disable or enable translation for the voicemail transcriptions. Possible values are $true or $false.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' EnableEditingCallAnswerRulesSetting = 'Boolean | Optional | Controls if editing call answer rule settings are enabled or disabled for a user. Possible values are $true or $false.' SecondarySystemPromptLanguage = 'String | Optional | The secondary language that voicemail system prompts will be presented in. Must also set PrimarySystemPromptLanguage and may not be the same value as PrimarySystemPromptanguage. When set, this overrides the user language choice. ' EnableTranscriptionProfanityMasking = 'Boolean | Optional | Allows you to disable or enable profanity masking for the voicemail transcriptions. Possible values are $true or $false.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ShareData = 'String | Optional | Specifies whether voicemail and transcription data are shared with the service for training and improving accuracy. Possible values are Defer and Deny.' MaximumRecordingLength = 'String | Optional | A duration of voicemail maximum recording length. The length should be between 30 seconds to 600 seconds.' PrimarySystemPromptLanguage = 'String | Optional | The primary (or first) language that voicemail system prompts will be presented in. Must also set SecondarySystemPromptLanguage. When set, this overrides the user language choice.' EnableTranscription = 'Boolean | Optional | Allows you to disable or enable voicemail transcription. Possible values are $true or $false.' } ) OnlineVoicemailUserSettingsItems = @( @{ OofGreetingFollowCalendarEnabled = 'Boolean | Optional | The OofGreetingFollowCalendarEnabled parameter represents whether to play out-of-office greeting in voicemail deposit scenario when user set out-of-office in calendar.' OofGreetingEnabled = 'Boolean | Optional | The OofGreetingEnabled parameter represents whether to play out-of-office greeting in voicemail deposit scenario.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) PromptLanguage = 'String | Optional | The PromptLanguage parameter represents the language that is used to play voicemail prompts.' ShareData = 'Boolean | Optional | Specifies whether voicemail and transcription data is shared with the service for training and improving accuracy.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' DefaultOofGreetingPromptOverwrite = 'String | Optional | The DefaultOofGreetingPromptOverwrite parameter represents the contents that overwrite the default out-of-office greeting prompt. If the user''s out-of-office custom greeting is not set and DefaultOofGreetingPromptOverwrite is not empty, the voicemail service will play this overwrite greeting instead of the default out-of-office greeting in the voicemail deposit scenario.' TransferTarget = 'String | Optional | The TransferTarget parameter represents the target to transfer the call when call answer rule set to PromptOnlyWithTransfer or VoicemailWithTransferOption. Value of this parameter should be a SIP URI of another user in your organization. For user with Enterprise Voice enabled, a valid telephone number could also be accepted as TransferTarget.' Identity = 'String | Required | The Identity parameter represents the ID of the specific user in your organization; this can be either a SIP URI or an Object ID.' VoicemailEnabled = 'Boolean | Optional | The VoicemailEnabled parameter represents whether to enable voicemail service. If set to $false, the user has no voicemail service.' DefaultGreetingPromptOverwrite = 'String | Optional | The DefaultGreetingPromptOverwrite parameter represents the contents that overwrite the default normal greeting prompt. If the user''s normal custom greeting is not set and DefaultGreetingPromptOverwrite is not empty, the voicemail service will play this overwrite greeting instead of the default normal greeting in the voicemail deposit scenario.' OofGreetingFollowAutomaticRepliesEnabled = 'Boolean | Optional | The OofGreetingFollowAutomaticRepliesEnabled parameter represents whether to play out-of-office greeting in voicemail deposit scenario when user set automatic replies in Outlook.' CallAnswerRule = 'String | Optional | The CallAnswerRule parameter represents the value of the call answer rule, which can be any of the following: DeclineCall, PromptOnly, PromptOnlyWithTransfer, RegularVoicemail, VoicemailWithTransferOption. | DeclineCall / PromptOnly / PromptOnlyWithTransfer / RegularVoicemail / VoicemailWithTransferOption' } ) OnlineVoiceUsers = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TelephoneNumber = 'String | Optional | Specifies the telephone number to be assigned to the user. The value must be in E.164 format: +14255043920. Setting the value to $Null clears the user''s telephone number.' Ensure = 'String | Optional | Present ensures the online voice user exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Specifies the identity of the target user.' LocationID = 'String | Optional | Specifies the unique identifier of the emergency location to assign to the user. Location identities can be discovered by using the Get-CsOnlineLisLocation cmdlet.' } ) PstnUsages = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Usage = 'String | Required | An online PSTN usage (such as Local or Long Distance) that can be used in conjunction with voice routes and voice routing policies.' UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' } ) ShiftsPolicies = @( @{ EnableScheduleOwnerPermissions = 'Boolean | Optional | Determines whether a user can manage a Shifts schedule as a team member.' ShiftNoticeMessageType = 'String | Optional | Specifies the warning message is shown in the blocking dialog when a user access Teams off shift hours. Select one of 7 Microsoft provided messages, a default message or a custom message. | DefaultMessage / Message1 / Message2 / Message3 / Message4 / Message5 / Message6 / Message7 / CustomMessage' ShiftNoticeFrequency = 'String | Optional | Determines the frequency of warning dialog displayed when user opens Teams. | Always / ShowOnceOnChange / Never' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AccessType = 'String | Optional | Determines the Teams access type granted to the user. Today, only unrestricted access to Teams app is supported. | UnrestrictedAccess_TeamsApp' AccessGracePeriodMinutes = 'UInt64 | Optional | Determines the grace period time in minutes between when the first shift starts or last shift ends and when access is blocked' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Specifies the policy instance name' ShiftNoticeMessageCustom = 'String | Optional | Specifies a custom message. Must set ShiftNoticeMessageType to ''CustomMessage'' to enforce this' EnableShiftPresence = 'Boolean | Optional | Determines whether a user is given shift-based presence (On shift, Off shift, or Busy). This must be set in order to have any off shift warning message-specific settings.' } ) Teams = @( @{ Owner = @( 'String | Optional | Owners of the Team' ) AllowOwnerDeleteMessages = 'Boolean | Optional | Allow owners to delete messages within Team.' AllowAddRemoveApps = 'Boolean | Optional | Allow add or remove apps from the Team.' AllowUserEditMessages = 'Boolean | Optional | Allow members to edit messages within Team.' DisplayName = 'String | Required | Display Name of the Team' AllowCreateUpdateRemoveTabs = 'Boolean | Optional | Allow members to manage tabs within Team.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) ShowInTeamsSearchAndSuggestions = 'Boolean | Optional | determines whether or not private teams should be searchable from Teams clients for users who do not belong to that team. Set to $false to make those teams not discoverable from Teams clients.' AllowDeleteChannels = 'Boolean | Optional | Allow members to delete channels within Team.' GiphyContentRating = 'String | Optional | Giphy content rating of the Team. | Strict / Moderate' AllowGuestCreateUpdateChannels = 'Boolean | Optional | Allow guests to create and update channels in Team.' AllowUserDeleteMessages = 'Boolean | Optional | Allow members to delete messages within Team.' Ensure = 'String | Optional | Present ensures the Team exists, absent ensures it is removed. | Present / Absent' UniqueId = 'String | Required | Unique ID to identify this specific object' AllowGiphy = 'Boolean | Optional | Allow giphy in Team.' AllowTeamMentions = 'Boolean | Optional | Allow mentions in Team.' AllowCreateUpdateChannels = 'Boolean | Optional | Allow members to create and update channels within Team.' GroupID = 'String | Optional | Team group ID, only used to target a Team when duplicated display names occurs.' AllowChannelMentions = 'Boolean | Optional | Allow channel mention in Team.' Description = 'String | Optional | Description of Team.' MailNickName = 'String | Optional | MailNickName of O365 Group associated with Team' AllowCreateUpdateRemoveConnectors = 'Boolean | Optional | Allow members to manage connectors within Team.' AllowCustomMemes = 'Boolean | Optional | Allow custom memes in Team.' Visibility = 'String | Optional | Visibility of the Team | Public / Private / HiddenMembership' AllowStickersAndMemes = 'Boolean | Optional | Allow stickers and mimes in the Team.' AllowGuestDeleteChannels = 'Boolean | Optional | Allow guests to delete channel in Team.' } ) TemplatesPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Description of the Teams Templates Policy.' HiddenTemplates = @( 'String | Optional | The list of Teams templates to hide.' ) Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Identity of the Teams Templates Policy.' } ) TenantDialPlans = @( @{ OptimizeDeviceDialing = 'Boolean | Optional | Specifies if the dial plan should optimize device dialing or not.' Description = 'String | Optional | The Description parameter describes the tenant dial plan - what it''s for, what type of user it applies to and any other information that helps to identify the purpose of the tenant dial plan. Maximum characters: 512.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Ensure = 'String | Optional | Specify if this dial plan should exist or not. | Present / Absent' SimpleName = 'String | Optional | The SimpleName parameter is a display name for the tenant dial plan. This name must be unique among all tenant dial plans within the Skype for Business Server deployment.This string can be up to 49 characters long. Valid characters are alphabetic or numeric characters, hyphen (-), dot (.) and parentheses (()).' Identity = 'String | Required | The Identity parameter is a unique identifier that designates the name of the tenant dial plan. Identity is an alphanumeric string that cannot exceed 49 characters. Valid characters are alphabetic or numeric characters, hyphen (-) and dot (.). The value should not begin with a (.).' NormalizationRules = @( @{ Description = 'String | Optional | A friendly description of the normalization rule.' IsInternalExtension = 'Boolean | Optional | If True, the result of applying this rule will be a number internal to the organization. If False, applying the rule results in an external number. This value is ignored if the value of the OptimizeDeviceDialing property of the associated dial plan is set to False.' Identity = 'String | Optional | A unique identifier for the rule. The Identity specified must include the scope followed by a slash and then the name; for example: site:Redmond/Rule1, where site:Redmond is the scope and Rule1 is the name. The name portion will automatically be stored in the Name property. You cannot specify values for Identity and Name in the same command.' Translation = 'String | Optional | The regular expression pattern that will be applied to the number to convert it to E.164 format.' Pattern = 'String | Optional | A regular expression that the dialed number must match in order for this rule to be applied.' Priority = 'UInt32 | Optional | The order in which rules are applied. A phone number might match more than one rule. This parameter sets the order in which the rules are tested against the number.' } ) ExternalAccessPrefix = 'String | Optional | The ExternalAccessPrefix parameter is a number (or set of numbers) that designates the call as external to the organization. (For example, to tenant-dial an outside line, first press 9.) This prefix is ignored by the normalization rules, although these rules are applied to the remainder of the number. The OptimizeDeviceDialing parameter must be set to True for this value to take effect. This parameter must match the regular expression [0-9]{1,4}: that is, it must be a value 0 through 9 and one to four digits in length. The default value is 9.' } ) TenantNetworkRegions = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Provide a description of the network region to identify purpose of creating it.' CentralSite = 'String | Optional | Name of the associated Central Site.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Unique identifier for the network region to be created.' } ) TenantNetworkSites = @( @{ LocationPolicy = 'String | Optional | LocationPolicy is the identifier for the location policy which the current network site is associating to.' EmergencyCallRoutingPolicy = 'String | Optional | This parameter is used to assign a custom emergency call routing policy to a network site' Description = 'String | Optional | Provide a description of the network site to identify purpose of creating it.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' SiteAddress = 'String | Optional | The address of current network site.' NetworkRegionID = 'String | Optional | NetworkRegionID is the identifier for the network region which the current network site is associating to.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Unique identifier for the network site to be created.' NetworkRoamingPolicy = 'String | Optional | NetworkRoamingPolicy is the identifier for the network roaming policy to which the network site will associate to.' EnableLocationBasedRouting = 'Boolean | Optional | This parameter determines whether the current site is enabled for location based routing.' EmergencyCallingPolicy = 'String | Optional | This parameter is used to assign a custom emergency calling policy to a network site' } ) TenantNetworkSubnets = @( @{ Description = 'String | Optional | Provide a description of the network subnet to identify purpose of creating it.' MaskBits = 'UInt32 | Required | This parameter determines the length of bits to mask to the subnet. IPv4 format subnet accepts maskbits from 0 to 32 inclusive. IPv6 format subnet accepts maskbits from 0 to 128 inclusive.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' NetworkSiteID = 'String | Optional | NetworkSiteID is the identifier for the network site which the current network subnet is associating to.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Unique identifier for the network subnet to be created.' } ) TenantTrustedIPAddresss = @( @{ MaskBits = 'UInt32 | Optional | This parameter determines the length of bits to mask to the subnet.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Provide a description of the trusted IP address to identify purpose of creating it.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' Identity = 'String | Required | Unique identifier for the IP address to be created.' } ) TranslationRules = @( @{ Description = 'String | Optional | A friendly description of the normalization rule.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Identifier of the rule. This parameter is required and later used to assign the rule to the Inbound or Outbound Trunk Normalization policy.' Translation = 'String | Optional | The regular expression pattern that will be applied to the number to convert it.' Pattern = 'String | Optional | A regular expression that caller or callee number must match in order for this rule to be applied.' } ) UnassignedNumberTreatments = @( @{ Target = 'String | Optional | The identity of the destination the call should be routed to. Depending on the TargetType it should either be the ObjectId of the user or application instance/resource account or the AudioFileId of the uploaded audio file.' Description = 'String | Optional | Free format description of this treatment.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' TreatmentPriority = 'UInt32 | Optional | The priority of the treatment. Used to distinguish identical patterns. The lower the priority the higher preference. The priority needs to be unique.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | The Id of the treatment.' TargetType = 'String | Optional | The type of target used for the treatment. Allowed values are User, ResourceAccount and Announcement. | User / ResourceAccount / Announcement' Pattern = 'String | Optional | A regular expression that the called number must match in order for the treatment to take effect. It is best pratice to start the regular expression with the hat character and end it with the dollar character. You can use various regular expression test sites on the Internet to validate the expression.' } ) UpdateManagementPolicies = @( @{ AllowPublicPreview = 'String | Optional | Determines the ring of public previews to subscribes to. | Disabled / Enabled / Forced / FollowOfficePreview' UseNewTeamsClient = 'String | Optional | Determines whether or not users will use the new Teams client. | NewTeamsAsDefault / UserChoice / MicrosoftChoice / AdminDisabled / NewTeamsOnly' UpdateTime = 'String | Optional | Determines the time of day to perform the updates. Must be a valid HH:MM format string with leading 0. For instance 08:30.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' AllowManagedUpdates = 'Boolean | Optional | Determines if managed updates should be allowed or not.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Identity of the Teams Update Management Policy.' Description = 'String | Optional | The description of the Teams Update Management Policy.' UpdateDayOfWeek = 'UInt32 | Optional | Determines the day of week to perform the updates. Value shoud be between 0 and 6.' AllowPreview = 'Boolean | Optional | Determines if preview builds should be allowed or not.' UpdateTimeOfDay = 'String | Optional | Determines the time of day to perform the updates. Accepts a DateTime as string. Only the time will be considered.' } ) UpgradeConfiguration = @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DownloadTeams = 'Boolean | Optional | The DownloadTeams property allows admins to control whether the Skype for Business client should automatically download Teams in the background. This Boolean setting is only honored on Windows clients, and only for certain values of the user''s TeamsUpgradePolicy. If NotifySfbUser=true or if Mode=TeamsOnly in TeamsUpgradePolicy, this setting is honored. Otherwise it is ignored.' SfBMeetingJoinUx = 'String | Optional | The SfBMeetingJoinUx property allows admins to specify which app is used to join Skype for Business meetings, even after the user has been upgraded to Teams. Allowed values are: ''SkypeMeetingsApp'' and ''NativeLimitedClient''. ''NativeLimitedClient'' means the existing Skype for Business rich client will be used, but since the user is upgraded, only meeting functionality is available. Calling and Messaging are done via Teams. ''SkypeMeetingsApp'' means use the web-downloadable app. This setting can be useful for organizations that have upgraded to Teams and no longer want to install Skype for Business on their users'' computers. | SkypeMeetingsApp / NativeLimitedClient' } UpgradePolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Users = @( 'String | Optional | DEPRECATED. Use the TeamsUserPolicyAssignment resource instead.' ) MigrateMeetingsToTeams = 'Boolean | Optional | Specifies whether to move existing Skype for Business meetings organized by the user to Teams. This parameter can only be true if the mode of the specified policy instance is either TeamsOnly or SfBWithTeamsCollabAndMeetings, and if the policy instance is being granted to a specific user. It not possible to trigger meeting migration when granting TeamsUpgradePolicy to the entire tenant.' Identity = 'String | Required | Identity of the Teams Upgrade Policy.' } ) Users = @( @{ UniqueId = 'String | Required | Unique ID to identify this specific object' Ensure = 'String | Optional | Present ensures the Team user exists, absent ensures it is removed | Present / Absent' User = 'String | Required | UPN of user to add to Team' Role = 'String | Optional | User role in Team | Guest / Member / Owner' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TeamName = 'String | Required | Team NAme' } ) UserCallingSettingsItems = @( @{ UnansweredTarget = 'String | Optional | The unanswered target. Supported type of values are ObjectId, SIP address and phone number. For phone numbers we support the following types of formats: E.164 (+12065551234 or +1206555000;ext=1234) or non-E.164 like 1234.' IsUnansweredEnabled = 'Boolean | Optional | This parameter controls whether forwarding for unasnwered calls is enabled or not.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) CallGroupTargets = @( 'String | Optional | The members of the Call Group. You need to always specify the full set of members as the parameter value. What you set here will overwrite the current call group membership.' ) UnansweredDelay = 'String | Optional | The time the call will ring the user before it is forwarded to the unanswered target. The supported format is hh:mm:ss and the delay range needs to be between 10 and 60 seconds in 10 seconds increments, i.e. 00:00:10, 00:00:20, 00:00:30, 00:00:40, 00:00:50 and 00:01:00. The default value is 20 seconds.' ForwardingTarget = 'String | Optional | The forwarding target. Supported types of values are ObjectId''s, SIP addresses and phone numbers. For phone numbers we support the following types of formats: E.164 (+12065551234 or +1206555000;ext=1234) or non-E.164 like 1234.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' UnansweredTargetType = 'String | Optional | The unanswered target type. Supported values are Voicemail, SingleTarget, MyDelegates and Group. | Group / MyDelegates / SingleTarget / Voicemail' IsForwardingEnabled = 'Boolean | Optional | This parameter controls whether forwarding is enabled or not.' Identity = 'String | Required | The Identity of the user to set call forwarding, simultaneous ringing and call group settings for. Can be specified using the ObjectId or the SIP address.' ForwardingTargetType = 'String | Optional | The forwarding target type. Supported values are Voicemail, SingleTarget, MyDelegates and Group. Voicemail is only supported for Immediate forwarding. | Group / MyDelegates / SingleTarget / Voicemail' CallGroupOrder = 'String | Optional | The order in which to call members of the Call Group. The supported values are Simultaneous and InOrder.' GroupNotificationOverride = 'String | Optional | The group notification override that will be set on the specified user. The supported values are Ring, Mute and Banner. | Ring / Mute / Banner' ForwardingType = 'String | Optional | The type of forwarding to set. Supported values are Immediate and Simultaneous | Immediate / Simultaneous' } ) UserPoliciesAssignment = @( @{ TeamsEmergencyCallRoutingPolicy = 'String | Optional | Name of the Teams Emergency Call Routing Policy.' TeamsUpgradePolicy = 'String | Optional | Name of the Teams Upgrade Policy.' TeamsMobilityPolicy = 'String | Optional | Name of the Teams Mobility Policy.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) TeamsEventsPolicy = 'String | Optional | Name of the Teams Events Policy.' TeamsCallingPolicy = 'String | Optional | Name of the Teams Calling Policy.' TeamsMeetingPolicy = 'String | Optional | Name of the Teams Meeting Policy.' TeamsChannelsPolicy = 'String | Optional | Name of the Teams Channel Policy.' TeamsCallParkPolicy = 'String | Optional | Name of the Teams Call Park Policy.' User = 'String | Required | User Principal Name of the user representing the policy assignments.' TeamsUpdateManagementPolicy = 'String | Optional | Name of the Teams Update Management Policy.' UniqueId = 'String | Required | Unique ID to identify this specific object' TeamsAppPermissionPolicy = 'String | Optional | Name of the Teams App Permission Policy.' TeamsEmergencyCallingPolicy = 'String | Optional | Name of the Teams Emergency Calling Policy.' TeamsAppSetupPolicy = 'String | Optional | Name of the Teams App Setup Policy.' OnlineVoiceRoutingPolicy = 'String | Optional | Name of the Online VOice Routing Policy.' CallingLineIdentity = 'String | Optional | Name of the Calling Line Policy.' TeamsMessagingPolicy = 'String | Optional | Name of the Teams Messaging Policy.' TeamsCallHoldPolicy = 'String | Optional | Name of the Teams Call Hold Policy.' TeamsEnhancedEncryptionPolicy = 'String | Optional | Name of the Teams Enhanced Encryption Policy.' TeamsAudioConferencingPolicy = 'String | Optional | Name of the Teams Audio Conferencing Policy.' OnlineVoicemailPolicy = 'String | Optional | Name of the Online Voicemail Policy.' ExternalAccessPolicy = 'String | Optional | Name of the External Access Policy.' TeamsMeetingBroadcastPolicy = 'String | Optional | Name of the Teams Meeting Broadcast Policy.' TenantDialPlan = 'String | Optional | Name of the Tenant Dial Plan Policy.' } ) VdiPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) DisableCallsAndMeetings = 'Boolean | Optional | Disables Calls and Meetings.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' DisableAudioVideoInCallsAndMeetings = 'Boolean | Optional | Disables Audio and Video in Calls and Meeting.' Identity = 'String | Required | Unique identity of the VDI Policy.' } ) VoiceRoutes = @( @{ Description = 'String | Optional | A description of what this online voice route is for.' Ensure = 'String | Optional | Present ensures the route exists, absent ensures it is removed. | Present / Absent' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Identity of the Teams Voice Route.' OnlinePstnGatewayList = @( 'String | Optional | This parameter contains a list of online gateways associated with this online voice route. Each member of this list must be the service Identity of the online PSTN gateway.' ) OnlinePstnUsages = @( 'String | Optional | A list of online PSTN usages (such as Local, Long Distance, etc.) that can be applied to this online voice route. The PSTN usage must be an existing usage (PSTN usages can be retrieved by calling the Get-CsOnlinePstnUsage cmdlet).' ) Priority = 'UInt32 | Optional | A number could resolve to multiple online voice routes. The priority determines the order in which the routes will be applied if more than one route is possible.' NumberPattern = 'String | Optional | A regular expression that specifies the phone numbers to which this route applies. Numbers matching this pattern will be routed according to the rest of the routing settings.' } ) VoiceRoutingPolicies = @( @{ AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Description = 'String | Optional | Enables administrators to provide explanatory text to accompany an online voice routing policy. For example, the Description might include information about the users the policy should be assigned to.' Ensure = 'String | Optional | Present ensures the policy exists, absent ensures it is removed. | Present / Absent' OnlinePstnUsages = @( 'String | Optional | A list of online PSTN usages (such as Local or Long Distance) that can be applied to this online voice routing policy. The online PSTN usage must be an existing usage (PSTN usages can be retrieved by calling the Get-CsOnlinePstnUsage cmdlet).' ) Identity = 'String | Required | Identity of the Teams Voice Routing Policy.' } ) WorkloadPolicies = @( @{ AllowCalling = 'Boolean | Optional | Allows calling.' Description = 'String | Optional | Description of the policy.' AllowMessagingPinned = 'Boolean | Optional | Allows pinning a message.' Ensure = 'String | Optional | Present ensures the instance exists, absent ensures it is removed. | Present / Absent' AllowCallingPinned = 'Boolean | Optional | Allows pinning a call.' AllowMessaging = 'Boolean | Optional | Allows messaging.' AccessTokens = @( 'String | Optional | Access token used for authentication.' ) Identity = 'String | Required | Unique identity for the Teams workload policy' AllowMeeting = 'Boolean | Optional | Allows meetins.' AllowMeetingPinned = 'Boolean | Optional | Allows pinning meetings.' } ) } } } |