Update deviceEnrollmentPlatformRestrictionConfiguration
Namespace: microsoft.graph
Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
Update the properties of a deviceEnrollmentPlatformRestrictionConfiguration object.
This API is available in the following national cloud deployments.
Global service | US Government L4 | US Government L5 (DOD) | China operated by 21Vianet |
---|---|---|---|
✅ | ✅ | ✅ | ✅ |
Permissions
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type | Permissions (from least to most privileged) |
---|---|
Delegated (work or school account) | DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All |
Delegated (personal Microsoft account) | Not supported. |
Application | DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All |
HTTP Request
PATCH /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
Request headers
Header | Value |
---|---|
Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
Accept | application/json |
Request body
In the request body, supply a JSON representation for the deviceEnrollmentPlatformRestrictionConfiguration object.
The following table shows the properties that are required when you create the deviceEnrollmentPlatformRestrictionConfiguration.
Property | Type | Description |
---|---|---|
id | String | Unique Identifier for the account Inherited from deviceEnrollmentConfiguration |
displayName | String | The display name of the device enrollment configuration Inherited from deviceEnrollmentConfiguration |
description | String | The description of the device enrollment configuration Inherited from deviceEnrollmentConfiguration |
priority | Int32 | Priority is used when a user exists in multiple groups that are assigned enrollment configuration. Users are subject only to the configuration with the lowest priority value. Inherited from deviceEnrollmentConfiguration |
createdDateTime | DateTimeOffset | Created date time in UTC of the device enrollment configuration Inherited from deviceEnrollmentConfiguration |
lastModifiedDateTime | DateTimeOffset | Last modified date time in UTC of the device enrollment configuration Inherited from deviceEnrollmentConfiguration |
version | Int32 | The version of the device enrollment configuration Inherited from deviceEnrollmentConfiguration |
roleScopeTagIds | String collection | Optional role scope tags for the enrollment restrictions. Inherited from deviceEnrollmentConfiguration |
deviceEnrollmentConfigurationType | deviceEnrollmentConfigurationType | Support for Enrollment Configuration Type Inherited from deviceEnrollmentConfiguration. Possible values are: unknown , limit , platformRestrictions , windowsHelloForBusiness , defaultLimit , defaultPlatformRestrictions , defaultWindowsHelloForBusiness , defaultWindows10EnrollmentCompletionPageConfiguration , windows10EnrollmentCompletionPageConfiguration , deviceComanagementAuthorityConfiguration , singlePlatformRestriction , unknownFutureValue , enrollmentNotificationsConfiguration . |
platformRestriction | deviceEnrollmentPlatformRestriction | Restrictions based on platform, platform operating system version, and device ownership |
platformType | enrollmentRestrictionPlatformType | Type of platform for which this restriction applies. Possible values are: allPlatforms , ios , windows , windowsPhone , android , androidForWork , mac , linux , unknownFutureValue . |
Response
If successful, this method returns a 200 OK
response code and an updated deviceEnrollmentPlatformRestrictionConfiguration object in the response body.
Example
Request
Here is an example of the request.
PATCH https://graph.microsoft.com/beta/deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
Content-type: application/json
Content-length: 765
{
"@odata.type": "#microsoft.graph.deviceEnrollmentPlatformRestrictionConfiguration",
"displayName": "Display Name value",
"description": "Description value",
"priority": 8,
"version": 7,
"roleScopeTagIds": [
"Role Scope Tag Ids value"
],
"deviceEnrollmentConfigurationType": "limit",
"platformRestriction": {
"@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestriction",
"platformBlocked": true,
"personalDeviceEnrollmentBlocked": true,
"osMinimumVersion": "Os Minimum Version value",
"osMaximumVersion": "Os Maximum Version value",
"blockedManufacturers": [
"Blocked Manufacturers value"
],
"blockedSkus": [
"Blocked Skus value"
]
},
"platformType": "ios"
}
Response
Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 937
{
"@odata.type": "#microsoft.graph.deviceEnrollmentPlatformRestrictionConfiguration",
"id": "dedce9f4-e9f4-dedc-f4e9-dcdef4e9dcde",
"displayName": "Display Name value",
"description": "Description value",
"priority": 8,
"createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
"lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
"version": 7,
"roleScopeTagIds": [
"Role Scope Tag Ids value"
],
"deviceEnrollmentConfigurationType": "limit",
"platformRestriction": {
"@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestriction",
"platformBlocked": true,
"personalDeviceEnrollmentBlocked": true,
"osMinimumVersion": "Os Minimum Version value",
"osMaximumVersion": "Os Maximum Version value",
"blockedManufacturers": [
"Blocked Manufacturers value"
],
"blockedSkus": [
"Blocked Skus value"
]
},
"platformType": "ios"
}
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for