Update deviceEnrollmentWindowsHelloForBusinessConfiguration

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Update the properties of a deviceEnrollmentWindowsHelloForBusinessConfiguration object.

Prerequisites

One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from most to least privileged)
Delegated (work or school account) DeviceManagementServiceConfig.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application Not supported.

HTTP Request

PATCH /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

In the request body, supply a JSON representation for the deviceEnrollmentWindowsHelloForBusinessConfiguration object.

The following table shows the properties that are required when you create the deviceEnrollmentWindowsHelloForBusinessConfiguration.

Property Type Description
id String Not yet documented Inherited from deviceEnrollmentConfiguration
displayName String Not yet documented Inherited from deviceEnrollmentConfiguration
description String Not yet documented Inherited from deviceEnrollmentConfiguration
priority Int32 Not yet documented Inherited from deviceEnrollmentConfiguration
createdDateTime DateTimeOffset Not yet documented Inherited from deviceEnrollmentConfiguration
lastModifiedDateTime DateTimeOffset Not yet documented Inherited from deviceEnrollmentConfiguration
version Int32 Not yet documented Inherited from deviceEnrollmentConfiguration
pinMinimumLength Int32 Not yet documented
pinMaximumLength Int32 Not yet documented
pinUppercaseCharactersUsage windowsHelloForBusinessPinUsage Not yet documented. Possible values are: allowed, required, disallowed.
pinLowercaseCharactersUsage windowsHelloForBusinessPinUsage Not yet documented. Possible values are: allowed, required, disallowed.
pinSpecialCharactersUsage windowsHelloForBusinessPinUsage Not yet documented. Possible values are: allowed, required, disallowed.
state enablement Not yet documented. Possible values are: notConfigured, enabled, disabled.
securityDeviceRequired Boolean Not yet documented
unlockWithBiometricsEnabled Boolean Not yet documented
remotePassportEnabled Boolean Not yet documented
pinPreviousBlockCount Int32 Not yet documented
pinExpirationInDays Int32 Not yet documented
enhancedBiometricsState enablement Not yet documented. Possible values are: notConfigured, enabled, disabled.

Response

If successful, this method returns a 200 OK response code and an updated deviceEnrollmentWindowsHelloForBusinessConfiguration object in the response body.

Example

Request

Here is an example of the request.

PATCH https://graph.microsoft.com/v1.0/deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
Content-type: application/json
Content-length: 629

{
  "@odata.type": "#microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration",
  "displayName": "Display Name value",
  "description": "Description value",
  "priority": 8,
  "version": 7,
  "pinMinimumLength": 0,
  "pinMaximumLength": 0,
  "pinUppercaseCharactersUsage": "required",
  "pinLowercaseCharactersUsage": "required",
  "pinSpecialCharactersUsage": "required",
  "state": "enabled",
  "securityDeviceRequired": true,
  "unlockWithBiometricsEnabled": true,
  "remotePassportEnabled": true,
  "pinPreviousBlockCount": 5,
  "pinExpirationInDays": 3,
  "enhancedBiometricsState": "enabled"
}

Response

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 801

{
  "@odata.type": "#microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration",
  "id": "3068e0cd-e0cd-3068-cde0-6830cde06830",
  "displayName": "Display Name value",
  "description": "Description value",
  "priority": 8,
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "version": 7,
  "pinMinimumLength": 0,
  "pinMaximumLength": 0,
  "pinUppercaseCharactersUsage": "required",
  "pinLowercaseCharactersUsage": "required",
  "pinSpecialCharactersUsage": "required",
  "state": "enabled",
  "securityDeviceRequired": true,
  "unlockWithBiometricsEnabled": true,
  "remotePassportEnabled": true,
  "pinPreviousBlockCount": 5,
  "pinExpirationInDays": 3,
  "enhancedBiometricsState": "enabled"
}