Microsoft: Users user schemas (part 45)

← Users user operations · All schemas

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply	Device protection status entity.
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).antiMalwareVersion	JSON	Optional
$ (allOf 2).antiMalwareVersion (anyOf 1)	string	Alternative	Current anti malware version
$ (allOf 2).antiMalwareVersion (anyOf 2)	null	Alternative
$ (allOf 2).controlledConfigurationEnabled	JSON	Optional
$ (allOf 2).controlledConfigurationEnabled (anyOf 1)	boolean	Alternative	When TRUE indicates the Windows Defender controlled configuration feature is enabled, when FALSE indicates the Windows Defender controlled configuration feature is not enabled. Defaults to setting on client device.
$ (allOf 2).controlledConfigurationEnabled (anyOf 2)	null	Alternative
$ (allOf 2).detectedMalwareState	array	Optional	Device malware list
$ (allOf 2).detectedMalwareState[]	Model	Each item	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity detected Malware State item
$ (allOf 2).deviceState	JSON	Optional	Indicates device's health state. The possible values are: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical. The possible values are: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical.
$ (allOf 2).deviceState (anyOf 1)	string	Alternative	Computer endpoint protection state Known values: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical
$ (allOf 2).deviceState (anyOf 2)	JSON	Alternative
$ (allOf 2).deviceState (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).deviceState (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).engineVersion	JSON	Optional
$ (allOf 2).engineVersion (anyOf 1)	string	Alternative	Current endpoint protection engine's version
$ (allOf 2).engineVersion (anyOf 2)	null	Alternative
$ (allOf 2).fullScanOverdue	JSON	Optional
$ (allOf 2).fullScanOverdue (anyOf 1)	boolean	Alternative	When TRUE indicates full scan is overdue, when FALSE indicates full scan is not overdue. Defaults to setting on client device.
$ (allOf 2).fullScanOverdue (anyOf 2)	null	Alternative
$ (allOf 2).fullScanRequired	JSON	Optional
$ (allOf 2).fullScanRequired (anyOf 1)	boolean	Alternative	When TRUE indicates full scan is required, when FALSE indicates full scan is not required. Defaults to setting on client device.
$ (allOf 2).fullScanRequired (anyOf 2)	null	Alternative
$ (allOf 2).isVirtualMachine	JSON	Optional
$ (allOf 2).isVirtualMachine (anyOf 1)	boolean	Alternative	When TRUE indicates the device is a virtual machine, when FALSE indicates the device is not a virtual machine. Defaults to setting on client device.
$ (allOf 2).isVirtualMachine (anyOf 2)	null	Alternative
$ (allOf 2).lastFullScanDateTime	JSON	Optional
$ (allOf 2).lastFullScanDateTime (anyOf 1)	string	Alternative	Last quick scan datetime Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).lastFullScanDateTime (anyOf 2)	null	Alternative
$ (allOf 2).lastFullScanSignatureVersion	JSON	Optional
$ (allOf 2).lastFullScanSignatureVersion (anyOf 1)	string	Alternative	Last full scan signature version
$ (allOf 2).lastFullScanSignatureVersion (anyOf 2)	null	Alternative
$ (allOf 2).lastQuickScanDateTime	JSON	Optional
$ (allOf 2).lastQuickScanDateTime (anyOf 1)	string	Alternative	Last quick scan datetime Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).lastQuickScanDateTime (anyOf 2)	null	Alternative
$ (allOf 2).lastQuickScanSignatureVersion	JSON	Optional
$ (allOf 2).lastQuickScanSignatureVersion (anyOf 1)	string	Alternative	Last quick scan signature version
$ (allOf 2).lastQuickScanSignatureVersion (anyOf 2)	null	Alternative
$ (allOf 2).lastReportedDateTime	JSON	Optional
$ (allOf 2).lastReportedDateTime (anyOf 1)	string	Alternative	Last device health status reported time Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).lastReportedDateTime (anyOf 2)	null	Alternative
$ (allOf 2).malwareProtectionEnabled	JSON	Optional
$ (allOf 2).malwareProtectionEnabled (anyOf 1)	boolean	Alternative	When TRUE indicates anti malware is enabled when FALSE indicates anti malware is not enabled.
$ (allOf 2).malwareProtectionEnabled (anyOf 2)	null	Alternative
$ (allOf 2).networkInspectionSystemEnabled	JSON	Optional
$ (allOf 2).networkInspectionSystemEnabled (anyOf 1)	boolean	Alternative	When TRUE indicates network inspection system enabled, when FALSE indicates network inspection system is not enabled. Defaults to setting on client device.
$ (allOf 2).networkInspectionSystemEnabled (anyOf 2)	null	Alternative
$ (allOf 2).productStatus	JSON	Optional	Product Status of Windows Defender Antivirus. The possible values are: noStatus, serviceNotRunning, serviceStartedWithoutMalwareProtection, pendingFullScanDueToThreatAction, pendingRebootDueToThreatAction, pendingManualStepsDueToThreatAction, avSignaturesOutOfDate, asSignaturesOutOfDate, noQuickScanHappenedForSpecifiedPeriod, noFullScanHappenedForSpecifiedPeriod, systemInitiatedScanInProgress, systemInitiatedCleanInProgress, samplesPendingSubmission, productRunningInEvaluationMode, productRunningInNonGenuineMode, productExpired, offlineScanRequired, serviceShutdownAsPartOfSystemShutdown, threatRemediationFailedCritically, threatRemediationFailedNonCritically, noStatusFlagsSet, platformOutOfDate, platformUpdateInProgress, platformAboutToBeOutdated, signatureOrPlatformEndOfLifeIsPastOrIsImpending, windowsSModeSignaturesInUseOnNonWin10SInstall. The possible values are: noStatus, serviceNotRunning, serviceStartedWithoutMalwareProtection, pendingFullScanDueToThreatAction, pendingRebootDueToThreatAction, pendingManualStepsDueToThreatAction, avSignaturesOutOfDate, asSignaturesOutOfDate, noQuickScanHappenedForSpecifiedPeriod, noFullScanHappenedForSpecifiedPeriod, systemInitiatedScanInProgress, systemInitiatedCleanInProgress, samplesPendingSubmission, productRunningInEvaluationMode, productRunningInNonGenuineMode, productExpired, offlineScanRequired, serviceShutdownAsPartOfSystemShutdown, threatRemediationFailedCritically, threatRemediationFailedNonCritically, noStatusFlagsSet, platformOutOfDate, platformUpdateInProgress, platformAboutToBeOutdated, signatureOrPlatformEndOfLifeIsPastOrIsImpending, windowsSModeSignaturesInUseOnNonWin10SInstall.
$ (allOf 2).productStatus (anyOf 1)	Model	Alternative	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity product Status Product Status of Windows Defender
$ (allOf 2).productStatus (anyOf 2)	JSON	Alternative
$ (allOf 2).productStatus (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).productStatus (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).quickScanOverdue	JSON	Optional
$ (allOf 2).quickScanOverdue (anyOf 1)	boolean	Alternative	When TRUE indicates quick scan is overdue, when FALSE indicates quick scan is not overdue. Defaults to setting on client device.
$ (allOf 2).quickScanOverdue (anyOf 2)	null	Alternative
$ (allOf 2).realTimeProtectionEnabled	JSON	Optional
$ (allOf 2).realTimeProtectionEnabled (anyOf 1)	boolean	Alternative	When TRUE indicates real time protection is enabled, when FALSE indicates real time protection is not enabled. Defaults to setting on client device.
$ (allOf 2).realTimeProtectionEnabled (anyOf 2)	null	Alternative
$ (allOf 2).rebootRequired	JSON	Optional
$ (allOf 2).rebootRequired (anyOf 1)	boolean	Alternative	When TRUE indicates reboot is required, when FALSE indicates when TRUE indicates reboot is not required. Defaults to setting on client device.
$ (allOf 2).rebootRequired (anyOf 2)	null	Alternative
$ (allOf 2).signatureUpdateOverdue	JSON	Optional
$ (allOf 2).signatureUpdateOverdue (anyOf 1)	boolean	Alternative	When TRUE indicates signature is out of date, when FALSE indicates signature is not out of date. Defaults to setting on client device.
$ (allOf 2).signatureUpdateOverdue (anyOf 2)	null	Alternative
$ (allOf 2).signatureVersion	JSON	Optional
$ (allOf 2).signatureVersion (anyOf 1)	string	Alternative	Current malware definitions version
$ (allOf 2).signatureVersion (anyOf 2)	null	Alternative
$ (allOf 2).tamperProtectionEnabled	JSON	Optional
$ (allOf 2).tamperProtectionEnabled (anyOf 1)	boolean	Alternative	When TRUE indicates the Windows Defender tamper protection feature is enabled, when FALSE indicates the Windows Defender tamper protection feature is not enabled. Defaults to setting on client device.
$ (allOf 2).tamperProtectionEnabled (anyOf 2)	null	Alternative

Referenced models: Get rule — response body — @odata type, id, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity product Status Product Status of Windows Defender, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity detected Malware State item

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity detected Malware State item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply	Malware detection entity.
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).additionalInformationUrl	JSON	Optional
$ (allOf 2).additionalInformationUrl (anyOf 1)	string	Alternative	Information URL to learn more about the malware
$ (allOf 2).additionalInformationUrl (anyOf 2)	null	Alternative
$ (allOf 2).category	JSON	Optional	Category of the malware. The possible values are: invalid, adware, spyware, passwordStealer, trojanDownloader, worm, backdoor, remoteAccessTrojan, trojan, emailFlooder, keylogger, dialer, monitoringSoftware, browserModifier, cookie, browserPlugin, aolExploit, nuker, securityDisabler, jokeProgram, hostileActiveXControl, softwareBundler, stealthNotifier, settingsModifier, toolBar, remoteControlSoftware, trojanFtp, potentialUnwantedSoftware, icqExploit, trojanTelnet, exploit, filesharingProgram, malwareCreationTool, remoteControlSoftware, tool, trojanDenialOfService, trojanDropper, trojanMassMailer, trojanMonitoringSoftware, trojanProxyServer, virus, known, unknown, spp, behavior, vulnerability, policy, enterpriseUnwantedSoftware, ransom, hipsRule.
$ (allOf 2).category (anyOf 1)	Model	Alternative	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity detected Malware State item Malware detection entity category Malware category id
$ (allOf 2).category (anyOf 2)	JSON	Alternative
$ (allOf 2).category (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).category (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).detectionCount	JSON	Optional
$ (allOf 2).detectionCount (anyOf 1)	JSON	Alternative
$ (allOf 2).detectionCount (anyOf 1) (anyOf 1)	number	Alternative	Number of times the malware is detected Format: int32 Maximum: 2147483647 Minimum: -2147483648
$ (allOf 2).detectionCount (anyOf 1) (anyOf 2)	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
$ (allOf 2).detectionCount (anyOf 2)	null	Alternative
$ (allOf 2).displayName	JSON	Optional
$ (allOf 2).displayName (anyOf 1)	string	Alternative	Malware name
$ (allOf 2).displayName (anyOf 2)	null	Alternative
$ (allOf 2).executionState	JSON	Optional	Execution status of the malware like blocked/executing etc. The possible values are: unknown, blocked, allowed, running, notRunning.
$ (allOf 2).executionState (anyOf 1)	string	Alternative	Malware execution status Known values: unknown, blocked, allowed, running, notRunning
$ (allOf 2).executionState (anyOf 2)	JSON	Alternative
$ (allOf 2).executionState (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).executionState (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).initialDetectionDateTime	JSON	Optional
$ (allOf 2).initialDetectionDateTime (anyOf 1)	string	Alternative	Initial detection datetime of the malware Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).initialDetectionDateTime (anyOf 2)	null	Alternative
$ (allOf 2).lastStateChangeDateTime	JSON	Optional
$ (allOf 2).lastStateChangeDateTime (anyOf 1)	string	Alternative	The last time this particular threat was changed Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).lastStateChangeDateTime (anyOf 2)	null	Alternative
$ (allOf 2).severity	JSON	Optional	Severity of the malware. The possible values are: unknown, low, moderate, high, severe.
$ (allOf 2).severity (anyOf 1)	string	Alternative	Malware severity Known values: unknown, low, moderate, high, severe
$ (allOf 2).severity (anyOf 2)	JSON	Alternative
$ (allOf 2).severity (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).severity (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).state	JSON	Optional	Current status of the malware like cleaned/quarantined/allowed etc. The possible values are: unknown, detected, cleaned, quarantined, removed, allowed, blocked, cleanFailed, quarantineFailed, removeFailed, allowFailed, abandoned, blockFailed.
$ (allOf 2).state (anyOf 1)	string	Alternative	Malware current status Known values: unknown, detected, cleaned, quarantined, removed, allowed, blocked, cleanFailed, quarantineFailed, removeFailed, allowFailed, abandoned, blockFailed
$ (allOf 2).state (anyOf 2)	JSON	Alternative
$ (allOf 2).state (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).state (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).threatState	JSON	Optional	Current status of the malware like cleaned/quarantined/allowed etc. The possible values are: active, actionFailed, manualStepsRequired, fullScanRequired, rebootRequired, remediatedWithNonCriticalFailures, quarantined, removed, cleaned, allowed, noStatusCleared.
$ (allOf 2).threatState (anyOf 1)	string	Alternative	Malware threat status Known values: active, actionFailed, manualStepsRequired, fullScanRequired, rebootRequired, remediatedWithNonCriticalFailures, quarantined, removed, cleaned, allowed, noStatusCleared
$ (allOf 2).threatState (anyOf 2)	JSON	Alternative
$ (allOf 2).threatState (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).threatState (anyOf 2) (anyOf 2)	null	Alternative

Referenced models: Get rule — response body — @odata type, id, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity detected Malware State item Malware detection entity category Malware category id

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity detected Malware State item Malware detection entity category Malware category id

Field	Type	Presence	Description and constraints
$	string	Root	Malware category id Known values: invalid, adware, spyware, passwordStealer, trojanDownloader, worm, backdoor, remoteAccessTrojan, trojan, emailFlooder, keylogger, dialer, monitoringSoftware, browserModifier, cookie, browserPlugin, aolExploit, nuker, securityDisabler, jokeProgram, hostileActiveXControl, softwareBundler, stealthNotifier, settingsModifier, toolBar, remoteControlSoftware, trojanFtp, potentialUnwantedSoftware, icqExploit, trojanTelnet, exploit, filesharingProgram, malwareCreationTool, remote_Control_Software, tool, trojanDenialOfService, trojanDropper, trojanMassMailer, trojanMonitoringSoftware, trojanProxyServer, virus, known, unknown, spp, behavior, vulnerability, policy, enterpriseUnwantedSoftware, ransom, hipsRule

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / managedDevices / item / exchangeAccessState: none, unknown, allowed, blocked, quarantined, managed Device Owner Type: unknown, company, personal, unknown Future Value windows Protection State Device protection status entity Device protection status entity product Status Product Status of Windows Defender

Field	Type	Presence	Description and constraints
$	string	Root	Product Status of Windows Defender Known values: noStatus, serviceNotRunning, serviceStartedWithoutMalwareProtection, pendingFullScanDueToThreatAction, pendingRebootDueToThreatAction, pendingManualStepsDueToThreatAction, avSignaturesOutOfDate, asSignaturesOutOfDate, noQuickScanHappenedForSpecifiedPeriod, noFullScanHappenedForSpecifiedPeriod, systemInitiatedScanInProgress, systemInitiatedCleanInProgress, samplesPendingSubmission, productRunningInEvaluationMode, productRunningInNonGenuineMode, productExpired, offlineScanRequired, serviceShutdownAsPartOfSystemShutdown, threatRemediationFailedCritically, threatRemediationFailedNonCritically, noStatusFlagsSet, platformOutOfDate, platformUpdateInProgress, platformAboutToBeOutdated, signatureOrPlatformEndOfLifeIsPastOrIsImpending, windowsSModeSignaturesInUseOnNonWin10SInstall

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / presence / @odata.type, activity, availability, id, outOfOfficeSettings, sequenceNumber, statusMessage, workLocation / @odata.type, activity, availability, outOfOfficeSettings, sequenceNumber, statusMessage, workLocation / workLocation / source: none, manual, scheduled, automatic, unknown Future Value, work Location Type: unspecified, office, remote, time Off, unknown Future Value

Field	Type	Presence	Description and constraints
$	object	Root
@odata.type	string	Optional
placeId	JSON	Optional
placeId (anyOf 1)	string	Alternative	Identifier of the place, if applicable.
placeId (anyOf 2)	null	Alternative
source	string	Optional	Known values: none, manual, scheduled, automatic, unknownFutureValue
workLocationType	string	Optional	Known values: unspecified, office, remote, timeOff, unknownFutureValue

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / print / @odata.type, recentPrinterShares / recentPrinterShares / item / @odata.type, allowAllUsers, allowedGroups, allowedUsers, createdDateTime, printer, viewPoint / printer / @odata.type, capabilities, connectors, defaults, displayName, hasPhysicalDevice, id, isAcceptingJobs, isShared, jobs, lastSeenDateTime, location, manufacturer, model, registeredDateTime, shares, status, taskTriggers / @odata.type, connectors, hasPhysicalDevice, isShared, lastSeenDateTime, registeredDateTime, shares, taskTriggers / taskTriggers / item / event: job Started, unknown Future Value definition

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).createdBy	Model	Optional	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / print / @odata.type, recentPrinterShares / recentPrinterShares / item / @odata.type, allowAllUsers, allowedGroups, allowedUsers, createdDateTime, printer, viewPoint / printer / @odata.type, capabilities, connectors, defaults, displayName, hasPhysicalDevice, id, isAcceptingJobs, isShared, jobs, lastSeenDateTime, location, manufacturer, model, registeredDateTime, shares, status, taskTriggers / @odata.type, connectors, hasPhysicalDevice, isShared, lastSeenDateTime, registeredDateTime, shares, taskTriggers / taskTriggers / item / event: job Started, unknown Future Value definition @odata type, created By, display Name, tasks created By
$ (allOf 2).displayName	string	Optional	The name of the printTaskDefinition.
$ (allOf 2).tasks	array	Optional	A list of tasks that have been created based on this definition. The list includes currently running tasks and recently completed tasks. Read-only.
$ (allOf 2).tasks[]	Model	Each item	Expand Create User — response body — @odata type, about Me, account Enabled, activities, adhoc Calls, age Group, agreement Acceptances, app Role Assignments, assigned Licenses, assigned Plans, authentication, authorization Info, birthday, business Phones, calendar, calendar Groups, calendar View, calendars, chats, city, cloud Clipboard, cloud P Cs, company Name, consent Provided For Minor, contact Folders, contacts, country, created Date Time, created Objects, creation Type, custom Security Attributes, data Security And Governance, department, device Enrollment Limit, device Management Troubleshooting Events, direct Reports, display Name, drive, drives, employee Experience, employee Hire Date, employee Id, employee Leave Date Time, employee Org Data, employee Type, events, extensions, external User State, external User State Change Date Time, fax Number, followed Sites, given Name, hire Date, identities, identity Parent Id, im Addresses, inference Classification, insights, interests, is Management Restricted, is Resource Account, job Title, joined Teams, last Password Change Date Time, legal Age Group Classification, license Assignment States, license Details, mail, mail Folders, mail Nickname, mailbox Settings, managed App Registrations, managed Devices, manager, member Of, messages, mobile Phone, my Site, notes, oauth2 Permission Grants, office Location, on Premises Distinguished Name, on Premises Domain Name, on Premises Extension Attributes, on Premises Immutable Id, on Premises Last Sync Date Time, on Premises Provisioning Errors, on Premises Sam Account Name, on Premises Security Identifier, on Premises Sync Behavior, on Premises Sync Enabled, on Premises User Principal Name, onenote, online Meetings, other Mails, outlook, owned Devices, owned Objects, password Policies, password Profile, past Projects, people, permission Grants, photo, photos, planner, postal Code, preferred Data Location, preferred Language, preferred Name, presence, print, provisioned Plans, proxy Addresses, registered Devices, responsibilities, schools, scoped Role Member Of, security Identifier, service Provisioning Errors, settings, show In Address List, sign In Activity, sign In Sessions Valid From Date Time, skills, solutions, sponsor Of, sponsors, state, street Address, surname, teamwork, todo, transitive Member Of, usage Location, user Principal Name, user Type print @odata type, recent Printer Shares recent Printer Shares item @odata type, capabilities, defaults, display Name, id, is Accepting Jobs, jobs, location, manufacturer, model, status @odata type, capabilities, defaults, display Name, is Accepting Jobs, jobs, location, manufacturer, model, status jobs item @odata type, acknowledged Date Time, configuration, created By, created Date Time, documents, error Code, is Fetchable, redirected From, redirected To, status, tasks tasks item

Referenced models: Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / print / @odata.type, recentPrinterShares / recentPrinterShares / item / @odata.type, allowAllUsers, allowedGroups, allowedUsers, createdDateTime, printer, viewPoint / printer / @odata.type, capabilities, connectors, defaults, displayName, hasPhysicalDevice, id, isAcceptingJobs, isShared, jobs, lastSeenDateTime, location, manufacturer, model, registeredDateTime, shares, status, taskTriggers / @odata.type, connectors, hasPhysicalDevice, isShared, lastSeenDateTime, registeredDateTime, shares, taskTriggers / taskTriggers / item / event: job Started, unknown Future Value definition @odata type, created By, display Name, tasks created By, Get rule — response body — @odata type, id, Create User — response body — @odata type, about Me, account Enabled, activities, adhoc Calls, age Group, agreement Acceptances, app Role Assignments, assigned Licenses, assigned Plans, authentication, authorization Info, birthday, business Phones, calendar, calendar Groups, calendar View, calendars, chats, city, cloud Clipboard, cloud P Cs, company Name, consent Provided For Minor, contact Folders, contacts, country, created Date Time, created Objects, creation Type, custom Security Attributes, data Security And Governance, department, device Enrollment Limit, device Management Troubleshooting Events, direct Reports, display Name, drive, drives, employee Experience, employee Hire Date, employee Id, employee Leave Date Time, employee Org Data, employee Type, events, extensions, external User State, external User State Change Date Time, fax Number, followed Sites, given Name, hire Date, identities, identity Parent Id, im Addresses, inference Classification, insights, interests, is Management Restricted, is Resource Account, job Title, joined Teams, last Password Change Date Time, legal Age Group Classification, license Assignment States, license Details, mail, mail Folders, mail Nickname, mailbox Settings, managed App Registrations, managed Devices, manager, member Of, messages, mobile Phone, my Site, notes, oauth2 Permission Grants, office Location, on Premises Distinguished Name, on Premises Domain Name, on Premises Extension Attributes, on Premises Immutable Id, on Premises Last Sync Date Time, on Premises Provisioning Errors, on Premises Sam Account Name, on Premises Security Identifier, on Premises Sync Behavior, on Premises Sync Enabled, on Premises User Principal Name, onenote, online Meetings, other Mails, outlook, owned Devices, owned Objects, password Policies, password Profile, past Projects, people, permission Grants, photo, photos, planner, postal Code, preferred Data Location, preferred Language, preferred Name, presence, print, provisioned Plans, proxy Addresses, registered Devices, responsibilities, schools, scoped Role Member Of, security Identifier, service Provisioning Errors, settings, show In Address List, sign In Activity, sign In Sessions Valid From Date Time, skills, solutions, sponsor Of, sponsors, state, street Address, surname, teamwork, todo, transitive Member Of, usage Location, user Principal Name, user Type print @odata type, recent Printer Shares recent Printer Shares item @odata type, capabilities, defaults, display Name, id, is Accepting Jobs, jobs, location, manufacturer, model, status @odata type, capabilities, defaults, display Name, is Accepting Jobs, jobs, location, manufacturer, model, status jobs item @odata type, acknowledged Date Time, configuration, created By, created Date Time, documents, error Code, is Fetchable, redirected From, redirected To, status, tasks tasks item

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / print / @odata.type, recentPrinterShares / recentPrinterShares / item / @odata.type, allowAllUsers, allowedGroups, allowedUsers, createdDateTime, printer, viewPoint / printer / @odata.type, capabilities, connectors, defaults, displayName, hasPhysicalDevice, id, isAcceptingJobs, isShared, jobs, lastSeenDateTime, location, manufacturer, model, registeredDateTime, shares, status, taskTriggers / @odata.type, connectors, hasPhysicalDevice, isShared, lastSeenDateTime, registeredDateTime, shares, taskTriggers / taskTriggers / item / event: job Started, unknown Future Value definition @odata type, created By, display Name, tasks created By

Field	Type	Presence	Description and constraints
$	object	Root
@odata.type	string	Optional
appId	JSON	Optional
appId (anyOf 1)	string	Alternative	Refers to the unique ID representing application in Microsoft Entra ID.
appId (anyOf 2)	null	Alternative
displayName	JSON	Optional
displayName (anyOf 1)	string	Alternative	Refers to the application name displayed in the Microsoft Entra admin center.
displayName (anyOf 2)	null	Alternative
servicePrincipalId	JSON	Optional
servicePrincipalId (anyOf 1)	string	Alternative	Refers to the unique ID for the service principal in Microsoft Entra ID.
servicePrincipalId (anyOf 2)	null	Alternative
servicePrincipalName	JSON	Optional
servicePrincipalName (anyOf 1)	string	Alternative	Refers to the Service Principal Name is the Application name in the tenant.
servicePrincipalName (anyOf 2)	null	Alternative

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / windows / item / settingType: roaming, backup, unknown Future Value instances item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).createdDateTime	string	Optional	Set by the server. Represents the dateTime in UTC when the object was created on the server. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).expirationDateTime	string	Optional	Set by the server. The object expires at the specified dateTime in UTC, making it unavailable after that time. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).lastModifiedDateTime	JSON	Optional
$ (allOf 2).lastModifiedDateTime (anyOf 1)	string	Alternative	Set by the server if not provided in the request from the Windows client device. Refers to the user's Windows device that modified the object at the specified dateTime in UTC. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).lastModifiedDateTime (anyOf 2)	null	Alternative
$ (allOf 2).payload	string	Optional	Base64-encoded JSON setting value.

Referenced models: Get rule — response body — @odata type, id

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).maxSharedWorkLocationDetails	string	Optional	Known values: unknown, none, approximate, specific, unknownFutureValue
$ (allOf 2).occurrences	array	Optional	Collection of work plan occurrences.
$ (allOf 2).occurrences[]	Model	Each item	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value occurrences item
$ (allOf 2).recurrences	array	Optional	Collection of recurring work plans defined by the user.
$ (allOf 2).recurrences[]	Model	Each item	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value recurrences item

Referenced models: Get rule — response body — @odata type, id, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value occurrences item, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value recurrences item

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value occurrences item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).end	Model	Optional	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).placeId	JSON	Optional
$ (allOf 2).placeId (anyOf 1)	string	Alternative	Identifier of a place from the Microsoft Graph Places Directory API. Only applicable when workLocationType is set to office.
$ (allOf 2).placeId (anyOf 2)	null	Alternative
$ (allOf 2).recurrenceId	JSON	Optional
$ (allOf 2).recurrenceId (anyOf 1)	string	Alternative	The identifier of the parent recurrence pattern that generated this occurrence. The value is null for time-off occurrences because they don't have a parent recurrence.
$ (allOf 2).recurrenceId (anyOf 2)	null	Alternative
$ (allOf 2).start	Model	Optional	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).timeOffDetails	JSON	Optional	The details about the time off. Only applicable when workLocationType is set to timeOff.
$ (allOf 2).timeOffDetails (anyOf 1)	Model	Alternative	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value occurrences item work Location Type: unspecified, office, remote, time Off, unknown Future Value time Off Details @odata type, is All Day, subject
$ (allOf 2).timeOffDetails (anyOf 2)	JSON	Alternative
$ (allOf 2).timeOffDetails (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).timeOffDetails (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).workLocationType	string	Optional	Known values: unspecified, office, remote, timeOff, unknownFutureValue

Referenced models: Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time, Get rule — response body — @odata type, id, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value occurrences item work Location Type: unspecified, office, remote, time Off, unknown Future Value time Off Details @odata type, is All Day, subject

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value occurrences item work Location Type: unspecified, office, remote, time Off, unknown Future Value time Off Details @odata type, is All Day, subject

Field	Type	Presence	Description and constraints
$	object	Root
@odata.type	string	Optional
isAllDay	boolean	Optional	Indicates whether the time-off entry spans the entire day.
subject	JSON	Optional
subject (anyOf 1)	string	Alternative	The subject or reason for the time-off entry.
subject (anyOf 2)	null	Alternative

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / settings / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, id, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / @odata.type, contributionToContentDiscoveryAsOrganizationDisabled, contributionToContentDiscoveryDisabled, exchange, itemInsights, shiftPreferences, storage, windows, workHoursAndLocations / workHoursAndLocations / maxSharedWorkLocationDetails: unknown, none, approximate, specific, unknown Future Value max Shared Work Location Details: unknown, none, approximate, specific, unknown Future Value recurrences item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).end	Model	Optional	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).placeId	JSON	Optional
$ (allOf 2).placeId (anyOf 1)	string	Alternative	Identifier of a place from the Microsoft Graph Places Directory API. Only applicable when workLocationType is set to office.
$ (allOf 2).placeId (anyOf 2)	null	Alternative
$ (allOf 2).recurrence	Model	Optional	Expand Get event — response body — @odata type, allow New Time Proposals, attachments, attendees, body, body Preview, calendar, cancelled Occurrences, end, exception Occurrences, extensions, has Attachments, hide Attendees, i Cal U Id, importance, instances, is All Day, is Cancelled, is Draft, is Online Meeting, is Organizer, is Reminder On, location, locations, multi Value Extended Properties, online Meeting, online Meeting Provider, online Meeting Url, organizer, original End Time Zone, original Start, original Start Time Zone, recurrence, reminder Minutes Before Start, response Requested, response Status, sensitivity, series Master Id, show As, single Value Extended Properties, start, subject, transaction Id, type, web Link recurrence @odata type, pattern, range
$ (allOf 2).start	Model	Optional	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).workLocationType	string	Optional	Known values: unspecified, office, remote, timeOff, unknownFutureValue

Referenced models: Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time, Get rule — response body — @odata type, id, Get event — response body — @odata type, allow New Time Proposals, attachments, attendees, body, body Preview, calendar, cancelled Occurrences, end, exception Occurrences, extensions, has Attachments, hide Attendees, i Cal U Id, importance, instances, is All Day, is Cancelled, is Draft, is Online Meeting, is Organizer, is Reminder On, location, locations, multi Value Extended Properties, online Meeting, online Meeting Provider, online Meeting Url, organizer, original End Time Zone, original Start, original Start Time Zone, recurrence, reminder Minutes Before Start, response Requested, response Status, sensitivity, series Master Id, show As, single Value Extended Properties, start, subject, transaction Id, type, web Link recurrence @odata type, pattern, range

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).attachmentSessions	array	Optional
$ (allOf 2).attachmentSessions[]	Model	Each item	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred attachment Sessions item
$ (allOf 2).attachments	array	Optional	A collection of file attachments for the task.
$ (allOf 2).attachments[]	Model	Each item	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred attachments item
$ (allOf 2).body	JSON	Optional	The task body that typically contains information about the task.
$ (allOf 2).body (anyOf 1)	Model	Alternative	Expand Get message — response body — @odata type, attachments, bcc Recipients, body, body Preview, cc Recipients, conversation Id, conversation Index, extensions, flag, from, has Attachments, importance, inference Classification, internet Message Headers, internet Message Id, is Delivery Receipt Requested, is Draft, is Read, is Read Receipt Requested, multi Value Extended Properties, parent Folder Id, received Date Time, reply To, sender, sent Date Time, single Value Extended Properties, subject, to Recipients, unique Body, web Link body @odata type, content, content Type
$ (allOf 2).body (anyOf 2)	JSON	Alternative
$ (allOf 2).body (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).body (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).bodyLastModifiedDateTime	string	Optional	The date and time when the task body was last modified. By default, it is in UTC. You can provide a custom time zone in the request header. The property value uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2020 would look like this: '2020-01-01T00:00:00Z'. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).categories	array	Optional	The categories associated with the task. Each category corresponds to the displayName property of an outlookCategory that the user has defined.
$ (allOf 2).categories[]	JSON	Each item
$ (allOf 2).categories[] (anyOf 1)	string	Alternative
$ (allOf 2).categories[] (anyOf 2)	null	Alternative
$ (allOf 2).checklistItems	array	Optional	A collection of checklistItems linked to a task.
$ (allOf 2).checklistItems[]	Model	Each item	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred checklist Items item
$ (allOf 2).completedDateTime	JSON	Optional	The date and time in the specified time zone that the task was finished.
$ (allOf 2).completedDateTime (anyOf 1)	Model	Alternative	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).completedDateTime (anyOf 2)	JSON	Alternative
$ (allOf 2).completedDateTime (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).completedDateTime (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).createdDateTime	string	Optional	The date and time when the task was created. By default, it is in UTC. You can provide a custom time zone in the request header. The property value uses ISO 8601 format. For example, midnight UTC on Jan 1, 2020 would look like this: '2020-01-01T00:00:00Z'. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).dueDateTime	JSON	Optional	The date and time in the specified time zone that the task is to be finished.
$ (allOf 2).dueDateTime (anyOf 1)	Model	Alternative	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).dueDateTime (anyOf 2)	JSON	Alternative
$ (allOf 2).dueDateTime (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).dueDateTime (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).extensions	array	Optional	The collection of open extensions defined for the task. Nullable.
$ (allOf 2).extensions[]	Model	Each item	Expand Create open extension — response body
$ (allOf 2).hasAttachments	JSON	Optional
$ (allOf 2).hasAttachments (anyOf 1)	boolean	Alternative	Indicates whether the task has attachments.
$ (allOf 2).hasAttachments (anyOf 2)	null	Alternative
$ (allOf 2).importance	string	Optional	Known values: low, normal, high
$ (allOf 2).isReminderOn	boolean	Optional	Set to true if an alert is set to remind the user of the task.
$ (allOf 2).lastModifiedDateTime	string	Optional	The date and time when the task was last modified. By default, it is in UTC. You can provide a custom time zone in the request header. The property value uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2020 would look like this: '2020-01-01T00:00:00Z'. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).linkedResources	array	Optional	A collection of resources linked to the task.
$ (allOf 2).linkedResources[]	Model	Each item	Expand Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred linked Resources item
$ (allOf 2).recurrence	JSON	Optional	The recurrence pattern for the task.
$ (allOf 2).recurrence (anyOf 1)	Model	Alternative	Expand Get event — response body — @odata type, allow New Time Proposals, attachments, attendees, body, body Preview, calendar, cancelled Occurrences, end, exception Occurrences, extensions, has Attachments, hide Attendees, i Cal U Id, importance, instances, is All Day, is Cancelled, is Draft, is Online Meeting, is Organizer, is Reminder On, location, locations, multi Value Extended Properties, online Meeting, online Meeting Provider, online Meeting Url, organizer, original End Time Zone, original Start, original Start Time Zone, recurrence, reminder Minutes Before Start, response Requested, response Status, sensitivity, series Master Id, show As, single Value Extended Properties, start, subject, transaction Id, type, web Link recurrence @odata type, pattern, range
$ (allOf 2).recurrence (anyOf 2)	JSON	Alternative
$ (allOf 2).recurrence (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).recurrence (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).reminderDateTime	JSON	Optional	The date and time in the specified time zone for a reminder alert of the task to occur.
$ (allOf 2).reminderDateTime (anyOf 1)	Model	Alternative	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).reminderDateTime (anyOf 2)	JSON	Alternative
$ (allOf 2).reminderDateTime (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).reminderDateTime (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).startDateTime	JSON	Optional	The date and time in the specified time zone at which the task is scheduled to start.
$ (allOf 2).startDateTime (anyOf 1)	Model	Alternative	Expand Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time
$ (allOf 2).startDateTime (anyOf 2)	JSON	Alternative
$ (allOf 2).startDateTime (anyOf 2) (anyOf 1)	object	Alternative
$ (allOf 2).startDateTime (anyOf 2) (anyOf 2)	null	Alternative
$ (allOf 2).status	string	Optional	Known values: notStarted, inProgress, completed, waitingOnOthers, deferred
$ (allOf 2).title	JSON	Optional
$ (allOf 2).title (anyOf 1)	string	Alternative	A brief description of the task.
$ (allOf 2).title (anyOf 2)	null	Alternative

Referenced models: Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred attachments item, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred attachment Sessions item, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred checklist Items item, Invoke action snooze Reminder — me Event events Snooze Reminder — request body — body New Reminder Time, Get rule — response body — @odata type, id, Create open extension — response body, Get message — response body — @odata type, attachments, bcc Recipients, body, body Preview, cc Recipients, conversation Id, conversation Index, extensions, flag, from, has Attachments, importance, inference Classification, internet Message Headers, internet Message Id, is Delivery Receipt Requested, is Draft, is Read, is Read Receipt Requested, multi Value Extended Properties, parent Folder Id, received Date Time, reply To, sender, sent Date Time, single Value Extended Properties, subject, to Recipients, unique Body, web Link body @odata type, content, content Type, Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred linked Resources item, Get event — response body — @odata type, allow New Time Proposals, attachments, attendees, body, body Preview, calendar, cancelled Occurrences, end, exception Occurrences, extensions, has Attachments, hide Attendees, i Cal U Id, importance, instances, is All Day, is Cancelled, is Draft, is Online Meeting, is Organizer, is Reminder On, location, locations, multi Value Extended Properties, online Meeting, online Meeting Provider, online Meeting Url, organizer, original End Time Zone, original Start, original Start Time Zone, recurrence, reminder Minutes Before Start, response Requested, response Status, sensitivity, series Master Id, show As, single Value Extended Properties, start, subject, transaction Id, type, web Link recurrence @odata type, pattern, range

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred attachment Sessions item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).content	JSON	Optional
$ (allOf 2).content (anyOf 1)	string	Alternative	The content streams that are uploaded. Format: base64url
$ (allOf 2).content (anyOf 2)	null	Alternative
$ (allOf 2).expirationDateTime	JSON	Optional
$ (allOf 2).expirationDateTime (anyOf 1)	string	Alternative	The date and time in UTC when the upload session will expire. The complete file must be uploaded before this expiration time is reached. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).expirationDateTime (anyOf 2)	null	Alternative
$ (allOf 2).nextExpectedRanges	array	Optional	Indicates a single value {start} that represents the location in the file where the next upload should begin.
$ (allOf 2).nextExpectedRanges[]	JSON	Each item
$ (allOf 2).nextExpectedRanges[] (anyOf 1)	string	Alternative
$ (allOf 2).nextExpectedRanges[] (anyOf 2)	null	Alternative

Referenced models: Get rule — response body — @odata type, id

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred attachments item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply	discriminator: {"mapping": {}, "propertyName": "@odata.type"}
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).contentType	JSON	Optional
$ (allOf 2).contentType (anyOf 1)	string	Alternative	The MIME type.
$ (allOf 2).contentType (anyOf 2)	null	Alternative
$ (allOf 2).lastModifiedDateTime	JSON	Optional
$ (allOf 2).lastModifiedDateTime (anyOf 1)	string	Alternative	The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).lastModifiedDateTime (anyOf 2)	null	Alternative
$ (allOf 2).name	JSON	Optional
$ (allOf 2).name (anyOf 1)	string	Alternative	The display name of the attachment. This doesn't need to be the actual file name.
$ (allOf 2).name (anyOf 2)	null	Alternative
$ (allOf 2).size	JSON	Optional
$ (allOf 2).size (anyOf 1)	number	Alternative	The length of the attachment in bytes. Format: int32 Maximum: 2147483647 Minimum: -2147483648
$ (allOf 2).size (anyOf 2)	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$

Referenced models: Get rule — response body — @odata type, id

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred checklist Items item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).checkedDateTime	JSON	Optional
$ (allOf 2).checkedDateTime (anyOf 1)	string	Alternative	The date and time when the checklistItem was finished. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).checkedDateTime (anyOf 2)	null	Alternative
$ (allOf 2).createdDateTime	string	Optional	The date and time when the checklistItem was created. Format: date-time Pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
$ (allOf 2).displayName	JSON	Optional
$ (allOf 2).displayName (anyOf 1)	string	Alternative	Indicates the title of the checklistItem.
$ (allOf 2).displayName (anyOf 2)	null	Alternative
$ (allOf 2).isChecked	JSON	Optional
$ (allOf 2).isChecked (anyOf 1)	boolean	Alternative	State that indicates whether the item is checked off or not.
$ (allOf 2).isChecked (anyOf 2)	null	Alternative

Referenced models: Get rule — response body — @odata type, id

Create User — response body — @odata.type, aboutMe, accountEnabled, activities, adhocCalls, ageGroup, agreementAcceptances, appRoleAssignments, assignedLicenses, assignedPlans, authentication, authorizationInfo, birthday, businessPhones, calendar, calendarGroups, calendarView, calendars, chats, city, cloudClipboard, cloudPCs, companyName, consentProvidedForMinor, contactFolders, contacts, country, createdDateTime, createdObjects, creationType, customSecurityAttributes, dataSecurityAndGovernance, department, deviceEnrollmentLimit, deviceManagementTroubleshootingEvents, directReports, displayName, drive, drives, employeeExperience, employeeHireDate, employeeId, employeeLeaveDateTime, employeeOrgData, employeeType, events, extensions, externalUserState, externalUserStateChangeDateTime, faxNumber, followedSites, givenName, hireDate, identities, identityParentId, imAddresses, inferenceClassification, insights, interests, isManagementRestricted, isResourceAccount, jobTitle, joinedTeams, lastPasswordChangeDateTime, legalAgeGroupClassification, licenseAssignmentStates, licenseDetails, mail, mailFolders, mailNickname, mailboxSettings, managedAppRegistrations, managedDevices, manager, memberOf, messages, mobilePhone, mySite, notes, oauth2PermissionGrants, officeLocation, onPremisesDistinguishedName, onPremisesDomainName, onPremisesExtensionAttributes, onPremisesImmutableId, onPremisesLastSyncDateTime, onPremisesProvisioningErrors, onPremisesSamAccountName, onPremisesSecurityIdentifier, onPremisesSyncBehavior, onPremisesSyncEnabled, onPremisesUserPrincipalName, onenote, onlineMeetings, otherMails, outlook, ownedDevices, ownedObjects, passwordPolicies, passwordProfile, pastProjects, people, permissionGrants, photo, photos, planner, postalCode, preferredDataLocation, preferredLanguage, preferredName, presence, print, provisionedPlans, proxyAddresses, registeredDevices, responsibilities, schools, scopedRoleMemberOf, securityIdentifier, serviceProvisioningErrors, settings, showInAddressList, signInActivity, signInSessionsValidFromDateTime, skills, solutions, sponsorOf, sponsors, state, streetAddress, surname, teamwork, todo, transitiveMemberOf, usageLocation, userPrincipalName, userType / todo / @odata.type, id, lists / @odata.type, lists / lists / item / wellknownListName: none, default List, flagged Emails, unknown Future Value tasks item importance: low, normal, high, status: not Started, in Progress, completed, waiting On Others, deferred linked Resources item

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (allOf 1)	Model	All variants apply	Expand Get rule — response body — @odata type, id
$ (allOf 2)	object	All variants apply
$ (allOf 2).@odata.type	string	Optional
$ (allOf 2).applicationName	JSON	Optional
$ (allOf 2).applicationName (anyOf 1)	string	Alternative	The app name of the source that sends the linkedResource.
$ (allOf 2).applicationName (anyOf 2)	null	Alternative
$ (allOf 2).displayName	JSON	Optional
$ (allOf 2).displayName (anyOf 1)	string	Alternative	The title of the linkedResource.
$ (allOf 2).displayName (anyOf 2)	null	Alternative
$ (allOf 2).externalId	JSON	Optional
$ (allOf 2).externalId (anyOf 1)	string	Alternative	ID of the object that is associated with this task on the third-party/partner system.
$ (allOf 2).externalId (anyOf 2)	null	Alternative
$ (allOf 2).webUrl	JSON	Optional
$ (allOf 2).webUrl (anyOf 1)	string	Alternative	Deep link to the linkedResource.
$ (allOf 2).webUrl (anyOf 2)	null	Alternative

Referenced models: Get rule — response body — @odata type, id

Get the number of the resource — users User get Count Ee47 — response body

Field	Type	Presence	Description and constraints
$	JSON	Root
$ (anyOf 1)	integer	Alternative	Format: int32
$ (anyOf 2)	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$

List users — response body

Field	Type	Presence	Description and constraints
$	object	Root
$ (allOf 1)	Model	All variants apply	Expand List rules — response body — @odata count, @odata next Link
$ (allOf 2)	object	All variants apply
$ (allOf 2).value	array	Optional
$ (allOf 2).value[]	Model	Each item	Expand Create User — response body

Referenced models: List rules — response body — @odata count, @odata next Link, Create User — response body