New and changed Microsoft Graph APIs per month: resources, properties, relationships and permissions, and what is deprecated or removed. For v1.0 and beta, filterable by area.
Added delegated permission TeamworkCustomEmoji.Read to the List customEmojis API.
Added delegated permission TeamworkCustomEmoji.Create to the Create customEmoji API.
Added application permission TeamworkCustomEmoji.Read.All to the List customEmojis API.
Added application permission TeamworkCustomEmoji.Create.All to the Create customEmoji API.
24 Jul 2026
Added the unifiedRoot resource type to group the unified (vNext) access review collections under the… (+6)
Added the unifiedRoot resource type to group the unified (vNext) access review collections under the accessReviews/unified path segment.
Added the unified relationship to the accessReviewSet resource as the entry point for the unified (vNext) access reviews API surface, routed through the dedicated accessReviews/unified path segment.
Added the decisions relationship to the unifiedRoot resource to list the accessReviewInstanceDecisionItem objects across the unified (vNext) access reviews, routed through the accessReviews/unified/decisions path segment.
Added the definitions relationship to the unifiedRoot resource to list the accessReviewScheduleDefinition objects across the unified (vNext) access reviews, routed through the accessReviews/unified/definitions path segment.
Added the instances relationship to the unifiedRoot resource to list the accessReviewInstance objects across the unified (vNext) access reviews, routed through the accessReviews/unified/instances path segment.
24 Jul 2026
Added the accessReviewStage: acceptRecommendations method to accept the recommendations on all decision… (+2)
Added the servicePlans relationship to the virtualEndpoint resource.
15 Jul 2026
Added the sponsorOf relationship to the user resource (+1)
Added the sponsorOf relationship to the user resource.
Added the List sponsorOf method to get the directory objects that a user sponsors.
15 Jul 2026
Updated the getSharePointApiUsage method to support the optional reportType parameter, which selects… (+1)
Updated the getSharePointApiUsage method to support the optional reportType parameter, which selects between the egressReport and throttlingReport usage reports.
Added the throttledRequests property to the sharePointApiUsageDataPoint resource. This property is returned in the throttlingReport.
15 Jul 2026
Added the sponsorOf relationship to the user resource (+1)
Added the sponsorOf relationship to the user resource.
Added the List sponsorOf method to get the directory objects that a user sponsors.
Updated the placeId property on the room resource to be inherited from the place base resource.
Updated the placeId property on the workspace resource to be inherited from the place base resource.
8 Jul 2026
Updated the assignedLabels property on the group resource to support assigning sensitivity labels to cloud… (+2)
Updated the assignedLabels property on the group resource to support assigning sensitivity labels to cloud security groups in addition to Microsoft 365 groups. For cloud security groups, this property is immutable once set. Requires a Microsoft Entra ID P1 license.
Added the Group.Security and Group.Security.Policies setting templates to the groupSettingTemplate resource. Use these templates to configure tenant-wide or per-object settings for cloud security groups, including enabling Microsoft Information Protection (MIP) sensitivity labels (EnableMIPLabels) and controlling guest access (AllowToAddGuests). Requires a Microsoft Entra ID P1 license.
Added the *Group.ManageProtection.All* delegated permission as the least privilege permission for updating the assignedLabels property on the group resource.
8 Jul 2026
Added the vapidPublicKey property to the subscription resource. Specifies the application server's VAPID… (+2)
Added the vapidPublicKey property to the subscription resource. Specifies the application server's VAPID public key (RFC 8292) used to bind a Web Push subscription to a server identity.
Added the webPushEncryptionP256dhPublicKey property to the subscription resource. Specifies the subscriber's ECDH public key used to derive the per-message content encryption key for RFC 8291 Web Push payload encryption.
Added the write-only webPushEncryptionSecret property to the subscription resource. Specifies the subscriber's auth secret used as the HMAC-SHA-256 salt for HKDF key derivation in RFC 8291 Web Push payload encryption.
3 Jul 2026
Added the User.ReadUpdate.All delegated and application permission as the least privileged permission to… (+1)
Added the User.ReadUpdate.All delegated and application permission as the least privileged permission to call the Update user API.
Added the User.Create delegated and application permission as the least privileged permission to call the Create user API.
2 Jul 2026
Added the servicePrincipalLockScope enumeration type (+1)
Added the servicePrincipalLockScope enumeration type.
Changed the behavior of the validate method on the crossTenantMigrationJob resource to validate an existing job as an entity-bound action. Going forward, use the POST /solutions/migrations/crossTenantMigrationJobs/{crossTenantMigrationJobId}/validate endpoint to trigger the validation of an existing cross-tenant migration job.
Removed the displayName parameter from the validate method.
Removed the completeAfterDateTime parameter from the validate method.
Removed the sourceTenantId parameter from the validate method.
Removed the exchangeSettings parameter from the validate method.
Removed the workloads parameter from the validate method.
Removed the resourceType parameter from the validate method.
Removed the resources parameter from the validate method.
19 Jun 2026
Added the policyTip member to the dlpAction enumeration (+3)
Added the policyTip member to the dlpAction enumeration.
Removed the overrideOption property from the notifyUserAction resource.
Removed the policyTip property from the notifyUserAction resource.
Added the delegatedBy property to the accessReviewInstance resource to identify the users who delegated an… (+3)
Added the delegatedBy property to the accessReviewInstance resource to identify the users who delegated an access review to the current reviewer.
Added the delegatedBy property to the accessReviewInstanceDecisionItem resource to identify the users who delegated an access review to the current reviewer.
Updated the Update fileStorageContainer permission method to support the PATCH /storage/fileStorage/containers/{containerId}/permissions(email='{email}') and PATCH /storage/fileStorage/containers/{containerId}/permissions(userPrincipalName='{userPrincipalName}') endpoints.
Updated the Delete fileStorageContainer permission method to support the DELETE /storage/fileStorage/containers/{containerId}/permissions(email='{email}') and DELETE /storage/fileStorage/containers/{containerId}/permissions(userPrincipalName='{userPrincipalName}') endpoints.
11 Jun 2026
Added the @microsoft.graph.conflictBehavior annotation parameter to the Create fileStorageContainer…
Added the @microsoft.graph.conflictBehavior annotation parameter to the Create fileStorageContainer permissions method to control the behavior when an identity already exists with a different role. Specify fail to return a 409 Conflict error, or replace to update the existing role.
11 Jun 2026
Added the Get fileStorageContainer permission method to the fileStorageContainer resource
Added the @microsoft.graph.conflictBehavior annotation parameter to the Create fileStorageContainer…
Added the @microsoft.graph.conflictBehavior annotation parameter to the Create fileStorageContainer permissions method to control the behavior when an identity already exists with a different role. Specify fail to return a 409 Conflict error, or replace to update the existing role.
Updated the targetedAuthenticationMethod property of the…
Updated the targetedAuthenticationMethod property of the authenticationMethodsRegistrationCampaignIncludeTarget resource to support Fido2 in addition to microsoftAuthenticator. Organizations can now use registration campaigns to nudge users to register and sign in with phishing-resistant passkeys (FIDO2).
20 May 2026
Added the iconPathInvalid member to the cloudPcCloudAppActionFailedErrorCode enumeration (+3)
Added the iconPathInvalid member to the cloudPcCloudAppActionFailedErrorCode enumeration.
Added the filePathInvalid member to the cloudPcCloudAppActionFailedErrorCode enumeration.
Added the riskRemediation member to the conditionalAccessGrantControl enumeration
Added the riskRemediation member to the conditionalAccessGrantControl enumeration.
28 Apr 2026
Added a deprecation notice to the agentRegistry resource and related APIs indicating that these Agent… (+3)
Added a deprecation notice to the agentRegistry resource and related APIs indicating that these Agent Registry APIs will be replaced by Agent 365-based APIs starting May 1, 2026.
Added a deprecation notice to the agentCardManifest resource indicating that these Agent Registry APIs will be replaced by Agent 365-based APIs starting May 1, 2026.
Added a deprecation notice to the agentCollection resource indicating that these Agent Registry APIs will be replaced by Agent 365-based APIs starting May 1, 2026.
Added a deprecation notice to the agentInstance resource indicating that these Agent Registry APIs will be replaced by Agent 365-based APIs starting May 1, 2026.
28 Apr 2026
Added the cloudPcOnPremisesConnectionSubnetIpDetail resource type (+1)
Added sectionsOrder as an instance attribute that you can use with the teamworkSection resource.
Added sectionsVersion as an instance attribute that you can use with the teamworkSection resource.
20 Apr 2026
Updated the List channels method on the channel resource to support @odata.nextLink pagination. With… (+2)
Updated the List channels method on the channel resource to support @odata.nextLink pagination. With increased channel limits, responses might span multiple pages. Use @odata.nextLink to retrieve all results.
Updated the List incomingChannels method on the team resource to support @odata.nextLink pagination. With increased channel limits, responses might span multiple pages. Use @odata.nextLink to retrieve all results.
Updated the List allChannels method on the team resource to support @odata.nextLink pagination. With increased channel limits, responses might span multiple pages. Use @odata.nextLink to retrieve all results.
20 Apr 2026
Updated the List channels method on the channel resource to support @odata.nextLink pagination. With… (+2)
Updated the List channels method on the channel resource to support @odata.nextLink pagination. With increased channel limits, responses might span multiple pages. Use @odata.nextLink to retrieve all results.
Updated the List incomingChannels method on the team resource to support @odata.nextLink pagination. With increased channel limits, responses might span multiple pages. Use @odata.nextLink to retrieve all results.
Updated the List allChannels method on the team resource to support @odata.nextLink pagination. With increased channel limits, responses might span multiple pages. Use @odata.nextLink to retrieve all results.
17 Apr 2026
Added the height query parameter to the API to download a file in another format (+1)
Added multiple members to the auditLogRecordType enumeration to support audit log record types for various… (+1)
Added multiple members to the auditLogRecordType enumeration to support audit log record types for various Microsoft 365 workloads including Copilot, Sentinel, Viva Glint, Defender, Purview, and other services.
Added multiple derived types of auditData to represent audit log records for various Microsoft 365 workloads.
17 Apr 2026
Added the List operation to the itemActivity resource
Added the onPasswordSubmitListener resource to manage authentication event listeners for password… (+3)
Added the onPasswordSubmitListener resource to manage authentication event listeners for password submission events during Just-In-Time (JIT) user migration.
Added the onPasswordSubmitCustomExtension resource to configure custom extensions for validating passwords against legacy authentication systems during JIT migration.
Added the onPasswordSubmitHandler resource as an abstract base type for handlers invoked during password submission events.
Added support for the DELETE /groups/{group-id}/drive/items/{item-id}/retentionLabel, DELETE…
Added support for the DELETE /groups/{group-id}/drive/items/{item-id}/retentionLabel, DELETE /me/drive/items/{item-id}/retentionLabel, and DELETE /users/{user-id}/drive/items/{item-id}/retentionLabel in the removeRetentionLabel of the driveItem resource.
11 Mar 2026
Added the archivalDetails property to the fileStorageContainer resource (+4)
Updated the endpoint for the Delete column method of the fileStorageContainer resource to use DELETE… (+1)
Updated the endpoint for the Delete column method of the fileStorageContainer resource to use DELETE /storage/fileStorage/containers/{containerId}/columns/{columnId} instead of DELETE /storageContainers/{containerId}/columns/{columnId} in the request URL.
Updated the endpoint for the Get column method of the fileStorageContainer resource to use GET /storage/fileStorage/containers/{containerId}/columns/{columnId} instead of GET /storageContainers/{containerId}/columns/{columnId} in the request URL.
4 Mar 2026
Added the samsungEFotaFirmwareVersion resource (+26)
Added the samsungEFotaFirmwareVersion resource.
Added the samsungEFotaFirmwareVersionTarget resource.
Added the samsungEFotaFirmwareVersions property to the deviceManagement resource.
Removed the samsungEFotaFirmwareVersions relationship from the deviceManagement resource.
Removed the samsungEFotaFirmwareVersion resource.
Removed the samsungEFotaFirmwareVersionTarget resource.
Added the androidAppCredentialProviderRoleState enumeration type.
Added the credentialProviderRoleState property to the androidForWorkMobileAppConfiguration resource.
Added the credentialProviderRoleState property to the androidManagedStoreAppConfiguration resource.
Added the wpa3Personal member to the wiFiSecurityType enumeration.
Added the isKioskModeExitCodeSet property to the androidDeviceOwnerGeneralDeviceConfiguration resource.
Added the controlledConfigurationEnabled property to the windowsProtectionState resource.
Added the windowsZtdnsExemptionRule resource.
Added the deviceConfiguration resource.
Added the windowsZtdnsConfiguration resource.
Added the releaseAppleDevices method to the depOnboardingSetting resource.
Added the deviceAndAppManagementAssignmentFilterType enumeration type.
Added the deviceAndAppManagementAssignmentSource enumeration type.
Added the deviceAndAppManagementPayloadType enumeration type.
Added the devicePlatformType enumeration type.
Added the allDevicesAssignmentTarget resource.
Added the allLicensedUsersAssignmentTarget resource.
Added the configurationManagerCollectionAssignmentTarget resource.
Added the deviceAndAppManagementAssignmentTarget resource.
Added the exclusionGroupAssignmentTarget resource.
Added the groupAssignmentTarget resource.
Added the deviceManagement resource.
3 Mar 2026
Added the offboardRequested member to the protectionPolicyStatus enumeration (+2)
Added the offboardRequested member to the protectionPolicyStatus enumeration.
Added the offboarded member to the protectionPolicyStatus enumeration.
Added the offboardRequestedDateTime property to the protectionPolicyBase resource.
3 Mar 2026
Added the targetAgentIdentitySponsorsOrOwners resource
Removed the isUserOverrideForAudienceEnabled property from the profilePropertySetting resource.
19 Feb 2026
Added the administrationScopeTargets relationship to the workflowBase resource. This relationship is also…
Added the administrationScopeTargets relationship to the workflowBase resource. This relationship is also inherited by the workflow and workflowVersion derived types.
18 Feb 2026
Added the requiredResourceAccess property to the agentIdentityBlueprint resource
Added the detonationBehaviourDetailsV2 property to the detonationDetails resource.
Added the entityMetadata property to the detonationDetails resource.
Added the mitreTechniques property to the detonationDetails resource.
Added the staticAnalysis property to the detonationDetails resource.
Added the submissionSource property to the detonationDetails resource.
Added the moveToQuarantine member to the remediationAction enumeration.
3 Feb 2026
Added the onPasswordSubmitListener resource to manage authentication event listeners for password… (+3)
Added the onPasswordSubmitListener resource to manage authentication event listeners for password submission events during Just-In-Time (JIT) user migration.
Added the onPasswordSubmitCustomExtension resource to configure custom extensions for validating passwords against legacy authentication systems during JIT migration.
Added the onPasswordSubmitHandler resource as an abstract base type for handlers invoked during password submission events.
Added the autoAuditingConfiguration relationship to the settingsContainer resource.
26 Jan 2026
Added multi-factor authentication (MFA) requirement for self-service operations for supported…
Added multi-factor authentication (MFA) requirement for self-service operations for supported authentication methods. Starting January 26, 2026, users who manage their own authentication methods through self-service operations, such as adding, updating, or deleting phone numbers and email addresses, must complete multifactor authentication (MFA) if they last authenticated more than 10 minutes ago in the current session. For more guidance on handling this change in your application, see Microsoft Entra authentication methods API overview.
24 Jan 2026
Added the externalOriginResourceConnectors relationship to the entitlementManagement resource
Added the externalOriginResourceConnectors relationship to the entitlementManagement resource.
23 Jan 2026
Added the baselineParameterType enumeration type (+19)
Added the mexico member to the cloudPcGeographicLocationType enumeration
Added the mexico member to the cloudPcGeographicLocationType enumeration.
21 Jan 2026
Updated the allowedTenantIds property description on the allowedTenantsAudience resource to specify that…
Updated the allowedTenantIds property description on the allowedTenantsAudience resource to specify that it can't include more than 20 values. This object is configured as part of signInAudienceRestrictions on an application.
21 Jan 2026
Added the refreshPolicyConfiguration member to the cloudPcStatus enumeration
Added the refreshPolicyConfiguration member to the cloudPcStatus enumeration.
21 Jan 2026
Added the cloudPcSourceImageCategory enumeration type (+1)
Added the cloudPcSourceImageCategory enumeration type.
Removed the identifier property from the aiInteractionPlugin resource in favor of the identifier property inherited from its base type.
Removed the name property from the aiInteractionPlugin resource in favor of the name property inherited from its base type.
Removed the version property from the aiInteractionPlugin resource in favor of the version property inherited from its base type.
Deprecated the accessedResources property of the processConversationMetadata resource. The accessedResources property is deprecated and stopped returning data on August 20, 2025. Going forward, use the accessedResources_v2 property.
Removed the conditionalAccessAudience resource type
Removed the conditionalAccessAudience resource type.
11 Dec 2025
Added the layoutType property to the channel resource (+3)
Added the layoutType property to the channel resource.
Added the channelLayoutType enumeration to the channel resource. The enumeration defines layout types for channels with values post (traditional post-reply), chat (chat-like threading), and unknownFutureValue.
Updated the Create channel method to support the layoutType optional property in the request body. Users can now specify the channel layout type during creation.
Updated the Update channel method to support updating the layoutType property. Users can switch between post and chat layouts at any time.
9 Dec 2025
Added the isDisabled property to the application resource (+1)
Added the isDisabled property to the application resource.
Removed the POST /users/{usersId}/presence/clearAutomaticLocation (application) and POST… (+3)
Removed the POST /users/{usersId}/presence/clearAutomaticLocation (application) and POST /communications/presences/{presenceId}/clearAutomaticLocation endpoints from the clearAutomaticLocation method.
Removed the POST /users/{usersId}/presence/clearLocation (application) and POST /communications/presences/{presenceId}/clearLocation endpoints from the clearLocation method.
Removed the POST /users/{usersId}/presence/setAutomaticLocation and POST /communications/presences/{presenceId}/setAutomaticLocation endpoints from the setAutomaticLocation method.
Removed the POST /users/{usersId}/presence/setManualLocation and POST /communications/presences/{presenceId}/setManualLocation endpoints from the setManualLocation method.
8 Dec 2025
Added the scopeCollectionKind enumeration type (+5)
Added the isApproverInformationVisible enumeration type to control the visibility of approver information… (+1)
Added the isApproverInformationVisible enumeration type to control the visibility of approver information to requestors.
Added the isApproverInformationVisible property to the unifiedApprovalStage resource for PIM role activation requests to control whether approver information is visible to requestors.
24 Nov 2025
Added the hasProtection property to the sensitivityLabel resource
Added the hasProtection property to the sensitivityLabel resource.
24 Nov 2025
Added the administrationScopeTargets relationship to the workflowBase resource
Added the administrationScopeTargets relationship to the workflowBase resource.
24 Nov 2025
Added the getAllRecordings method to the adhocCall resource (+1)
Deprecated the privilegedAccess resource and all the associated APIs that are part of the Privileged…
Deprecated the privilegedAccess resource and all the associated APIs that are part of the Privileged Identity Management (PIM) iteration 2 APIs for Azure resources. These APIs are deprecated and will stop returning data on October 28, 2026. Use the new Azure REST PIM API for Azure resource roles.
Deprecated the cloudPcReports resource. This resource is deprecated and will stop returning data on December 31, 2026. Going forward, use the cloudPcReport resource instead.
Added the report relationship to the virtualEndpoint resource.
Deprecated the reports relationship from the virtualEndpoint resource.
Deprecated the cloudPcLaunchInfo resource type. The cloudPcLaunchInfo resource is deprecated and will stop returning data on October 30, 2026. Going forward, use the cloudPcLaunchDetail API.
Added the Domain-InternalFederation.Read.All application and delegated permission for reading… (+3)
Added the Domain-InternalFederation.Read.All application and delegated permission for reading internalDomainFederation resources.
Added the Domain-InternalFederation.ReadWrite.All application and delegated permission for reading and writing internalDomainFederation resources.
Added the Domain-InternalFederation.ReadWrite.All application and delegated permission for updating the domain resource. The delegated permission is the lesser-privileged higher-privileged alternative to *Directory.AccessAsUser.All* delegated permission while the application permission allows applications to update domains with their own identity without a signed-in user.
Resolved a known permissions issue for internalDomainFederation WRITE APIs that previously required consenting to the *Directory.AccessAsUser.All* permission for delegated scenarios. Apps can now use the new *Domain-InternalFederation.ReadWrite.All* permission as a lesser-privileged alternative.
Removed InACall, InAConferenceCall, Inactive, InAMeeting, Presenting, UrgentInterruptionsOnly, and OffWork… (+2)
Removed InACall, InAConferenceCall, Inactive, InAMeeting, Presenting, UrgentInterruptionsOnly, and OffWork as supported values for the activity property of the presence resource.
Removed AvailableIdle and BusyIdle as supported values for the availability property of the presence resource.
Added Focusing, InACall, InAMeeting, and Presenting as supported values for the availability property of the presence resource.
Removed InACall, InAConferenceCall, Inactive, InAMeeting, Presenting, UrgentInterruptionsOnly, and OffWork… (+2)
Removed InACall, InAConferenceCall, Inactive, InAMeeting, Presenting, UrgentInterruptionsOnly, and OffWork as supported values for the activity property of the presence resource.
Removed AvailableIdle and BusyIdle as supported values for the availability property of the presence resource.
Added Focusing, InACall, InAMeeting, and Presenting as supported values for the availability property of the presence resource.
11 Sep 2025
Added the allowCopyingAndSharingMeetingContent property to the onlineMeetingBase resource (+2)
Added the allowCopyingAndSharingMeetingContent property to the onlineMeetingBase resource.
Added the allowCopyingAndSharingMeetingContent property to the onlineMeeting resource.
Added the allowCopyingAndSharingMeetingContent property to the virtualEventSession resource.
11 Sep 2025
Added the checkInMethod enumeration type (+2)
Added the checkInMethod enumeration type.
Added the checkInClaim resource and associated methods.
Added the checkIns relationship to the place resource.
10 Sep 2025
Added the isContinuousAccessEvaluationEnabled property to the onPremisesPublishing resource
Added the isContinuousAccessEvaluationEnabled property to the onPremisesPublishing resource.
Source: the Microsoft Graph changelog. Texts are Microsoft's. Beta APIs can change without notice; don't use them in production.
This site uses only functional storage to remember your language choice. With your consent, we also use Google Analytics to measure site usage.More in our privacy policy.