Create windowsDefenderAdvancedThreatProtectionConfiguration
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
Create a new windowsDefenderAdvancedThreatProtectionConfiguration object.
Prerequisites
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type | Permissions (from most to least privileged) |
---|---|
Delegated (work or school account) | DeviceManagementConfiguration.ReadWrite.All |
Delegated (personal Microsoft account) | Not supported. |
Application | Not supported. |
HTTP Request
POST /deviceManagement/deviceConfigurations
Request headers
Header | Value |
---|---|
Authorization | Bearer <token> Required. |
Accept | application/json |
Request body
In the request body, supply a JSON representation for the windowsDefenderAdvancedThreatProtectionConfiguration object.
The following table shows the properties that are required when you create the windowsDefenderAdvancedThreatProtectionConfiguration.
Property | Type | Description |
---|---|---|
id | String | Key of the entity. Inherited from deviceConfiguration |
lastModifiedDateTime | DateTimeOffset | DateTime the object was last modified. Inherited from deviceConfiguration |
createdDateTime | DateTimeOffset | DateTime the object was created. Inherited from deviceConfiguration |
description | String | Admin provided description of the Device Configuration. Inherited from deviceConfiguration |
displayName | String | Admin provided name of the device configuration. Inherited from deviceConfiguration |
version | Int32 | Version of the device configuration. Inherited from deviceConfiguration |
allowSampleSharing | Boolean | Windows Defender AdvancedThreatProtection "Allow Sample Sharing" Rule |
enableExpeditedTelemetryReporting | Boolean | Expedite Windows Defender Advanced Threat Protection telemetry reporting frequency. |
Response
If successful, this method returns a 201 Created
response code and a windowsDefenderAdvancedThreatProtectionConfiguration object in the response body.
Example
Request
Here is an example of the request.
POST https://graph.microsoft.com/v1.0/deviceManagement/deviceConfigurations
Content-type: application/json
Content-length: 267
{
"@odata.type": "#microsoft.graph.windowsDefenderAdvancedThreatProtectionConfiguration",
"description": "Description value",
"displayName": "Display Name value",
"version": 7,
"allowSampleSharing": true,
"enableExpeditedTelemetryReporting": true
}
Response
Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
HTTP/1.1 201 Created
Content-Type: application/json
Content-Length: 439
{
"@odata.type": "#microsoft.graph.windowsDefenderAdvancedThreatProtectionConfiguration",
"id": "294373aa-73aa-2943-aa73-4329aa734329",
"lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
"createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
"description": "Description value",
"displayName": "Display Name value",
"version": 7,
"allowSampleSharing": true,
"enableExpeditedTelemetryReporting": true
}
Feedback
Loading feedback...