Create deviceEnrollmentWindowsHelloForBusinessConfiguration

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Create a new deviceEnrollmentWindowsHelloForBusinessConfiguration object.

Prerequisites

One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from most to least privileged)
Delegated (work or school account) DeviceManagementServiceConfig.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application Not supported.

HTTP Request

POST /deviceManagement/deviceEnrollmentConfigurations

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

In the request body, supply a JSON representation for the deviceEnrollmentWindowsHelloForBusinessConfiguration object.

The following table shows the properties that are required when you create the deviceEnrollmentWindowsHelloForBusinessConfiguration.

Property Type Description
id String Not yet documented Inherited from deviceEnrollmentConfiguration
displayName String Not yet documented Inherited from deviceEnrollmentConfiguration
description String Not yet documented Inherited from deviceEnrollmentConfiguration
priority Int32 Not yet documented Inherited from deviceEnrollmentConfiguration
createdDateTime DateTimeOffset Not yet documented Inherited from deviceEnrollmentConfiguration
lastModifiedDateTime DateTimeOffset Not yet documented Inherited from deviceEnrollmentConfiguration
version Int32 Not yet documented Inherited from deviceEnrollmentConfiguration
pinMinimumLength Int32 Not yet documented
pinMaximumLength Int32 Not yet documented
pinUppercaseCharactersUsage windowsHelloForBusinessPinUsage Not yet documented. Possible values are: allowed, required, disallowed.
pinLowercaseCharactersUsage windowsHelloForBusinessPinUsage Not yet documented. Possible values are: allowed, required, disallowed.
pinSpecialCharactersUsage windowsHelloForBusinessPinUsage Not yet documented. Possible values are: allowed, required, disallowed.
state enablement Not yet documented. Possible values are: notConfigured, enabled, disabled.
securityDeviceRequired Boolean Not yet documented
unlockWithBiometricsEnabled Boolean Not yet documented
remotePassportEnabled Boolean Not yet documented
pinPreviousBlockCount Int32 Not yet documented
pinExpirationInDays Int32 Not yet documented
enhancedBiometricsState enablement Not yet documented. Possible values are: notConfigured, enabled, disabled.

Response

If successful, this method returns a 201 Created response code and a deviceEnrollmentWindowsHelloForBusinessConfiguration object in the response body.

Example

Request

Here is an example of the request.

POST https://graph.microsoft.com/v1.0/deviceManagement/deviceEnrollmentConfigurations
Content-type: application/json
Content-length: 629

{
  "@odata.type": "#microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration",
  "displayName": "Display Name value",
  "description": "Description value",
  "priority": 8,
  "version": 7,
  "pinMinimumLength": 0,
  "pinMaximumLength": 0,
  "pinUppercaseCharactersUsage": "required",
  "pinLowercaseCharactersUsage": "required",
  "pinSpecialCharactersUsage": "required",
  "state": "enabled",
  "securityDeviceRequired": true,
  "unlockWithBiometricsEnabled": true,
  "remotePassportEnabled": true,
  "pinPreviousBlockCount": 5,
  "pinExpirationInDays": 3,
  "enhancedBiometricsState": "enabled"
}

Response

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 201 Created
Content-Type: application/json
Content-Length: 801

{
  "@odata.type": "#microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration",
  "id": "3068e0cd-e0cd-3068-cde0-6830cde06830",
  "displayName": "Display Name value",
  "description": "Description value",
  "priority": 8,
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "version": 7,
  "pinMinimumLength": 0,
  "pinMaximumLength": 0,
  "pinUppercaseCharactersUsage": "required",
  "pinLowercaseCharactersUsage": "required",
  "pinSpecialCharactersUsage": "required",
  "state": "enabled",
  "securityDeviceRequired": true,
  "unlockWithBiometricsEnabled": true,
  "remotePassportEnabled": true,
  "pinPreviousBlockCount": 5,
  "pinExpirationInDays": 3,
  "enhancedBiometricsState": "enabled"
}