Update androidDeviceOwnerGeneralDeviceConfiguration

Important: APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Update the properties of a androidDeviceOwnerGeneralDeviceConfiguration object.

Prerequisites

One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from most to least privileged)
Delegated (work or school account) DeviceManagementConfiguration.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application Not supported.

HTTP Request

PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/groupAssignments/{deviceConfigurationGroupAssignmentId}/deviceConfiguration
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/microsoft.graph.windowsDomainJoinConfiguration/networkAccessConfigurations/{deviceConfigurationId}

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

In the request body, supply a JSON representation for the androidDeviceOwnerGeneralDeviceConfiguration object.

The following table shows the properties that are required when you create the androidDeviceOwnerGeneralDeviceConfiguration.

Property Type Description
id String Key of the entity. Inherited from deviceConfiguration
lastModifiedDateTime DateTimeOffset DateTime the object was last modified. Inherited from deviceConfiguration
roleScopeTagIds String collection List of Scope Tags for this Entity instance. Inherited from deviceConfiguration
supportsScopeTags Boolean Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only. Inherited from deviceConfiguration
createdDateTime DateTimeOffset DateTime the object was created. Inherited from deviceConfiguration
description String Admin provided description of the Device Configuration. Inherited from deviceConfiguration
displayName String Admin provided name of the device configuration. Inherited from deviceConfiguration
version Int32 Version of the device configuration. Inherited from deviceConfiguration
accountsBlockModification Boolean Indicates whether or not adding or removing accounts is disabled.
appsAllowInstallFromUnknownSources Boolean Indicates whether or not the user is allowed to enable to unknown sources setting.
appsAutoUpdatePolicy androidDeviceOwnerAppAutoUpdatePolicyType Indicates the value of the app auto update policy. Possible values are: notConfigured, userChoice, never, wiFiOnly, always.
appsDefaultPermissionPolicy androidDeviceOwnerDefaultAppPermissionPolicyType Indicates the permission policy for requests for runtime permissions if one is not defined for the app specifically. Possible values are: deviceDefault, prompt, autoGrant, autoDeny.
appsRecommendSkippingFirstUseHints Boolean Whether or not to recommend all apps skip any first-time-use hints they may have added.
bluetoothBlockConfiguration Boolean Indicates whether or not to block a user from configuring bluetooth.
bluetoothBlockContactSharing Boolean Indicates whether or not to block a user from sharing contacts via bluetooth.
cameraBlocked Boolean Indicates whether or not to disable the use of the camera.
cellularBlockWiFiTethering Boolean Indicates whether or not to block Wi-Fi tethering.
dataRoamingBlocked Boolean Indicates whether or not to block a user from data roaming.
dateTimeConfigurationBlocked Boolean Indicates whether or not to block the user from manually changing the date or time on the device
factoryResetDeviceAdministratorEmails String collection List of Google account emails that will be required to authenticate after a device is factory reset before it can be set up.
factoryResetBlocked Boolean Indicates whether or not the factory reset option in settings is disabled.
kioskModeApps appListItem collection A list of managed apps that will be shown when the device is in Kiosk Mode. This collection can contain a maximum of 500 elements.
kioskModeWallpaperUrl String URL to a publicly accessible image to use for the wallpaper when the device is in Kiosk Mode.
kioskModeExitCode String Exit code to allow a user to escape from Kiosk Mode when the device is in Kiosk Mode.
kioskModeVirtualHomeButtonEnabled Boolean Whether or not to display a virtual home button when the device is in Kiosk Mode.
microphoneForceMute Boolean Indicates whether or not to block unmuting the microphone on the device.
networkEscapeHatchAllowed Boolean Indicates whether or not the device will allow connecting to a temporary network connection at boot time.
nfcBlockOutgoingBeam Boolean Indicates whether or not to block NFC outgoing beam.
passwordBlockKeyguard Boolean Indicates whether or not the keyguard is disabled.
passwordBlockKeyguardFeatures androidKeyguardFeature collection List of device keyguard features to block. This collection can contain a maximum of 7 elements. Possible values are: notConfigured, camera, notifications, unredactedNotifications, trustAgents, fingerprint, remoteInput, allFeatures.
passwordExpirationDays Int32 Indicates the amount of time in seconds that a password can be set for before it expires and a new password will be required. Valid values 1 to 365
passwordMinimumLength Int32 Indicates the minimum length of the password required on the device. Valid values 4 to 16
passwordMinutesOfInactivityBeforeScreenTimeout Int32 Milliseconds of inactivity before the screen times out.
passwordPreviousPasswordCountToBlock Int32 Indicates the length of password history, where the user will not be able to enter a new password that is the same as any password in the history. Valid values 0 to 24
passwordRequiredType androidDeviceOwnerRequiredPasswordType Indicates the minimum password quality required on the device. Possible values are: deviceDefault, required, numeric, numericComplex, alphabetic, alphanumeric, alphanumericWithSymbols.
passwordSignInFailureCountBeforeFactoryReset Int32 Indicates the number of times a user can enter an incorrect password before the device is wiped. Valid values 4 to 11
safeBootBlocked Boolean Indicates whether or not rebooting the device into safe boot is disabled.
screenCaptureBlocked Boolean Indicates whether or not to disable the capability to take screenshots.
securityAllowDebuggingFeatures Boolean Indicates whether or not to block the user from enabling debugging features on the device.
securityRequireVerifyApps Boolean Indicates whether or not verify apps is required.
statusBarBlocked Boolean Indicates whether or the status bar is disabled, including notifications, quick settings and other screen overlays.
stayOnModes androidDeviceOwnerBatteryPluggedMode collection List of modes in which the device's display will stay powered-on. This collection can contain a maximum of 4 elements. Possible values are: notConfigured, ac, usb, wireless.
storageAllowUsb Boolean Indicates whether or not to allow USB mass storage.
storageBlockExternalMedia Boolean Indicates whether or not to block external media.
storageBlockUsbFileTransfer Boolean Indicates whether or not to block USB file transfer.
systemUpdateWindowStartMinutesAfterMidnight Int32 Indicates the number of minutes after midnight that the system update window starts. Valid values 0 to 1440
systemUpdateWindowEndMinutesAfterMidnight Int32 Indicates the number of minutes after midnight that the system update window ends. Valid values 0 to 1440
systemUpdateInstallType androidDeviceOwnerSystemUpdateInstallType The type of system update configuration. Possible values are: deviceDefault, postpone, windowed, automatic.
systemWindowsBlocked Boolean Whether or not to block Android system prompt windows, like toasts, phone activities, and system alerts.
usersBlockAdd Boolean Indicates whether or not adding users and profiles is disabled.
usersBlockRemove Boolean Indicates whether or not to disable removing other users from the device.
volumeBlockAdjustment Boolean Indicates whether or not adjusting the master volume is disabled.
vpnAlwaysOnPackageIdentifier String Android app package name for app that will handle an always-on VPN connection.
vpnAlwaysOnLockdownMode Boolean If an always on VPN package name is specified, whether or not to lock network traffic when that VPN is disconnected.
wifiBlockEditConfigurations Boolean Indicates whether or not to block the user from editing the wifi connection settings.
wifiBlockEditPolicyDefinedConfigurations Boolean Indicates whether or not to block the user from editing just the networks defined by the policy.

Response

If successful, this method returns a 200 OK response code and an updated androidDeviceOwnerGeneralDeviceConfiguration object in the response body.

Example

Request

Here is an example of the request.

PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId}
Content-type: application/json
Content-length: 2517

{
  "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "accountsBlockModification": true,
  "appsAllowInstallFromUnknownSources": true,
  "appsAutoUpdatePolicy": "userChoice",
  "appsDefaultPermissionPolicy": "prompt",
  "appsRecommendSkippingFirstUseHints": true,
  "bluetoothBlockConfiguration": true,
  "bluetoothBlockContactSharing": true,
  "cameraBlocked": true,
  "cellularBlockWiFiTethering": true,
  "dataRoamingBlocked": true,
  "dateTimeConfigurationBlocked": true,
  "factoryResetDeviceAdministratorEmails": [
    "Factory Reset Device Administrator Emails value"
  ],
  "factoryResetBlocked": true,
  "kioskModeApps": [
    {
      "@odata.type": "microsoft.graph.appListItem",
      "name": "Name value",
      "publisher": "Publisher value",
      "appStoreUrl": "https://example.com/appStoreUrl/",
      "appId": "App Id value"
    }
  ],
  "kioskModeWallpaperUrl": "https://example.com/kioskModeWallpaperUrl/",
  "kioskModeExitCode": "Kiosk Mode Exit Code value",
  "kioskModeVirtualHomeButtonEnabled": true,
  "microphoneForceMute": true,
  "networkEscapeHatchAllowed": true,
  "nfcBlockOutgoingBeam": true,
  "passwordBlockKeyguard": true,
  "passwordBlockKeyguardFeatures": [
    "camera"
  ],
  "passwordExpirationDays": 6,
  "passwordMinimumLength": 5,
  "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
  "passwordPreviousPasswordCountToBlock": 4,
  "passwordRequiredType": "required",
  "passwordSignInFailureCountBeforeFactoryReset": 12,
  "safeBootBlocked": true,
  "screenCaptureBlocked": true,
  "securityAllowDebuggingFeatures": true,
  "securityRequireVerifyApps": true,
  "statusBarBlocked": true,
  "stayOnModes": [
    "ac"
  ],
  "storageAllowUsb": true,
  "storageBlockExternalMedia": true,
  "storageBlockUsbFileTransfer": true,
  "systemUpdateWindowStartMinutesAfterMidnight": 11,
  "systemUpdateWindowEndMinutesAfterMidnight": 9,
  "systemUpdateInstallType": "postpone",
  "systemWindowsBlocked": true,
  "usersBlockAdd": true,
  "usersBlockRemove": true,
  "volumeBlockAdjustment": true,
  "vpnAlwaysOnPackageIdentifier": "Vpn Always On Package Identifier value",
  "vpnAlwaysOnLockdownMode": true,
  "wifiBlockEditConfigurations": true,
  "wifiBlockEditPolicyDefinedConfigurations": true
}

Response

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 2689

{
  "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
  "id": "edad943d-943d-edad-3d94-aded3d94aded",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "accountsBlockModification": true,
  "appsAllowInstallFromUnknownSources": true,
  "appsAutoUpdatePolicy": "userChoice",
  "appsDefaultPermissionPolicy": "prompt",
  "appsRecommendSkippingFirstUseHints": true,
  "bluetoothBlockConfiguration": true,
  "bluetoothBlockContactSharing": true,
  "cameraBlocked": true,
  "cellularBlockWiFiTethering": true,
  "dataRoamingBlocked": true,
  "dateTimeConfigurationBlocked": true,
  "factoryResetDeviceAdministratorEmails": [
    "Factory Reset Device Administrator Emails value"
  ],
  "factoryResetBlocked": true,
  "kioskModeApps": [
    {
      "@odata.type": "microsoft.graph.appListItem",
      "name": "Name value",
      "publisher": "Publisher value",
      "appStoreUrl": "https://example.com/appStoreUrl/",
      "appId": "App Id value"
    }
  ],
  "kioskModeWallpaperUrl": "https://example.com/kioskModeWallpaperUrl/",
  "kioskModeExitCode": "Kiosk Mode Exit Code value",
  "kioskModeVirtualHomeButtonEnabled": true,
  "microphoneForceMute": true,
  "networkEscapeHatchAllowed": true,
  "nfcBlockOutgoingBeam": true,
  "passwordBlockKeyguard": true,
  "passwordBlockKeyguardFeatures": [
    "camera"
  ],
  "passwordExpirationDays": 6,
  "passwordMinimumLength": 5,
  "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
  "passwordPreviousPasswordCountToBlock": 4,
  "passwordRequiredType": "required",
  "passwordSignInFailureCountBeforeFactoryReset": 12,
  "safeBootBlocked": true,
  "screenCaptureBlocked": true,
  "securityAllowDebuggingFeatures": true,
  "securityRequireVerifyApps": true,
  "statusBarBlocked": true,
  "stayOnModes": [
    "ac"
  ],
  "storageAllowUsb": true,
  "storageBlockExternalMedia": true,
  "storageBlockUsbFileTransfer": true,
  "systemUpdateWindowStartMinutesAfterMidnight": 11,
  "systemUpdateWindowEndMinutesAfterMidnight": 9,
  "systemUpdateInstallType": "postpone",
  "systemWindowsBlocked": true,
  "usersBlockAdd": true,
  "usersBlockRemove": true,
  "volumeBlockAdjustment": true,
  "vpnAlwaysOnPackageIdentifier": "Vpn Always On Package Identifier value",
  "vpnAlwaysOnLockdownMode": true,
  "wifiBlockEditConfigurations": true,
  "wifiBlockEditPolicyDefinedConfigurations": true
}