创建 androidForWorkGeneralDeviceConfiguration
命名空间：microsoft.graph
重要提示： Microsoft Graph /beta 版本下的 API 可能会更改;不支持生产使用。
注意： 适用于 Intune 的 Microsoft Graph API 需要适用于租户的 活动 Intune 许可证。
创建新的 androidForWorkGeneralDeviceConfiguration 对象。
先决条件
要调用此 API，需要以下权限之一。要了解详细信息，包括如何选择权限的信息，请参阅权限。
| 权限类型 | 权限（从最低特权到最高特权） |
|---|---|
| 委派（工作或学校帐户） | DeviceManagementConfiguration.ReadWrite.All |
| 委派（个人 Microsoft 帐户） | 不支持。 |
| 应用程序 | DeviceManagementConfiguration.ReadWrite.All |
HTTP 请求
POST /deviceManagement/deviceConfigurations
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/microsoft.graph.windowsDomainJoinConfiguration/networkAccessConfigurations
请求标头
| 标头 | 值 |
|---|---|
| Authorization | Bearer <token>。必需。 |
| 接受 | application/json |
请求正文
在请求正文中，提供 androidForWorkGeneralDeviceConfiguration 对象的 JSON 表示形式。
下表显示创建 androidForWorkGeneralDeviceConfiguration 时所需的属性。
| 属性 | 类型 | 说明 |
|---|---|---|
| id | String | 实体的键。 继承自 deviceConfiguration |
| lastModifiedDateTime | DateTimeOffset | 上次修改对象的日期/时间。 继承自 deviceConfiguration |
| roleScopeTagIds | 字符串集合 | 此实体实例的范围标记列表。 继承自 deviceConfiguration |
| supportsScopeTags | Boolean | 指示基础设备配置是否支持分配范围标记。 当此值为 false 且实体对范围用户不可见时，不允许分配给 ScopeTags 属性。 这适用于在 Silverlight 中创建的旧版策略，可通过在 Azure 门户中删除和重新创建策略来解决。 此属性是只读的。 继承自 deviceConfiguration |
| deviceManagementApplicabilityRuleOsEdition | deviceManagementApplicabilityRuleOsEdition | 此策略的操作系统版本适用性。 继承自 deviceConfiguration |
| deviceManagementApplicabilityRuleOsVersion | deviceManagementApplicabilityRuleOsVersion | 此策略的操作系统版本适用性规则。 继承自 deviceConfiguration |
| deviceManagementApplicabilityRuleDeviceMode | deviceManagementApplicabilityRuleDeviceMode | 此策略的设备模式适用性规则。 继承自 deviceConfiguration |
| createdDateTime | DateTimeOffset | 创建对象的日期/时间。 继承自 deviceConfiguration |
| 说明 | String | 管理员提供的设备配置的说明。 继承自 deviceConfiguration |
| displayName | String | 管理员提供的设备配置的名称。 继承自 deviceConfiguration |
| version | Int32 | 设备配置的版本。 继承自 deviceConfiguration |
| passwordBlockFaceUnlock | Boolean | 指示是否阻止人脸解锁。 |
| passwordBlockFingerprintUnlock | Boolean | 指示是否阻止指纹解锁。 |
| passwordBlockIrisUnlock | Boolean | 指示是否阻止虹膜解锁。 |
| passwordBlockTrustAgents | Boolean | 指示是否阻止 Smart Lock 和其他信任代理。 |
| passwordExpirationDays | Int32 | 密码过期前的天数。 有效值为 1 至 365。 |
| passwordMinimumLength | Int32 | 密码的最小长度。 有效值为 4 至 16 |
| passwordMinutesOfInactivityBeforeScreenTimeout | Int32 | 屏幕超时之前的不活动分钟数。 |
| passwordPreviousPasswordBlockCount | Int32 | 要阻止的以前密码的数量。 有效值为 0 至 24 |
| passwordSignInFailureCountBeforeFactoryReset | Int32 | 恢复出厂设置之前允许登录失败的次数。 有效值为 1 到 16 |
| passwordRequiredType | androidForWorkRequiredPasswordType | 必需的密码类型。 可取值为：deviceDefault、lowSecurityBiometric、required、atLeastNumeric、numericComplex、atLeastAlphabetic、atLeastAlphanumeric、alphanumericWithSymbols。 |
| workProfileDataSharingType | androidForWorkCrossProfileDataSharingType | 允许的数据共享类型。 可取值为：deviceDefault、preventAny、allowPersonalToWork、noRestrictions。 |
| workProfileBlockNotificationsWhileDeviceLocked | Boolean | 指示设备锁定时是否阻止通知。 |
| workProfileBlockAddingAccounts | Boolean | 阻止用户在工作配置文件中添加/删除帐户。 |
| workProfileBluetoothEnableContactSharing | Boolean | 允许蓝牙设备访问企业联系人。 |
| workProfileBlockScreenCapture | Boolean | 阻止工作配置文件中的屏幕捕获。 |
| workProfileBlockCrossProfileCallerId | Boolean | 阻止在个人配置文件中显示工作配置文件调用方 ID。 |
| workProfileBlockCamera | Boolean | 阻止工作配置文件相机。 |
| workProfileBlockCrossProfileContactsSearch | Boolean | 阻止工作配置文件联系人在个人配置文件中的可用性。 |
| workProfileBlockCrossProfileCopyPaste | Boolean | 指示设置是否禁用跨配置文件复制/粘贴的布尔值。 |
| workProfileDefaultAppPermissionPolicy | androidForWorkDefaultAppPermissionPolicyType | 必需的密码类型。 可取值为：deviceDefault、prompt、autoGrant、autoDeny。 |
| workProfilePasswordBlockFaceUnlock | Boolean | 指示是否阻止工作配置文件的人脸解锁。 |
| workProfilePasswordBlockFingerprintUnlock | Boolean | 指示是否阻止工作配置文件的指纹解锁。 |
| workProfilePasswordBlockIrisUnlock | Boolean | 指示是否阻止工作配置文件的虹膜解锁。 |
| workProfilePasswordBlockTrustAgents | Boolean | 指示是否阻止工作配置文件的智能锁定和其他信任代理。 |
| workProfilePasswordExpirationDays | Int32 | 工作配置文件密码过期前的天数。 有效值为 1 至 365。 |
| workProfilePasswordMinimumLength | Int32 | 工作配置文件密码的最小长度。 有效值为 4 至 16 |
| workProfilePasswordMinNumericCharacters | Int32 | 工作配置文件密码中所需的数字字符的最小值。 有效值为 1 到 10 |
| workProfilePasswordMinNonLetterCharacters | Int32 | 工作配置文件密码中所需的非字母字符的最小值。 有效值为 1 到 10 |
| workProfilePasswordMinLetterCharacters | Int32 | 工作配置文件密码中所需的最小字母字符数。 有效值为 1 到 10 |
| workProfilePasswordMinLowerCaseCharacters | Int32 | 工作配置文件密码中需要的最小小写字符数。 有效值为 1 到 10 |
| workProfilePasswordMinUpperCaseCharacters | Int32 | 工作配置文件密码中需要的最小大写字符数。 有效值为 1 到 10 |
| workProfilePasswordMinSymbolCharacters | Int32 | 工作配置文件密码中所需的符号的最小数。 有效值为 1 到 10 |
| workProfilePasswordMinutesOfInactivityBeforeScreenTimeout | Int32 | 屏幕超时之前的不活动分钟数。 |
| workProfilePasswordPreviousPasswordBlockCount | Int32 | 要阻止的以前工作配置文件密码的数量。 有效值为 0 至 24 |
| workProfilePasswordSignInFailureCountBeforeFactoryReset | Int32 | 在删除工作配置文件和删除所有公司数据之前允许的登录失败次数。 有效值为 1 到 16 |
| workProfilePasswordRequiredType | androidForWorkRequiredPasswordType | 所需的工作配置文件密码类型。 可取值为：deviceDefault、lowSecurityBiometric、required、atLeastNumeric、numericComplex、atLeastAlphabetic、atLeastAlphanumeric、alphanumericWithSymbols。 |
| workProfileRequirePassword | Boolean | 工作配置文件中是否要求密码 |
| securityRequireVerifyApps | Boolean | 要求启用 Android 验证应用功能。 |
| vpnAlwaysOnPackageIdentifier | String | 为始终打开的 VPN 启用锁定模式。 |
| vpnEnableAlwaysOnLockdownMode | Boolean | 为始终打开的 VPN 启用锁定模式。 |
| workProfileAllowWidgets | Boolean | 允许来自工作配置文件应用的小部件。 |
| workProfileBlockPersonalAppInstallsFromUnknownSources | Boolean | 阻止从个人配置文件中的未知源安装应用。 |
响应
如果成功，此方法在响应正文 201 Created 中返回 响应代码和 androidForWorkGeneralDeviceConfiguration 对象。
示例
请求
下面是一个请求示例。
POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
Content-type: application/json
Content-length: 3079
{
"@odata.type": "#microsoft.graph.androidForWorkGeneralDeviceConfiguration",
"roleScopeTagIds": [
"Role Scope Tag Ids value"
],
"supportsScopeTags": true,
"deviceManagementApplicabilityRuleOsEdition": {
"@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
"osEditionTypes": [
"windows10EnterpriseN"
],
"name": "Name value",
"ruleType": "exclude"
},
"deviceManagementApplicabilityRuleOsVersion": {
"@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
"minOSVersion": "Min OSVersion value",
"maxOSVersion": "Max OSVersion value",
"name": "Name value",
"ruleType": "exclude"
},
"deviceManagementApplicabilityRuleDeviceMode": {
"@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
"deviceMode": "sModeConfiguration",
"name": "Name value",
"ruleType": "exclude"
},
"description": "Description value",
"displayName": "Display Name value",
"version": 7,
"passwordBlockFaceUnlock": true,
"passwordBlockFingerprintUnlock": true,
"passwordBlockIrisUnlock": true,
"passwordBlockTrustAgents": true,
"passwordExpirationDays": 6,
"passwordMinimumLength": 5,
"passwordMinutesOfInactivityBeforeScreenTimeout": 14,
"passwordPreviousPasswordBlockCount": 2,
"passwordSignInFailureCountBeforeFactoryReset": 12,
"passwordRequiredType": "lowSecurityBiometric",
"workProfileDataSharingType": "preventAny",
"workProfileBlockNotificationsWhileDeviceLocked": true,
"workProfileBlockAddingAccounts": true,
"workProfileBluetoothEnableContactSharing": true,
"workProfileBlockScreenCapture": true,
"workProfileBlockCrossProfileCallerId": true,
"workProfileBlockCamera": true,
"workProfileBlockCrossProfileContactsSearch": true,
"workProfileBlockCrossProfileCopyPaste": true,
"workProfileDefaultAppPermissionPolicy": "prompt",
"workProfilePasswordBlockFaceUnlock": true,
"workProfilePasswordBlockFingerprintUnlock": true,
"workProfilePasswordBlockIrisUnlock": true,
"workProfilePasswordBlockTrustAgents": true,
"workProfilePasswordExpirationDays": 1,
"workProfilePasswordMinimumLength": 0,
"workProfilePasswordMinNumericCharacters": 7,
"workProfilePasswordMinNonLetterCharacters": 9,
"workProfilePasswordMinLetterCharacters": 6,
"workProfilePasswordMinLowerCaseCharacters": 9,
"workProfilePasswordMinUpperCaseCharacters": 9,
"workProfilePasswordMinSymbolCharacters": 6,
"workProfilePasswordMinutesOfInactivityBeforeScreenTimeout": 9,
"workProfilePasswordPreviousPasswordBlockCount": 13,
"workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
"workProfilePasswordRequiredType": "lowSecurityBiometric",
"workProfileRequirePassword": true,
"securityRequireVerifyApps": true,
"vpnAlwaysOnPackageIdentifier": "Vpn Always On Package Identifier value",
"vpnEnableAlwaysOnLockdownMode": true,
"workProfileAllowWidgets": true,
"workProfileBlockPersonalAppInstallsFromUnknownSources": true
}
响应
下面是一个响应示例。注意：为了简单起见，可能会将此处所示的响应对象截断。将从实际调用中返回所有属性。
HTTP/1.1 201 Created
Content-Type: application/json
Content-Length: 3251
{
"@odata.type": "#microsoft.graph.androidForWorkGeneralDeviceConfiguration",
"id": "a931a366-a366-a931-66a3-31a966a331a9",
"lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
"roleScopeTagIds": [
"Role Scope Tag Ids value"
],
"supportsScopeTags": true,
"deviceManagementApplicabilityRuleOsEdition": {
"@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
"osEditionTypes": [
"windows10EnterpriseN"
],
"name": "Name value",
"ruleType": "exclude"
},
"deviceManagementApplicabilityRuleOsVersion": {
"@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
"minOSVersion": "Min OSVersion value",
"maxOSVersion": "Max OSVersion value",
"name": "Name value",
"ruleType": "exclude"
},
"deviceManagementApplicabilityRuleDeviceMode": {
"@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
"deviceMode": "sModeConfiguration",
"name": "Name value",
"ruleType": "exclude"
},
"createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
"description": "Description value",
"displayName": "Display Name value",
"version": 7,
"passwordBlockFaceUnlock": true,
"passwordBlockFingerprintUnlock": true,
"passwordBlockIrisUnlock": true,
"passwordBlockTrustAgents": true,
"passwordExpirationDays": 6,
"passwordMinimumLength": 5,
"passwordMinutesOfInactivityBeforeScreenTimeout": 14,
"passwordPreviousPasswordBlockCount": 2,
"passwordSignInFailureCountBeforeFactoryReset": 12,
"passwordRequiredType": "lowSecurityBiometric",
"workProfileDataSharingType": "preventAny",
"workProfileBlockNotificationsWhileDeviceLocked": true,
"workProfileBlockAddingAccounts": true,
"workProfileBluetoothEnableContactSharing": true,
"workProfileBlockScreenCapture": true,
"workProfileBlockCrossProfileCallerId": true,
"workProfileBlockCamera": true,
"workProfileBlockCrossProfileContactsSearch": true,
"workProfileBlockCrossProfileCopyPaste": true,
"workProfileDefaultAppPermissionPolicy": "prompt",
"workProfilePasswordBlockFaceUnlock": true,
"workProfilePasswordBlockFingerprintUnlock": true,
"workProfilePasswordBlockIrisUnlock": true,
"workProfilePasswordBlockTrustAgents": true,
"workProfilePasswordExpirationDays": 1,
"workProfilePasswordMinimumLength": 0,
"workProfilePasswordMinNumericCharacters": 7,
"workProfilePasswordMinNonLetterCharacters": 9,
"workProfilePasswordMinLetterCharacters": 6,
"workProfilePasswordMinLowerCaseCharacters": 9,
"workProfilePasswordMinUpperCaseCharacters": 9,
"workProfilePasswordMinSymbolCharacters": 6,
"workProfilePasswordMinutesOfInactivityBeforeScreenTimeout": 9,
"workProfilePasswordPreviousPasswordBlockCount": 13,
"workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
"workProfilePasswordRequiredType": "lowSecurityBiometric",
"workProfileRequirePassword": true,
"securityRequireVerifyApps": true,
"vpnAlwaysOnPackageIdentifier": "Vpn Always On Package Identifier value",
"vpnEnableAlwaysOnLockdownMode": true,
"workProfileAllowWidgets": true,
"workProfileBlockPersonalAppInstallsFromUnknownSources": true
}
反馈
提交和查看相关反馈