Create androidDeviceOwnerGeneralDeviceConfiguration

Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Create a new androidDeviceOwnerGeneralDeviceConfiguration object.

Prerequisites

One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from most to least privileged)
Delegated (work or school account) DeviceManagementConfiguration.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application DeviceManagementConfiguration.ReadWrite.All

HTTP Request

POST /deviceManagement/deviceConfigurations
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/microsoft.graph.windowsDomainJoinConfiguration/networkAccessConfigurations

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

In the request body, supply a JSON representation for the androidDeviceOwnerGeneralDeviceConfiguration object.

The following table shows the properties that are required when you create the androidDeviceOwnerGeneralDeviceConfiguration.

Property Type Description
id String Key of the entity. Inherited from deviceConfiguration
lastModifiedDateTime DateTimeOffset DateTime the object was last modified. Inherited from deviceConfiguration
roleScopeTagIds String collection List of Scope Tags for this Entity instance. Inherited from deviceConfiguration
supportsScopeTags Boolean Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only. Inherited from deviceConfiguration
deviceManagementApplicabilityRuleOsEdition deviceManagementApplicabilityRuleOsEdition The OS edition applicability for this Policy. Inherited from deviceConfiguration
deviceManagementApplicabilityRuleOsVersion deviceManagementApplicabilityRuleOsVersion The OS version applicability rule for this Policy. Inherited from deviceConfiguration
deviceManagementApplicabilityRuleDeviceMode deviceManagementApplicabilityRuleDeviceMode The device mode applicability rule for this Policy. Inherited from deviceConfiguration
createdDateTime DateTimeOffset DateTime the object was created. Inherited from deviceConfiguration
description String Admin provided description of the Device Configuration. Inherited from deviceConfiguration
displayName String Admin provided name of the device configuration. Inherited from deviceConfiguration
version Int32 Version of the device configuration. Inherited from deviceConfiguration
accountsBlockModification Boolean Indicates whether or not adding or removing accounts is disabled.
appsAllowInstallFromUnknownSources Boolean Indicates whether or not the user is allowed to enable to unknown sources setting.
appsAutoUpdatePolicy androidDeviceOwnerAppAutoUpdatePolicyType Indicates the value of the app auto update policy. Possible values are: notConfigured, userChoice, never, wiFiOnly, always.
appsDefaultPermissionPolicy androidDeviceOwnerDefaultAppPermissionPolicyType Indicates the permission policy for requests for runtime permissions if one is not defined for the app specifically. Possible values are: deviceDefault, prompt, autoGrant, autoDeny.
appsRecommendSkippingFirstUseHints Boolean Whether or not to recommend all apps skip any first-time-use hints they may have added.
bluetoothBlockConfiguration Boolean Indicates whether or not to block a user from configuring bluetooth.
bluetoothBlockContactSharing Boolean Indicates whether or not to block a user from sharing contacts via bluetooth.
cameraBlocked Boolean Indicates whether or not to disable the use of the camera.
cellularBlockWiFiTethering Boolean Indicates whether or not to block Wi-Fi tethering.
dataRoamingBlocked Boolean Indicates whether or not to block a user from data roaming.
dateTimeConfigurationBlocked Boolean Indicates whether or not to block the user from manually changing the date or time on the device
factoryResetDeviceAdministratorEmails String collection List of Google account emails that will be required to authenticate after a device is factory reset before it can be set up.
factoryResetBlocked Boolean Indicates whether or not the factory reset option in settings is disabled.
globalProxy androidDeviceOwnerGlobalProxy Proxy is set up directly with host, port and excluded hosts.
googleAccountsBlocked Boolean Indicates whether or not google accounts will be blocked.
kioskModeScreenSaverConfigurationEnabled Boolean Whether or not to enable screen saver mode or not in Kiosk Mode.
kioskModeScreenSaverImageUrl String URL for an image that will be the device's screen saver in Kiosk Mode.
kioskModeScreenSaverDisplayTimeInSeconds Int32 The number of seconds that the device will display the screen saver for in Kiosk Mode. Valid values 0 to 9999999
kioskModeScreenSaverStartDelayInSeconds Int32 The number of seconds the device needs to be inactive for before the screen saver is shown in Kiosk Mode. Valid values 1 to 9999999
kioskModeScreenSaverDetectMediaDisabled Boolean Whether or not the device screen should show the screen saver if audio/video is playing in Kiosk Mode.
kioskModeApps appListItem collection A list of managed apps that will be shown when the device is in Kiosk Mode. This collection can contain a maximum of 500 elements.
kioskModeWallpaperUrl String URL to a publicly accessible image to use for the wallpaper when the device is in Kiosk Mode.
kioskModeExitCode String Exit code to allow a user to escape from Kiosk Mode when the device is in Kiosk Mode.
kioskModeVirtualHomeButtonEnabled Boolean Whether or not to display a virtual home button when the device is in Kiosk Mode.
kioskModeVirtualHomeButtonType androidDeviceOwnerVirtualHomeButtonType Indicates whether the virtual home button is a swipe up home button or a floating home button. Possible values are: notConfigured, swipeUp, floating.
kioskModeBluetoothConfigurationEnabled Boolean Whether or not to allow a user to configure Bluetooth settings in Kiosk Mode.
kioskModeWiFiConfigurationEnabled Boolean Whether or not to allow a user to configure Wi-Fi settings in Kiosk Mode.
kioskModeFlashlightConfigurationEnabled Boolean Whether or not to allow a user to use the flashlight in Kiosk Mode.
kioskModeMediaVolumeConfigurationEnabled Boolean Whether or not to allow a user to change the media volume in Kiosk Mode.
microphoneForceMute Boolean Indicates whether or not to block unmuting the microphone on the device.
networkEscapeHatchAllowed Boolean Indicates whether or not the device will allow connecting to a temporary network connection at boot time.
nfcBlockOutgoingBeam Boolean Indicates whether or not to block NFC outgoing beam.
passwordBlockKeyguard Boolean Indicates whether or not the keyguard is disabled.
passwordBlockKeyguardFeatures androidKeyguardFeature collection List of device keyguard features to block. This collection can contain a maximum of 7 elements. Possible values are: notConfigured, camera, notifications, unredactedNotifications, trustAgents, fingerprint, remoteInput, allFeatures.
passwordExpirationDays Int32 Indicates the amount of time in seconds that a password can be set for before it expires and a new password will be required. Valid values 1 to 365
passwordMinimumLength Int32 Indicates the minimum length of the password required on the device. Valid values 4 to 16
passwordMinimumLetterCharacters Int32 Indicates the minimum number of letter characters required for device password. Valid values 1 to 16
passwordMinimumLowerCaseCharacters Int32 Indicates the minimum number of lower case characters required for device password. Valid values 1 to 16
passwordMinimumNonLetterCharacters Int32 Indicates the minimum number of non-letter characters required for device password. Valid values 1 to 16
passwordMinimumNumericCharacters Int32 Indicates the minimum number of numeric characters required for device password. Valid values 1 to 16
passwordMinimumSymbolCharacters Int32 Indicates the minimum number of symbol characters required for device password. Valid values 1 to 16
passwordMinimumUpperCaseCharacters Int32 Indicates the minimum number of upper caseletter characters required for device password. Valid values 1 to 16
passwordMinutesOfInactivityBeforeScreenTimeout Int32 Milliseconds of inactivity before the screen times out.
passwordPreviousPasswordCountToBlock Int32 Indicates the length of password history, where the user will not be able to enter a new password that is the same as any password in the history. Valid values 0 to 24
passwordRequiredType androidDeviceOwnerRequiredPasswordType Indicates the minimum password quality required on the device. Possible values are: deviceDefault, required, numeric, numericComplex, alphabetic, alphanumeric, alphanumericWithSymbols, lowSecurityBiometric, customPassword.
passwordSignInFailureCountBeforeFactoryReset Int32 Indicates the number of times a user can enter an incorrect password before the device is wiped. Valid values 4 to 11
playStoreMode androidDeviceOwnerPlayStoreMode Indicates the Play Store mode of the device. Possible values are: notConfigured, allowList, blockList.
safeBootBlocked Boolean Indicates whether or not rebooting the device into safe boot is disabled.
screenCaptureBlocked Boolean Indicates whether or not to disable the capability to take screenshots.
securityAllowDebuggingFeatures Boolean Indicates whether or not to block the user from enabling debugging features on the device.
securityRequireVerifyApps Boolean Indicates whether or not verify apps is required.
statusBarBlocked Boolean Indicates whether or the status bar is disabled, including notifications, quick settings and other screen overlays.
stayOnModes androidDeviceOwnerBatteryPluggedMode collection List of modes in which the device's display will stay powered-on. This collection can contain a maximum of 4 elements. Possible values are: notConfigured, ac, usb, wireless.
storageAllowUsb Boolean Indicates whether or not to allow USB mass storage.
storageBlockExternalMedia Boolean Indicates whether or not to block external media.
storageBlockUsbFileTransfer Boolean Indicates whether or not to block USB file transfer.
systemUpdateWindowStartMinutesAfterMidnight Int32 Indicates the number of minutes after midnight that the system update window starts. Valid values 0 to 1440
systemUpdateWindowEndMinutesAfterMidnight Int32 Indicates the number of minutes after midnight that the system update window ends. Valid values 0 to 1440
systemUpdateInstallType androidDeviceOwnerSystemUpdateInstallType The type of system update configuration. Possible values are: deviceDefault, postpone, windowed, automatic.
systemWindowsBlocked Boolean Whether or not to block Android system prompt windows, like toasts, phone activities, and system alerts.
usersBlockAdd Boolean Indicates whether or not adding users and profiles is disabled.
usersBlockRemove Boolean Indicates whether or not to disable removing other users from the device.
volumeBlockAdjustment Boolean Indicates whether or not adjusting the master volume is disabled.
vpnAlwaysOnPackageIdentifier String Android app package name for app that will handle an always-on VPN connection.
vpnAlwaysOnLockdownMode Boolean If an always on VPN package name is specified, whether or not to lock network traffic when that VPN is disconnected.
wifiBlockEditConfigurations Boolean Indicates whether or not to block the user from editing the wifi connection settings.
wifiBlockEditPolicyDefinedConfigurations Boolean Indicates whether or not to block the user from editing just the networks defined by the policy.

Response

If successful, this method returns a 201 Created response code and a androidDeviceOwnerGeneralDeviceConfiguration object in the response body.

Example

Request

Here is an example of the request.

POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
Content-type: application/json
Content-length: 4319

{
  "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "accountsBlockModification": true,
  "appsAllowInstallFromUnknownSources": true,
  "appsAutoUpdatePolicy": "userChoice",
  "appsDefaultPermissionPolicy": "prompt",
  "appsRecommendSkippingFirstUseHints": true,
  "bluetoothBlockConfiguration": true,
  "bluetoothBlockContactSharing": true,
  "cameraBlocked": true,
  "cellularBlockWiFiTethering": true,
  "dataRoamingBlocked": true,
  "dateTimeConfigurationBlocked": true,
  "factoryResetDeviceAdministratorEmails": [
    "Factory Reset Device Administrator Emails value"
  ],
  "factoryResetBlocked": true,
  "globalProxy": {
    "@odata.type": "microsoft.graph.androidDeviceOwnerGlobalProxyAutoConfig",
    "proxyAutoConfigURL": "Proxy Auto Config URL value"
  },
  "googleAccountsBlocked": true,
  "kioskModeScreenSaverConfigurationEnabled": true,
  "kioskModeScreenSaverImageUrl": "https://example.com/kioskModeScreenSaverImageUrl/",
  "kioskModeScreenSaverDisplayTimeInSeconds": 8,
  "kioskModeScreenSaverStartDelayInSeconds": 7,
  "kioskModeScreenSaverDetectMediaDisabled": true,
  "kioskModeApps": [
    {
      "@odata.type": "microsoft.graph.appListItem",
      "name": "Name value",
      "publisher": "Publisher value",
      "appStoreUrl": "https://example.com/appStoreUrl/",
      "appId": "App Id value"
    }
  ],
  "kioskModeWallpaperUrl": "https://example.com/kioskModeWallpaperUrl/",
  "kioskModeExitCode": "Kiosk Mode Exit Code value",
  "kioskModeVirtualHomeButtonEnabled": true,
  "kioskModeVirtualHomeButtonType": "swipeUp",
  "kioskModeBluetoothConfigurationEnabled": true,
  "kioskModeWiFiConfigurationEnabled": true,
  "kioskModeFlashlightConfigurationEnabled": true,
  "kioskModeMediaVolumeConfigurationEnabled": true,
  "microphoneForceMute": true,
  "networkEscapeHatchAllowed": true,
  "nfcBlockOutgoingBeam": true,
  "passwordBlockKeyguard": true,
  "passwordBlockKeyguardFeatures": [
    "camera"
  ],
  "passwordExpirationDays": 6,
  "passwordMinimumLength": 5,
  "passwordMinimumLetterCharacters": 15,
  "passwordMinimumLowerCaseCharacters": 2,
  "passwordMinimumNonLetterCharacters": 2,
  "passwordMinimumNumericCharacters": 0,
  "passwordMinimumSymbolCharacters": 15,
  "passwordMinimumUpperCaseCharacters": 2,
  "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
  "passwordPreviousPasswordCountToBlock": 4,
  "passwordRequiredType": "required",
  "passwordSignInFailureCountBeforeFactoryReset": 12,
  "playStoreMode": "allowList",
  "safeBootBlocked": true,
  "screenCaptureBlocked": true,
  "securityAllowDebuggingFeatures": true,
  "securityRequireVerifyApps": true,
  "statusBarBlocked": true,
  "stayOnModes": [
    "ac"
  ],
  "storageAllowUsb": true,
  "storageBlockExternalMedia": true,
  "storageBlockUsbFileTransfer": true,
  "systemUpdateWindowStartMinutesAfterMidnight": 11,
  "systemUpdateWindowEndMinutesAfterMidnight": 9,
  "systemUpdateInstallType": "postpone",
  "systemWindowsBlocked": true,
  "usersBlockAdd": true,
  "usersBlockRemove": true,
  "volumeBlockAdjustment": true,
  "vpnAlwaysOnPackageIdentifier": "Vpn Always On Package Identifier value",
  "vpnAlwaysOnLockdownMode": true,
  "wifiBlockEditConfigurations": true,
  "wifiBlockEditPolicyDefinedConfigurations": true
}

Response

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 201 Created
Content-Type: application/json
Content-Length: 4491

{
  "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
  "id": "edad943d-943d-edad-3d94-aded3d94aded",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "accountsBlockModification": true,
  "appsAllowInstallFromUnknownSources": true,
  "appsAutoUpdatePolicy": "userChoice",
  "appsDefaultPermissionPolicy": "prompt",
  "appsRecommendSkippingFirstUseHints": true,
  "bluetoothBlockConfiguration": true,
  "bluetoothBlockContactSharing": true,
  "cameraBlocked": true,
  "cellularBlockWiFiTethering": true,
  "dataRoamingBlocked": true,
  "dateTimeConfigurationBlocked": true,
  "factoryResetDeviceAdministratorEmails": [
    "Factory Reset Device Administrator Emails value"
  ],
  "factoryResetBlocked": true,
  "globalProxy": {
    "@odata.type": "microsoft.graph.androidDeviceOwnerGlobalProxyAutoConfig",
    "proxyAutoConfigURL": "Proxy Auto Config URL value"
  },
  "googleAccountsBlocked": true,
  "kioskModeScreenSaverConfigurationEnabled": true,
  "kioskModeScreenSaverImageUrl": "https://example.com/kioskModeScreenSaverImageUrl/",
  "kioskModeScreenSaverDisplayTimeInSeconds": 8,
  "kioskModeScreenSaverStartDelayInSeconds": 7,
  "kioskModeScreenSaverDetectMediaDisabled": true,
  "kioskModeApps": [
    {
      "@odata.type": "microsoft.graph.appListItem",
      "name": "Name value",
      "publisher": "Publisher value",
      "appStoreUrl": "https://example.com/appStoreUrl/",
      "appId": "App Id value"
    }
  ],
  "kioskModeWallpaperUrl": "https://example.com/kioskModeWallpaperUrl/",
  "kioskModeExitCode": "Kiosk Mode Exit Code value",
  "kioskModeVirtualHomeButtonEnabled": true,
  "kioskModeVirtualHomeButtonType": "swipeUp",
  "kioskModeBluetoothConfigurationEnabled": true,
  "kioskModeWiFiConfigurationEnabled": true,
  "kioskModeFlashlightConfigurationEnabled": true,
  "kioskModeMediaVolumeConfigurationEnabled": true,
  "microphoneForceMute": true,
  "networkEscapeHatchAllowed": true,
  "nfcBlockOutgoingBeam": true,
  "passwordBlockKeyguard": true,
  "passwordBlockKeyguardFeatures": [
    "camera"
  ],
  "passwordExpirationDays": 6,
  "passwordMinimumLength": 5,
  "passwordMinimumLetterCharacters": 15,
  "passwordMinimumLowerCaseCharacters": 2,
  "passwordMinimumNonLetterCharacters": 2,
  "passwordMinimumNumericCharacters": 0,
  "passwordMinimumSymbolCharacters": 15,
  "passwordMinimumUpperCaseCharacters": 2,
  "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
  "passwordPreviousPasswordCountToBlock": 4,
  "passwordRequiredType": "required",
  "passwordSignInFailureCountBeforeFactoryReset": 12,
  "playStoreMode": "allowList",
  "safeBootBlocked": true,
  "screenCaptureBlocked": true,
  "securityAllowDebuggingFeatures": true,
  "securityRequireVerifyApps": true,
  "statusBarBlocked": true,
  "stayOnModes": [
    "ac"
  ],
  "storageAllowUsb": true,
  "storageBlockExternalMedia": true,
  "storageBlockUsbFileTransfer": true,
  "systemUpdateWindowStartMinutesAfterMidnight": 11,
  "systemUpdateWindowEndMinutesAfterMidnight": 9,
  "systemUpdateInstallType": "postpone",
  "systemWindowsBlocked": true,
  "usersBlockAdd": true,
  "usersBlockRemove": true,
  "volumeBlockAdjustment": true,
  "vpnAlwaysOnPackageIdentifier": "Vpn Always On Package Identifier value",
  "vpnAlwaysOnLockdownMode": true,
  "wifiBlockEditConfigurations": true,
  "wifiBlockEditPolicyDefinedConfigurations": true
}