Skip to content

Commit ece9a18

Browse files
Learn Build Service GitHub AppLearn Build Service GitHub App
Learn Build Service GitHub App
authored and
Learn Build Service GitHub App
committed
Merging changes synced from https://github.com/microsoftgraph/microsoft-graph-docs (branch live)
2 parents a9f20be + e74a930 commit ece9a18

144 files changed

Lines changed: 2105 additions & 609 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/permissions-reference-gen-fic.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: Update permissions reference file (FIC)
22

33
on:
44
schedule:
5-
- cron: 0 6 * * 1 # Runs every Monday at 6 AM UTC
5+
- cron: 0 6 * * 2 # Runs every Monday at 6 AM UTC
66
workflow_dispatch: # Allows manual triggering of the workflow
77

88
permissions:

‎api-reference/beta/api/accesspackagecatalog-list-accesspackageresources.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ GET /identityGovernance/entitlementManagement/accessPackageCatalogs/{id}/accessP
3737

3838
## Optional query parameters
3939

40-
This method supports OData query parameters to help customize the response. For example, to retrieve the access package resource scopes and environments for each resource, include `$expand=accessPackageResourceScopes,accessPackageResourceEnvironment` in the query. To retrieve the available roles of a resource, include `$expand=accessPackageResourceRoles`. To retrieve only resources for applications and not groups or sites, include `$filter=resourceType eq 'Application'` in the query. For general information, see [OData query parameters](/graph/query-parameters).
40+
This method supports OData query parameters to help customize the response. For example, to retrieve the access package resource scopes and environments for each resource, include `$expand=accessPackageResourceScopes,accessPackageResourceEnvironment,externalOriginResourceConnector` in the query. To retrieve the available roles of a resource, include `$expand=accessPackageResourceRoles`. To retrieve only resources for applications and not groups or sites, include `$filter=resourceType eq 'Application'` in the query. For general information, see [OData query parameters](/graph/query-parameters).
4141

4242
## Request headers
4343

‎api-reference/beta/api/configurationmanagement-list-configurationsnapshots.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ Namespace: microsoft.graph
1616

1717
Get a list of [configurationBaseline](../resources/configurationbaseline.md) objects that represent configuration snapshots and their properties.
1818

19+
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
20+
1921
## Permissions
2022

2123
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

‎api-reference/beta/api/entitlementmanagement-list-externaloriginresourceconnectors.md‎

Lines changed: 113 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,113 @@
1+
---
2+
title: "List externalOriginResourceConnectors"
3+
description: "Get a list of externalOriginResourceConnector objects and their properties."
4+
author: "vikama-microsoft"
5+
ms.date: 02/23/2026
6+
ms.localizationpriority: medium
7+
ms.subservice: "entra-id-governance"
8+
doc_type: apiPageType
9+
---
10+
11+
# List externalOriginResourceConnectors
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Get a list of [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) objects and their properties.
18+
19+
## Permissions
20+
21+
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
22+
23+
<!-- {
24+
"blockType": "permissions",
25+
"name": "entitlementmanagement-list-externaloriginresourceconnectors-permissions"
26+
}
27+
-->
28+
[!INCLUDE [permissions-table](../includes/permissions/entitlementmanagement-list-externaloriginresourceconnectors-permissions.md)]
29+
30+
## HTTP request
31+
32+
<!-- {
33+
"blockType": "ignored"
34+
}
35+
-->
36+
``` http
37+
GET /identityGovernance/entitlementManagement/externalOriginResourceConnectors
38+
```
39+
40+
## Optional query parameters
41+
42+
This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).
43+
44+
## Request headers
45+
46+
|Name|Description|
47+
|:---|:---|
48+
|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
49+
50+
## Request body
51+
52+
Don't supply a request body for this method.
53+
54+
## Response
55+
56+
If successful, this method returns a `200 OK` response code and a collection of [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) objects in the response body.
57+
58+
## Examples
59+
60+
### Request
61+
62+
The following example shows a request.
63+
<!-- {
64+
"blockType": "request",
65+
"name": "list_externaloriginresourceconnector"
66+
}
67+
-->
68+
``` http
69+
GET https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/externalOriginResourceConnectors
70+
```
71+
72+
73+
### Response
74+
75+
The following example shows the response.
76+
>**Note:** The response object shown here might be shortened for readability.
77+
<!-- {
78+
"blockType": "response",
79+
"truncated": true,
80+
"@odata.type": "microsoft.graph.externalOriginResourceConnector"
81+
}
82+
-->
83+
``` http
84+
HTTP/1.1 200 OK
85+
Content-Type: application/json
86+
87+
{
88+
"value": [
89+
{
90+
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
91+
"id": "375db7fb-280f-5d24-1abd-c63e0311c131",
92+
"displayName": "SAP Access Control",
93+
"description": "SAP Access Control connector",
94+
"connectorType": "sapAc",
95+
"connectionInfo": {
96+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
97+
"url": "dev.test",
98+
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
99+
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
100+
"keyVaultName": "Keyvault",
101+
"secretName": "Test",
102+
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
103+
"resourceGroup": "SAPIAG Group"
104+
},
105+
"createdBy": "admin@contoso.com",
106+
"createdDateTime": "2026-02-23T10:15:30Z",
107+
"modifiedBy": "admin@contoso.com",
108+
"modifiedDateTime": "2026-02-23T10:15:30Z"
109+
}
110+
]
111+
}
112+
```
113+

‎api-reference/beta/api/entitlementmanagement-post-accesspackageresourcerequests.md‎

Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -626,6 +626,82 @@ Content-type: application/json
626626
"requestStatus": "Fulfilled"
627627
}
628628
```
629+
630+
631+
### Example 7: Create an accessPackageResourceRequest for adding a SAP IAG Access Rights as a resource
632+
633+
#### Request
634+
635+
The following example shows a request for adding an external origin resource connector to a catalog, including specifying a required attribute of that resource connector.
636+
637+
<!-- {
638+
"blockType": "request",
639+
"name": "create_accesspackageresourcerequest_from_accesspackageresourcerequests_connector"
640+
}-->
641+
```http
642+
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageResourceRequests
643+
Content-type: application/json
644+
645+
{
646+
"catalogId": "bcb19bf7-cdf7-4a70-a106-f6543620b2a5",
647+
"accessPackageResource": {
648+
"id": "88eb460d-ca08-4eb9-afae-8d60a8b00377",
649+
"displayName": "SAP IAG Access Rights",
650+
"description": "This resource represents the business roles of SAP IAG",
651+
"resourceType": "Business role",
652+
"originId": "https://iagintgorg-iag-intg-space-java-rest-arqapi.cfapps.sap.hana.ondemand.com",
653+
"originSystem": "External",
654+
"accessPackageResourceScopes": [],
655+
"externalOriginResourceConnector": {
656+
"id": "1a53cea5-48bd-467c-af81-a24245b0df2b",
657+
"displayName": "SAP IAG 10.0",
658+
"description": "SAP IAG 10.0.0",
659+
"connectorType": "sapIag",
660+
"connectionInfo": {
661+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
662+
"url": "https://iagigorg-iag-intg-space-java-rest-arqapi.cfapps.sap.hana.ondemand.com",
663+
"subscriptionId": "8e072eb5-73f5-4ed2-9324-a734dcb9728",
664+
"resourceGroup": "SAPResourceGroup",
665+
"accessTokenUrl": "https://entra-docu-intg-mrrd3gv.authentication.sap.hana.ondemand.com/oauth/token",
666+
"clientId": "sb-72062308-a7ae-456f-b9a4-24302b8a4aa!b247012|iagapi-iag-intg-space!b11378",
667+
"keyVaultName": "SAPIAG-KV",
668+
"secretName": "ClientSecret"
669+
}
670+
},
671+
"accessPackageResourceEnvironment": null
672+
},
673+
"requestType": "AdminAdd",
674+
"history": [],
675+
"executeImmediately": true
676+
}
677+
678+
```
679+
680+
681+
682+
#### Response
683+
684+
The following example shows the response.
685+
686+
> **Note:** The response object shown here might be shortened for readability.
687+
688+
<!-- {
689+
"blockType": "response",
690+
"truncated": true,
691+
"@odata.type": "microsoft.graph.accessPackageResourceRequest"
692+
} -->
693+
694+
```http
695+
HTTP/1.1 201 Created
696+
Content-type: application/json
697+
698+
{
699+
"id": "0e37f047-c6b9-4d5c-99cd-e3fab4007be4",
700+
"requestType": "AdminAdd",
701+
"requestState": "Delivered",
702+
"requestStatus": "Fulfilled"
703+
}
704+
```
629705
<!-- uuid: 16cd6b66-4b1a-43a1-adaf-3a886856ed98
630706
2019-02-04 14:57:30 UTC -->
631707
<!-- {

‎api-reference/beta/api/entitlementmanagement-post-externaloriginresourceconnectors.md‎

Lines changed: 136 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,136 @@
1+
---
2+
title: "Create externalOriginResourceConnector"
3+
description: "Create a new externalOriginResourceConnector object."
4+
author: "vikama-microsoft"
5+
ms.date: 02/23/2026
6+
ms.localizationpriority: medium
7+
ms.subservice: "entra-id-governance"
8+
doc_type: apiPageType
9+
---
10+
11+
# Create externalOriginResourceConnector
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Creates a new [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) object.
18+
19+
## Permissions
20+
21+
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
22+
23+
<!-- {
24+
"blockType": "permissions",
25+
"name": "entitlementmanagement-post-externaloriginresourceconnectors-permissions"
26+
}
27+
-->
28+
29+
[!INCLUDE [permissions-table](../includes/permissions/entitlementmanagement-post-externaloriginresourceconnectors-permissions.md)]
30+
31+
## HTTP request
32+
33+
<!-- {
34+
"blockType": "ignored"
35+
}
36+
-->
37+
``` http
38+
POST /identityGovernance/entitlementManagement/externalOriginResourceConnectors
39+
```
40+
41+
## Request headers
42+
43+
|Name|Description|
44+
|:---|:---|
45+
|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
46+
|Content-Type|application/json. Required.|
47+
48+
## Request body
49+
50+
In the request body, supply a JSON representation of the [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) object.
51+
52+
You can specify the following properties when creating an **externalOriginResourceConnector**.
53+
54+
|Property|Type|Description|
55+
|:---|:---|:---|
56+
|connectionInfo|[connectionInfo](../resources/connectioninfo.md)|The connection information for the external origin resource connector. Required.|
57+
|connectorType|connectorType|The type of connector. The possible values are: `sapIag`, `sapAc`, `unknownFutureValue`. Required.|
58+
|description|String|The description of the external origin resource connector. Optional.|
59+
|displayName|String|The display name of the external origin resource connector. Optional.|
60+
61+
62+
63+
## Response
64+
65+
If successful, this method returns a `201 Created` response code and an [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) object in the response body.
66+
67+
## Examples
68+
69+
### Request
70+
71+
The following example shows a request.
72+
<!-- {
73+
"blockType": "request",
74+
"name": "create_externaloriginresourceconnector_from_"
75+
}
76+
-->
77+
``` http
78+
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/externalOriginResourceConnectors
79+
Content-Type: application/json
80+
81+
{
82+
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
83+
"displayName": "SAP Access Control",
84+
"description": "SAP Access Control connector",
85+
"connectorType": "sapAc",
86+
"connectionInfo": {
87+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
88+
"url": "dev.test",
89+
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
90+
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
91+
"keyVaultName": "Keyvault",
92+
"secretName": "Test",
93+
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
94+
"resourceGroup": "SAPIAG Group"
95+
}
96+
}
97+
```
98+
99+
100+
### Response
101+
102+
The following example shows the response.
103+
>**Note:** The response object shown here might be shortened for readability.
104+
<!-- {
105+
"blockType": "response",
106+
"truncated": true,
107+
"@odata.type": "microsoft.graph.externalOriginResourceConnector"
108+
}
109+
-->
110+
``` http
111+
HTTP/1.1 201 Created
112+
Content-Type: application/json
113+
114+
{
115+
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
116+
"id": "375db7fb-280f-5d24-1abd-c63e0311c131",
117+
"displayName": "SAP Access Control",
118+
"description": "SAP Access Control connector",
119+
"connectorType": "sapAc",
120+
"connectionInfo": {
121+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
122+
"url": "dev.test",
123+
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
124+
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
125+
"keyVaultName": "Keyvault",
126+
"secretName": "Test",
127+
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
128+
"resourceGroup": "SAPIAG Group"
129+
},
130+
"createdBy": "admin@contoso.com",
131+
"createdDateTime": "2026-02-23T10:15:30Z",
132+
"modifiedBy": "admin@contoso.com",
133+
"modifiedDateTime": "2026-02-23T10:15:30Z"
134+
}
135+
```
136+

‎api-reference/beta/api/entrarecoveryservices-recovery-list-jobs.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ Namespace: microsoft.graph.entraRecoveryServices
1616

1717
Get a list of all recovery [recoveryJobBase](../resources/entrarecoveryservices-recoveryjobbase.md) objects (both preview and recovery jobs) across all snapshots for the tenant.
1818

19+
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
20+
1921
## Permissions
2022

2123
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

‎api-reference/beta/api/entrarecoveryservices-recovery-list-snapshots.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ Namespace: microsoft.graph.entraRecoveryServices
1616

1717
Get a list of available backup [snapshot](../resources/entrarecoveryservices-snapshot.md) objects for the tenant. Snapshots represent points in time to which the tenant can be restored.
1818

19+
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
20+
1921
## Permissions
2022

2123
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

‎api-reference/beta/api/entrarecoveryservices-recoveryjob-get.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ Namespace: microsoft.graph.entraRecoveryServices
1616

1717
Read the properties and relationships of a [recoveryJob](../resources/entrarecoveryservices-recoveryjob.md) object to check the status of the recovery operation.
1818

19+
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
20+
1921
## Permissions
2022

2123
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

‎api-reference/beta/api/entrarecoveryservices-recoveryjobbase-cancel.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ Namespace: microsoft.graph.entraRecoveryServices
1616

1717
Cancel a running [recoveryJobBase](../resources/entrarecoveryservices-recoveryjobbase.md) object (either a preview or recovery job). The job must be in a non-terminal state (`initialized`, `calculating`, `loadingData`, or `running`). After cancellation, the job status changes to `abandoned`.
1818

19+
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
20+
1921
## Permissions
2022

2123
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

0 commit comments

Comments
 (0)