Namespace: microsoft.graph
readingCoachStoryType values
| Member |
| aiGenerated |
| readWorks |
| userProvided |
| unknownFutureValue |
responseFeedbackType values
| Member |
| none |
| notDetected |
| veryUnpleasant |
| unpleasant |
| neutral |
| pleasant |
| veryPleasant |
| unknownFutureValue |
responseEmotionType values
| Member |
| none |
| confident |
| excited |
| happy |
| motivated |
| peaceful |
| ambitious |
| cheerful |
| comfortable |
| creative |
| determined |
| energized |
| focused |
| fulfilled |
| grateful |
| included |
| inspired |
| optimistic |
| proud |
| successful |
| valuable |
| annoyed |
| bored |
| calm |
| confused |
| glad |
| content |
| pensive |
| reserved |
| restless |
| shocked |
| tired |
| angry |
| depressed |
| exhausted |
| lonely |
| nervous |
| anxious |
| apathetic |
| concerned |
| disappointed |
| frightened |
| frustrated |
| hopeless |
| hurt |
| jealous |
| miserable |
| overwhelmed |
| skeptical |
| stressed |
| stuck |
| worthless |
| awed |
| ashamed |
| curious |
| sensitive |
| sad |
| unknownFutureValue |
virtualEventRegistrationPredefinedQuestionLabel values
| Member |
| street |
| city |
| state |
| postalCode |
| countryOrRegion |
| industry |
| jobTitle |
| organization |
| unknownFutureValue |
| Member |
| text |
| multilineText |
| singleChoice |
| multiChoice |
| boolean |
| unknownFutureValue |
fileStorageContainerStatus values
| Member |
| inactive |
| active |
| unknownfuturevalue |
siteLockState values
| Member |
| unlocked |
| lockedReadOnly |
binaryOperator values
entityType values
| Member |
| event |
| message |
| driveItem |
| externalItem |
| site |
| list |
| listItem |
| drive |
| unknownFutureValue |
| chatMessage |
| person |
| acronym |
| bookmark |
conditionalAccessExternalTenantsMembershipKind values
| Member |
| all |
| enumerated |
| unknownFutureValue |
conditionalAccessGuestOrExternalUserTypes values
| Member |
| none |
| internalGuest |
| b2bCollaborationGuest |
| b2bCollaborationMember |
| b2bDirectConnectUser |
| otherExternalUser |
| serviceProvider |
| unknownFutureValue |
migrationStatus values
| Member |
| ready |
| needsReview |
| additionalStepsRequired |
| unknownFutureValue |
appManagementRestrictionState values
| Member |
| enabled |
| disabled |
| unknownFutureValue |
appCredentialRestrictionType values
| Member |
| passwordAddition |
| passwordLifetime |
| symmetricKeyAddition |
| symmetricKeyLifetime |
| unknownFutureValue |
appKeyCredentialRestrictionType values
| Member |
| asymmetricKeyLifetime |
| unknownFutureValue |
assignmentType values
| Member |
| required |
| recommeded |
| unknownFutureValue |
| peerRecommeded |
certificateAuthorityType values
| Member |
| root |
| intermediate |
| unknownFutureValue |
courseStatus values
| Member |
| notStarted |
| inProgress |
| completed |
userPurpose values
| Member |
| user |
| linked |
| shared |
| room |
| equipment |
| others |
| unknownFutureValue |
bookingsAvailabilityStatus values
| Member |
| available |
| busy |
| slotsAvailable |
| outOfOffice |
| unknownFutureValue |
signInFrequencyAuthenticationType values
| Member |
| primaryAndSecondaryAuthentication |
| secondaryAuthentication |
| unknownFutureValue |
signInFrequencyInterval values
| Member |
| timeBased |
| everyTime |
crossTenantAccessPolicyTargetConfigurationAccessType values
| Member |
| allowed |
| blocked |
| unknownFutureValue |
crossTenantAccessPolicyTargetType values
| Member |
| user |
| group |
| application |
| unknownFutureValue |
multiTenantOrganizationMemberProcessingStatus values
| Member |
| notStarted |
| running |
| succeeded |
| failed |
| unknownFutureValue |
multiTenantOrganizationMemberRole values
| Member |
| owner |
| member |
| unknownFutureValue |
multiTenantOrganizationMemberState values
| Member |
| pending |
| active |
| removed |
| unknownFutureValue |
multiTenantOrganizationState values
| Member |
| active |
| inactive |
| unknownFutureValue |
templateApplicationLevel values
| Member |
| none |
| newPartners |
| existingPartners |
| unknownFutureValue |
federatedIdpMfaBehavior values
| Member |
| acceptIfMfaDoneByFederatedIdp |
| enforceMfaByFederatedIdp |
| rejectMfaByFederatedIdp |
| unknownFutureValue |
promptLoginBehavior values
| Member |
| translateToFreshPasswordAuthentication |
| nativeSupport |
| disabled |
| unknownFutureValue |
expirationPatternType values
| Member |
| notSpecified |
| noExpiration |
| afterDateTime |
| afterDuration |
recurrencePatternType values
| Member |
| daily |
| weekly |
| absoluteMonthly |
| relativeMonthly |
| absoluteYearly |
| relativeYearly |
assignmentScheduleFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
assignmentScheduleInstanceFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
assignmentScheduleRequestFilterByCurrentUserOptions values
| Member |
| principal |
| createdBy |
| approver |
| unknownFutureValue |
eligibilityScheduleFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
eligibilityScheduleInstanceFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
eligibilityScheduleRequestFilterByCurrentUserOptions values
| Member |
| principal |
| createdBy |
| approver |
| unknownFutureValue |
privilegedAccessGroupAssignmentType values
| Member |
| assigned |
| activated |
| unknownFutureValue |
privilegedAccessGroupMemberType values
| Member |
| direct |
| group |
| unknownFutureValue |
privilegedAccessGroupRelationships values
| Member |
| owner |
| member |
| unknownFutureValue |
scheduleRequestActions values
| Member |
| adminAssign |
| adminUpdate |
| adminRemove |
| selfActivate |
| selfDeactivate |
| adminExtend |
| adminRenew |
| selfExtend |
| selfRenew |
| unknownFutureValue |
roleAssignmentScheduleFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
roleAssignmentScheduleInstanceFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
roleAssignmentScheduleRequestFilterByCurrentUserOptions values
| Member |
| principal |
| createdBy |
| approver |
| unknownFutureValue |
roleEligibilityScheduleFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
roleEligibilityScheduleInstanceFilterByCurrentUserOptions values
| Member |
| principal |
| unknownFutureValue |
roleEligibilityScheduleRequestFilterByCurrentUserOptions values
| Member |
| principal |
| createdBy |
| approver |
| unknownFutureValue |
unifiedRoleManagementPolicyRuleTargetOperations values
| Member |
| all |
| activate |
| deactivate |
| assign |
| update |
| remove |
| extend |
| renew |
| unknownFutureValue |
userSignInRecommendationScope values
| Member |
| tenant |
| application |
| unknownFutureValue |
unifiedRoleScheduleRequestActions values
| Member |
| adminAssign |
| adminUpdate |
| adminRemove |
| selfActivate |
| selfDeactivate |
| adminExtend |
| adminRenew |
| selfExtend |
| selfRenew |
| unknownFutureValue |
approvalFilterByCurrentUserOptions values
| Member |
| target |
| createdBy |
| approver |
| unknownFutureValue |
accessReviewExpirationBehavior values
| Member |
| keepAccess |
| removeAccess |
| acceptAccessRecommendation |
| unknownFutureValue |
allowedTargetScope values
| Member |
| notSpecified |
| specificDirectoryUsers |
| specificConnectedOrganizationUsers |
| specificDirectoryServicePrincipals |
| allMemberUsers |
| allDirectoryUsers |
| allDirectoryServicePrincipals |
| allConfiguredConnectedOrganizationUsers |
| allExternalUsers |
| unknownFutureValue |
accessPackageAssignmentFilterByCurrentUserOptions values
| Member |
| target |
| createdBy |
| unknownFutureValue |
accessPackageAssignmentRequestFilterByCurrentUserOptions values
| Member |
| target |
| createdBy |
| approver |
| unknownFutureValue |
accessPackageAssignmentState values
| Member |
| delivering |
| partiallyDelivered |
| delivered |
| expired |
| deliveryFailed |
| unknownFutureValue |
accessPackageCatalogState values
| Member |
| unpublished |
| published |
| unknownFutureValue |
accessPackageCatalogType values
| Member |
| userManaged |
| serviceDefault |
| serviceManaged |
| unknownFutureValue |
accessPackageExternalUserLifecycleAction values
| Member |
| none |
| blockSignIn |
| blockSignInAndDelete |
| unknownFutureValue |
accessPackageFilterByCurrentUserOptions values
| Member |
| allowedRequestor |
| unknownFutureValue |
accessPackageRequestState values
| Member |
| submitted |
| pendingApproval |
| delivering |
| delivered |
| deliveryFailed |
| denied |
| scheduled |
| canceled |
| partiallyDelivered |
| unknownFutureValue |
accessPackageRequestType values
| Member |
| notSpecified |
| userAdd |
| userUpdate |
| userRemove |
| adminAdd |
| adminUpdate |
| adminRemove |
| systemAdd |
| systemUpdate |
| systemRemove |
| onBehalfAdd |
| unknownFutureValue |
accessPackageSubjectType values
| Member |
| notSpecified |
| user |
| servicePrincipal |
| unknownFutureValue |
connectedOrganizationState values
| Member |
| configured |
| proposed |
accessReviewInstanceDecisionItemFilterByCurrentUserOptions values
| Member |
| reviewer |
| unknownFutureValue |
accessReviewStageFilterByCurrentUserOptions values
| Member |
| reviewer |
| unknownFutureValue |
accessPackageCustomExtensionStage values
| Member |
| assignmentRequestCreated |
| assignmentRequestApproved |
| assignmentRequestGranted |
| assignmentRequestRemoved |
| assignmentFourteenDaysBeforeExpiration |
| assignmentOneDayBeforeExpiration |
| unknownFutureValue |
customExtensionCalloutInstanceStatus values
| Member |
| calloutSent |
| callbackReceived |
| calloutFailed |
| callbackTimedOut |
| waitingForCallback |
| unknownFutureValue |
volumeType values
| Member |
| operatingSystemVolume |
| fixedDataVolume |
| removableDataVolume |
| unknownFutureValue |
filterMode values
lifecycleEventType values
| Member |
| missed |
| subscriptionRemoved |
| reauthorizationRequired |
changeType values
| Member |
| clientIpAddress |
| authenticatorAppGps |
countryLookupMethodType values
| Member |
| clientIpAddress |
| authenticatorAppGps |
consentRequestFilterByCurrentUserOptions values
| Member |
| reviewer |
| unknownFutureValue |
educationFeedbackResourceOutcomeStatus values
| Member |
| notPublished |
| pendingPublish |
| published |
| failedPublish |
| unknownFutureValue |
externalEmailOtpState values
| Member |
| default |
| enabled |
| disabled |
| unknownFutureValue |
educationAddedStudentAction values
| Member |
| none |
| assignIfOpen |
| unknownFutureValue |
educationModuleStatus values
educationSpeechType values
| Member |
| informative |
| personal |
| persuasive |
| unknownFutureValue |
fido2RestrictionEnforcementType values
x509CertificateAuthenticationMode values
| Member |
| x509CertificateSingleFactor |
| x509CertificateMultiFactor |
| unknownFutureValue |
x509CertificateRuleType values
| Member |
| issuerSubject |
| policyOID |
| unknownFutureValue |
x509CertificateCRLValidationConfigurationState values
| Member |
| disabled |
| enabled |
| unknownFutureValue |
attestationLevel values
| Member |
| attested |
| notAttested |
authenticationMethodTargetType values
authenticationMethodState values
microsoftAuthenticatorAuthenticationMode values
| Member |
| any |
| push |
| deviceBasedPush |
keyStrength values
| Member |
| normal |
| weak |
| unknown |
authenticationMethodKeyStrength values
| Member |
| normal |
| weak |
| unknown |
allowInvitesFrom values
| Member |
| none |
| adminsAndGuestInviters |
| adminsGuestInvitersAndAllMembers |
| everyone |
| unknownFutureValue |
dataPolicyOperationStatus values
| Member |
| notStarted |
| running |
| complete |
| failed |
| unknownFutureValue |
| Member |
| android |
| iOS |
| windows |
| windowsPhone |
| macOS |
| all |
| unknownFutureValue |
signinFrequencyType values
persistentBrowserSessionMode values
cloudAppSecuritySessionControlType values
| Member |
| mcasConfigured |
| monitorOnly |
| blockDownloads |
| unknownFutureValue |
conditionalAccessGrantControl values
| Member |
| block |
| mfa |
| compliantDevice |
| domainJoinedDevice |
| approvedApplication |
| compliantApplication |
| passwordChange |
| unknownFutureValue |
conditionalAccessClientApp values
| Member |
| all |
| browser |
| mobileAppsAndDesktopClients |
| exchangeActiveSync |
| easSupported |
| other |
| unknownFutureValue |
conditionalAccessPolicyState values
| Member |
| enabled |
| disabled |
| enabledForReportingButNotEnforced |
deviceProfileType values
| Member |
| RegisteredDevice |
| SecureVM |
| Printer |
| Shared |
| IoT |
appliedConditionalAccessPolicyResult values
| Member |
| success |
| failure |
| notApplied |
| notEnabled |
| unknown |
| unknownFutureValue |
groupType values
| Member |
| unifiedGroups |
| azureAD |
| unknownFutureValue |
conditionalAccessStatus values
| Member |
| success |
| failure |
| notApplied |
| unknownFutureValue |
templateScenarios values
| Member |
| new |
| secureFoundation |
| zeroTrust |
| remoteWork |
| protectAdmins |
| emergingThreats |
| unknownFutureValue |
operationResult values
| Member |
| success |
| failure |
| timeout |
| unknownFutureValue |
tone values
| Member |
| tone0 |
| tone1 |
| tone2 |
| tone3 |
| tone4 |
| tone5 |
| tone6 |
| tone7 |
| tone8 |
| tone9 |
| star |
| pound |
| a |
| b |
| c |
| d |
| flash |
| Member |
| active |
| inactive |
| unknownFutureValue |
basicStatus values
callState values
| Member |
| incoming |
| establishing |
| ringing |
| established |
| hold |
| transferring |
| transferAccepted |
| redirecting |
| terminating |
| terminated |
callType values
| Member |
| unknown |
| groupCall |
| peerToPeer |
| unknownFutureValue |
educationAddToCalendarOptions values
| Member |
| none |
| studentsAndPublisher |
| studentsAndTeamOwners |
| unknownFutureValue |
| studentsOnly |
educationSubmissionStatus values
| Member |
| working |
| submitted |
| returned |
| unknownFutureValue |
| reassigned |
onlineMeetingRole values
| Member |
| attendee |
| presenter |
| unknownFutureValue |
modality values
| Member |
| audio |
| video |
| videoBasedScreenSharing |
| data |
| screenSharing |
| unknownFutureValue |
endpointType values
| Member |
| default |
| voicemail |
| skypeForBusiness |
| skypeForBusinessVoipPhone |
| unknownFutureValue |
callDirection values
signInAudience values
| Member |
| AzureADMyOrg |
| AzureADMultipleOrgs |
| AzureADandPersonalMicrosoftAccount |
| PersonalMicrosoftAccount |
groupMembershipClaims values
| Member |
| None |
| SecurityGroup |
| All |
recipientScopeType values
| Member |
| none |
| internal |
| external |
| externalPartner |
| externalNonPartner |
activityType values
| Member |
| signin |
| user |
| unknownFutureValue |
| servicePrincipal |
riskDetectionTimingType values
| Member |
| notDefined |
| realtime |
| nearRealtime |
| offline |
| unknownFutureValue |
tokenIssuerType values
| Member |
| AzureAD |
| ADFederationServices |
| UnknownFutureValue |
attachmentType values
| Member |
| file |
| item |
| reference |
| Member |
Value |
Description |
| parent |
0 |
The user's parent. |
| relative |
1 |
The user's relative. |
| aide |
2 |
The user's aide. |
| doctor |
3 |
The user's doctor. |
| guardian |
4 |
The user's guardian. |
| child |
5 |
The user's child. |
| other |
6 |
An unspecified relationship to the user. |
| unknownFutureValue |
7 |
Marker value for future compatibility. |
scheduleEntityTheme values
| Member |
| white |
| blue |
| green |
| purple |
| pink |
| yellow |
| gray |
| darkBlue |
| darkGreen |
| darkPurple |
| darkPink |
| darkYellow |
| unknownFutureValue |
timeOffReasonIconType values
| Member |
| none |
| car |
| calendar |
| running |
| plane |
| firstAid |
| doctor |
| notWorking |
| clock |
| juryDuty |
| globe |
| cup |
| phone |
| weather |
| umbrella |
| piggyBank |
| dog |
| cake |
| trafficCone |
| pin |
| sunny |
| unknownFutureValue |
windowsSettingType values
Possible types of Windows settings.
| Member |
| roaming |
| backup |
| unknownFutureValue |
workforceIntegrationEncryptionProtocol values
| Member |
| sharedSecret |
| unknownFutureValue |
workforceIntegrationSupportedEntities values
| Member |
| none |
| shift |
| swapRequest |
| userShiftPreferences |
| openShift |
| openShiftRequest |
| offerShiftRequest |
| unknownFutureValue |
| timeCard |
| timeOffReason |
| timeOff |
| timeOffRequest |
eligibilityFilteringEnabledEntities values
| Member |
| none |
| swapRequest |
| offerShiftRequest |
| unknownFutureValue |
| timeOffReason |
timeZoneStandard values
freeBusyStatus values
| Member |
Value |
| free |
0 |
| tentative |
1 |
| busy |
2 |
| oof |
3 |
| workingElsewhere |
4 |
| unknown |
-1 |
attendeeType values
| Member |
| required |
| optional |
| resource |
externalAudienceScope values
| Member |
| none |
| contactsOnly |
| all |
automaticRepliesStatus values
| Member |
| disabled |
| alwaysEnabled |
| scheduled |
calendarColor values
| Member |
Value |
| auto |
-1 |
| lightBlue |
0 |
| lightGreen |
1 |
| lightOrange |
2 |
| lightGray |
3 |
| lightYellow |
4 |
| lightTeal |
5 |
| lightPink |
6 |
| lightBrown |
7 |
| lightRed |
8 |
| maxColor |
9 |
educationExternalSource values
| Member |
| sis |
| manual |
| unknownFutureValue |
educationGender values
| Member |
| female |
| male |
| other |
| unknownFutureValue |
eventType values
| Member |
| singleInstance |
| occurrence |
| exception |
| seriesMaster |
sensitivity values
| Member |
| normal |
| personal |
| private |
| confidential |
importance values
educationUserRole values
| Member |
| student |
| teacher |
| none |
| unknownFutureValue |
meetingMessageType values
| Member |
| none |
| meetingRequest |
| meetingCancelled |
| meetingAccepted |
| meetingTenativelyAccepted |
| meetingDeclined |
followupFlagStatus values
| Member |
| notFlagged |
| complete |
| flagged |
inferenceClassificationType values
iosNotificationAlertType values
| Member |
| deviceDefault |
| banner |
| modal |
| none |
deviceEnrollmentFailureReason values
| Member |
| unknown |
| authentication |
| authorization |
| accountValidation |
| userValidation |
| deviceNotSupported |
| inMaintenance |
| badRequest |
| featureNotSupported |
| enrollmentRestrictionsEnforced |
| clientDisconnected |
bodyType values
locationType values
| Member |
| default |
| conferenceRoom |
| homeAddress |
| businessAddress |
| geoCoordinates |
| streetAddress |
| hotel |
| restaurant |
| localBusiness |
| postalAddress |
locationUniqueIdType values
| Member |
| unknown |
| locationStore |
| directory |
| private |
| bing |
messageActionFlag values
| Member |
| any |
| call |
| doNotForward |
| followUp |
| fyi |
| forward |
| noResponseNecessary |
| read |
| reply |
| replyToAll |
| review |
onenoteUserRole values
| Member |
Value |
| Owner |
0 |
| Contributor |
1 |
| Reader |
2 |
| None |
-1 |
operationStatus values
| Member |
| NotStarted |
| Running |
| Completed |
| Failed |
onenotePatchActionType values
| Member |
| Replace |
| Append |
| Delete |
| Insert |
| Prepend |
onenotePatchInsertPosition values
phoneType values
| Member |
| home |
| business |
| mobile |
| other |
| assistant |
| homeFax |
| businessFax |
| otherFax |
| pager |
| radio |
plannerContainerType values
| Member |
| group |
| unknownFutureValue |
| roster |
plannerPreviewType values
| Member |
| automatic |
| noPreview |
| checklist |
| description |
| reference |
status values
| Member |
| active |
| updated |
| deleted |
| ignored |
| unknownFutureValue |
weekIndex values
| Member |
| first |
| second |
| third |
| fourth |
| last |
dayOfWeek values
| Member |
| sunday |
| monday |
| tuesday |
| wednesday |
| thursday |
| friday |
| saturday |
recurrenceRangeType values
| Member |
| endDate |
| noEnd |
| numbered |
onenoteSourceService values
| Member |
| Unknown |
| OneDrive |
| OneDriveForBusiness |
| OnPremOneDriveForBusiness |
responseType values
| Member |
| none |
| organizer |
| tentativelyAccepted |
| accepted |
| declined |
| notResponded |
activityDomain values
| Member |
| unknown |
| work |
| personal |
| unrestricted |
websiteType values
| Member |
| other |
| home |
| work |
| blog |
| profile |
categoryColor values
| Member |
Value |
| none |
-1 |
| preset0 |
0 |
| preset1 |
1 |
| preset2 |
2 |
| preset3 |
3 |
| preset4 |
4 |
| preset5 |
5 |
| preset6 |
6 |
| preset7 |
7 |
| preset8 |
8 |
| preset9 |
9 |
| preset10 |
10 |
| preset11 |
11 |
| preset12 |
12 |
| preset13 |
13 |
| preset14 |
14 |
| preset15 |
15 |
| preset16 |
16 |
| preset17 |
17 |
| preset18 |
18 |
| preset19 |
19 |
| preset20 |
20 |
| preset21 |
21 |
| preset22 |
22 |
| preset23 |
23 |
| preset24 |
24 |
alertFeedback values
Possible feedback values on the alert provided by an analyst.
| Member |
Value |
Description |
| unknown |
0 |
Unknown. |
| truePositive |
1 |
Alert is true-positive. |
| falsePositive |
2 |
Alert is false-positive. |
| benignPositive |
3 |
Alert is benign-positive. |
fileHashType values
Enum for file hash types.
| Member |
Value |
Description |
| unknown |
0 |
Unknown type. |
| sha1 |
1 |
SHA1 hash type. |
| sha256 |
2 |
SHA256 hash type. |
| md5 |
3 |
MD5 hash type. |
| authenticodeHash256 |
4 |
AuthenticodeHash256 hash type. |
| lsHash |
5 |
LsHash hash type. |
| ctph |
6 |
CTPH hash type. |
| peSha1 |
7 |
PESHA1 hash type. |
| peSha256 |
8 |
PESHA256 hash type. |
connectionDirection values
Enum for the direction of the network connection (inbound/outbound).
| Member |
Value |
Description |
| unknown |
0 |
Unknown connection. |
| inbound |
1 |
Inbound connection. |
| outbound |
2 |
Outbound connection. |
connectionStatus values
Enum for the status of connections.
| Member |
Value |
Description |
| unknown |
0 |
Unknown connection status. |
| attempted |
1 |
Connection attempted. |
| succeeded |
2 |
Connection succeeded. |
| blocked |
3 |
Connection blocked. |
| failed |
4 |
Connection failed. |
processIntegrityLevel values
Possible integrity level values of the process.
| Member |
Value |
Description |
| unknown |
0 |
Unknown. |
| untrusted |
10 |
Integrity level is Untrusted. |
| low |
20 |
Integrity level is Low. |
| medium |
30 |
Integrity level is Medium. |
| high |
40 |
Integrity level is High. |
| system |
50 |
Integrity level is System. |
registryHive values
Enum for registry hives as defined by /windows/desktop/sysinfo/registry-hives.
| Member |
Value |
Description |
| unknown |
0 |
Unknown hive. |
| currentConfig |
1 |
HKEY_CURRENT_CONFIG hive. |
| currentUser |
2 |
HKEY_CURRENT_USER hive. |
| localMachineSam |
3 |
HKEY_LOCAL_MACHINE\SAM hive. |
| localMachineSamSoftware |
4 |
HKEY_LOCAL_MACHINE\Software hive. |
| localMachineSystem |
5 |
HKEY_LOCAL_MACHINE\System hive. |
| usersDefault |
6 |
HKEY_USERS\.DEFAULT hive. |
registryOperation values
Operation that changed the registry key name and/or value.
| Member |
Value |
Description |
| unknown |
0 |
Unknown registry value type. |
| create |
1 |
Create registry. |
| modify |
2 |
Modify registry. |
| delete |
3 |
Delete registry. |
registryValueType values
Enum for registry value types as defined by /windows/desktop/sysinfo/registry-value-types.
| Member |
Value |
Description |
| unknown |
0 |
Unknown registry value type. |
| binary |
1 |
REG_BINARY registry value type. |
| dword |
2 |
REG_DWORD registry value type. |
| dwordLittleEndian |
3 |
REG_DWORD_LITTLE_ENDIAN registry value type. |
| dwordBigEndian |
4 |
REG_DWORD_BIG_ENDIAN registry value type. |
| expandSz |
5 |
REG_EXPAND_SZ registry value type. |
| link |
6 |
REG_LINK registry value type. |
| multiSz |
7 |
REG_MULTI_SZ registry value type. |
| none |
8 |
REG_NONE registry value type. |
| qword |
9 |
REG_QWORD registry value type. |
| qwordlittleEndian |
10 |
REG_QWORD_LITTLE_ENDIAN registry value type. |
| sz |
11 |
REG_SZ registry value type. |
alertSeverity values
Enum for severity of alerts.
| Member |
Value |
Description |
| unknown |
0 |
Severity is unknown. |
| informational |
1 |
Severity is only for information. |
| low |
2 |
Severity is low. |
| medium |
3 |
Severity is medium. |
| high |
4 |
Severity is high. |
alertStatus values
Possible values of an Alert lifecycle status (stage).
| Member |
Value |
Description |
| unknown |
0 |
Unknown status. |
| newAlert |
10 |
Alert is new. |
| inProgress |
20 |
Alert is in progress. |
| resolved |
30 |
Alert is resolved. |
emailRole values
Possible values for email roles.
| Member |
Value |
Description |
| unknown |
0 |
Unknown Role. |
| sender |
1 |
Sender of the email. |
| recipient |
2 |
Recipient of the email. |
logonType values
Possible values for the method of user signin.
| Member |
Value |
Description |
| unknown |
-1 |
Unknown. |
| interactive |
0 |
Logon is interactive. |
| remoteInteractive |
1 |
Logon is remote interactive. |
| network |
2 |
Logon is network. |
| batch |
3 |
Logon is batch. |
| service |
4 |
Logon is service. |
userAccountSecurityType values
Possible values for user account types (group membership), per Windows definition.
| Member |
Member |
Description |
| unknown |
-1 |
Unknown. |
| standard |
0 |
Member of Standard Users group. |
| power |
1 |
Member of Power Users group. |
| administrator |
2 |
Member of Administrators group. |
riskDetail values
| Member |
| none |
| adminGeneratedTemporaryPassword |
| userPerformedSecuredPasswordChange |
| userPerformedSecuredPasswordReset |
| adminConfirmedSigninSafe |
| aiConfirmedSigninSafe |
| userPassedMFADrivenByRiskBasedPolicy |
| adminDismissedAllRiskForUser |
| adminConfirmedSigninCompromised |
| hidden |
| adminConfirmedUserCompromised |
| unknownFutureValue |
| adminConfirmedServicePrincipalCompromised |
| adminDismissedAllRiskForServicePrincipal |
| m365DAdminDismissedDetection |
| userChangedPasswordOnPremises |
| adminDismissedRiskForSignIn |
| adminConfirmedAccountSafe |
riskEventTypes values
| Member |
| unlikelyTravel |
| anonymizedIPAddress |
| maliciousIPAddress |
| unfamiliarFeatures |
| malwareInfectedIPAddress |
| suspiciousIPAddress |
| leakedCredentials |
| investigationsThreatIntelligence |
| generic |
| unknownFutureValue |
riskEventType values
| Member |
| unlikelyTravel |
| anonymizedIPAddress |
| maliciousIPAddress |
| unfamiliarFeatures |
| malwareInfectedIPAddress |
| suspiciousIPAddress |
| leakedCredentials |
| investigationsThreatIntelligence |
| generic |
| adminConfirmedUserCompromised |
| mcasImpossibleTravel |
| mcasSuspiciousInboxManipulationRules |
| investigationsThreatIntelligenceSigninLinked |
| maliciousIPAddressValidCredentialsBlockedIP |
| unknownFutureValue |
riskLevel values
| Member |
| none |
| low |
| medium |
| high |
| hidden |
| unknownFutureValue |
riskState values
| Member |
| none |
| confirmedSafe |
| remediated |
| dismissed |
| atRisk |
| confirmedCompromised |
| unknownFutureValue |
| Member |
| entryId |
| ewsId |
| immutableEntryId |
| restId |
| restImmutableEntryId |
onlineMeetingProviderType values
| Member |
| unknown |
| skypeForBusiness |
| skypeForConsumer |
| teamsForBusiness |
delegateMeetingMessageDeliveryOptions values
| Member |
| sendToDelegateAndInformationToPrincipal |
| sendToDelegateAndPrincipal |
| sendToDelegateOnly |
calendarRoleType values
| Member |
| none |
| freeBusyRead |
| limitedRead |
| read |
| write |
| delegateWithoutPrivateEventAccess |
| delegateWithPrivateEventAccess |
| custom |
threatAssessmentContentType values
| Member |
Value |
Description |
| mail |
1 |
Mail threat. |
| url |
2 |
URL threat. |
| file |
3 |
Attachment file threat. |
threatExpectedAssessment values
| Member |
Value |
Description |
| block |
1 |
The threat should be blocked. |
| unblock |
2 |
The threat shouldn't be blocked. |
threatCategory values
| Member |
Value |
Description |
| spam |
1 |
Spam threat. |
| phishing |
2 |
Phishing threat. |
| malware |
3 |
Malware threat. |
| unknownFutureValue |
4 |
A sentinel member. |
threatAssessmentStatus values
| Member |
Value |
Description |
| pending |
1 |
The threat assessment still in progress. |
| completed |
2 |
The threat assessment completed. |
threatAssessmentRequestSource values
| Member |
Value |
Description |
| undefined |
0 |
Not yet know. |
| user |
1 |
User submission. |
| administrator |
2 |
Tenant admin submission. |
threatAssessmentResultType values
| Member |
Value |
Description |
| checkPolicy |
1 |
The policy check result, only for mail assessment. |
| rescan |
2 |
The rescan result. |
| unknownFutureValue |
3 |
A sentinel member. |
mailDestinationRoutingReason values
| Member |
Value |
Description |
| none |
0 |
Not yet know. |
| mailFlowRule |
1 |
Exchange transport rule. |
| safeSender |
2 |
Safe sender list. |
| blockedSender |
3 |
Blocked sender list. |
| advancedSpamFiltering |
4 |
Advanced spam flitering option. |
| domainAllowList |
5 |
Sender ___domain allow list. |
| domainBlockList |
6 |
Sender ___domain block list. |
| notInAddressBook |
7 |
Exclude sender not in address book. |
| firstTimeSender |
8 |
Blocked due to first time sender. |
| autoPurgeToInbox |
9 |
TimeTravel move message to inbox. |
| autoPurgeToJunk |
10 |
TimeTravel move message to junk. |
| autoPurgeToDeleted |
11 |
TimeTravel move message to deleted. |
| outbound |
12 |
Outbound mail. |
| notJunk |
13 |
Allow due to not junk. |
| junk |
14 |
Blocked due to junk. |
| unknownFutureValue |
15 |
A sentinel member. |
chatMessageType values
| Value |
| message |
| chatEvent |
| typing |
| unknownFutureValue |
| systemEventMessage |
chatMessagePolicyViolationDlpActionType values
| Value |
| none |
| NotifySender |
| BlockAccess |
| BlockAccessExternal |
chatMessagePolicyViolationUserActionType values
| Member |
Int value |
Description |
| None |
0 |
Default value. This is the value on a message when the user has not taken an action on the message blocked by DLP. |
| Override |
1 |
Sender has overridden the message verdict and sent the message anyway. |
| ReportFalsePositive |
2 |
Sender has reported the message verdict to the admins as a false positive. |
chatMessagePolicyViolationVerdictDetailsType values
| Member |
Int value |
Description |
| None |
0 |
User is not allowed to override the message. User is not allowed to report a message as false positive if policyTip is not provided. In all other scenarios, user can report a message as false positive. |
| AllowFalsePositiveOverride |
1 |
User is not allowed to explicitly override the block unless this is combined with AllowOverrideWithoutJustification or AllowOverrideWithJustification flags. Reporting a false positive on the violation automatically overrides the block and sends the message. |
| AllowOverrideWithoutJustification |
2 |
User is allowed to override the block and send the message. Justification text isn't required. Exclusive to AllowOverrideWithJustification. |
| AllowOverrideWithJustification |
4 |
User is allowed to override the block and send the message. Justification text is required. Exclusive to AllowOverrideWithoutJustification. |
wellknownListName values
| Member |
| none |
| defaultList |
| flaggedEmails |
| unknownFutureValue |
taskStatus values
| Member |
| notStarted |
| inProgress |
| completed |
| waitingOnOthers |
| deferred |
columnTypes values
| Member |
Description |
| note |
Multiline text. |
| text |
Single line text. |
| choice |
Choice column |
| multichoice |
Multichoice column. |
| number |
Number column. |
| currency |
Currency column. |
| dateTime |
DateTime column. |
| lookup |
Lookup column. |
| boolean |
Yes/No column. |
| user |
Person or group column. |
| url |
Hyperlink or picture column. |
| calculated |
Calculated column. |
| ___location |
Location column. |
| geolocation |
Geolocation column. |
| term |
Managed metadata column. |
| multiterm |
Managed metadata column accepting multiple values. |
| thumbnail |
Image column. |
| approvalStatus |
Content approval status column. |
| unknownFutureValue |
UnknownFuturevalue |
permissionClassificationType values
permissionType values
| Member |
| application |
| delegated |
| delegatedUserConsentable |
printColorMode values
| Member |
| blackAndWhite |
| grayscale |
| color |
| auto |
| unknownFutureValue |
printDuplexMode values
| Member |
| flipOnLongEdge |
| flipOnShortEdge |
| oneSided |
| unknownFutureValue |
printerFeedOrientation values
| Member |
| longEdgeFirst |
| shortEdgeFirst |
| unknownFutureValue |
printFinishing values
| Member |
| none |
| staple |
| punch |
| cover |
| bind |
| saddleStitch |
| stitchEdge |
| stapleTopLeft |
| stapleBottomLeft |
| stapleTopRight |
| stapleBottomRight |
| stitchLeftEdge |
| stitchTopEdge |
| stitchRightEdge |
| stitchBottomEdge |
| stapleDualLeft |
| stapleDualTop |
| stapleDualRight |
| stapleDualBottom |
| unknownFutureValue |
| stapleTripleLeft |
| stapleTripleTop |
| stapleTripleRight |
| stapleTripleBottom |
| bindLeft |
| bindTop |
| bindRight |
| bindBottom |
| foldAccordion |
| foldDoubleGate |
| foldGate |
| foldHalf |
| foldHalfZ |
| foldLeftGate |
| foldLetter |
| foldParallel |
| foldPoster |
| foldRightGate |
| foldZ |
| foldEngineeringZ |
| punchTopLeft |
| punchBottomLeft |
| punchTopRight |
| punchBottomRight |
| punchDualLeft |
| punchDualTop |
| punchDualRight |
| punchDualBottom |
| punchTripleLeft |
| punchTripleTop |
| punchTripleRight |
| punchTripleBottom |
| punchQuadLeft |
| punchQuadTop |
| punchQuadRight |
| punchQuadBottom |
| fold |
| trim |
| bale |
| bookletMaker |
| coat |
| laminate |
| trimAfterPages |
| trimAfterDocuments |
| trimAfterCopies |
| trimAfterJob |
printMultipageLayout values
| Member |
| clockwiseFromTopLeft |
| counterclockwiseFromTopLeft |
| counterclockwiseFromTopRight |
| clockwiseFromTopRight |
| counterclockwiseFromBottomLeft |
| clockwiseFromBottomLeft |
| counterclockwiseFromBottomRight |
| clockwiseFromBottomRight |
| unknownFutureValue |
printOrientation values
| Member |
| portrait |
| landscape |
| reverseLandscape |
| reversePortrait |
| unknownFutureValue |
printQuality values
| Member |
| low |
| medium |
| high |
| unknownFutureValue |
printScaling values
| Member |
| auto |
| shrinkToFit |
| fill |
| fit |
| none |
| unknownFutureValue |
userFlowType values
| Member |
| signUp |
| signIn |
| signUpOrSignIn |
| passwordReset |
| profileUpdate |
| resourceOwner |
| unknownFutureValue |
identityUserFlowAttributeDataType values
| Member |
| string |
| boolean |
| int64 |
| stringCollection |
| dateTime |
| unknownFutureValue |
identityUserFlowAttributeType values
| Member |
| builtIn |
| custom |
| required |
| unknownFutureValue |
| Member |
| textBox |
| dateTimeDropDown |
| radioSingleSelect |
| dropdownSingleSelect |
| emailBox |
| checkboxMultiSelect |
| Member |
| text |
| radioSingleSelect |
| checkboxMultiSelect |
| boolean |
| unknownFutureValue |
teamworkActivityTopicSource values
provisioningResult values
| Member |
| success |
| failure |
| skipped |
| warning |
| unknownFutureValue |
provisioningStepType values
| Member |
| import |
| scoping |
| matching |
| processing |
| referenceResolution |
| export |
| unknownFutureValue |
provisioningStatusErrorCategory values
| Member |
| failure |
| nonServiceFailure |
| success |
| unknownFutureValue |
provisioningAction values
| Member |
| other |
| create |
| delete |
| disable |
| update |
| stagedDelete |
| unknownFutureValue |
initiatorType values
| Member |
| user |
| application |
| system |
| unknownFutureValue |
teamworkApplicationIdentityType values
| Member |
| aadApplication |
| bot |
| tenantBot |
| office365Connector |
| outgoingWebhook |
| unknownFutureValue |
teamworkConversationIdentityType values
| Member |
| team |
| channel |
| chat |
| unknownFutureValue |
teamworkUserIdentityType values
| Member |
| aadUser |
| onPremiseAadUser |
| anonymousGuest |
| federatedUser |
| personalMicrosoftAccountUser |
| skypeUser |
| phoneUser |
| unknownFutureValue |
| emailUser |
postType values
| Member |
| regular |
| quick |
| strategic |
| unknownFutureValue |
searchAlterationType values
| Member |
| modification |
| suggestion |
serviceHealthClassificationType values
| Member |
| advisory |
| incident |
| unknownFutureValue |
serviceHealthOrigin values
| Member |
| microsoft |
| thirdParty |
| customer |
| unknownFutureValue |
featureTargetType values
| Member |
| group |
| administrativeUnit |
| role |
| unknownFutureValue |
serviceHealthStatus values
| Member |
| serviceOperational |
| investigating |
| restoringService |
| verifyingService |
| serviceRestored |
| postIncidentReviewPublished |
| serviceDegradation |
| serviceInterruption |
| extendedRecovery |
| falsePositive |
| investigationSuspended |
| resolved |
| mitigatedExternal |
| mitigated |
| resolvedExternal |
| confirmed |
| reported |
| unknownFutureValue |
serviceUpdateCategory values
| Member |
| preventOrFixIssue |
| planForChange |
| stayInformed |
| unknownFutureValue |
serviceUpdateSeverity values
| Member |
| normal |
| high |
| critical |
| unknownFutureValue |
subjectRightsRequestStage values
| Member |
| contentRetrieval |
| contentReview |
| generateReport |
| contentDeletion |
| caseResolved |
| unknownFutureValue |
| approval |
subjectRightsRequestStageStatus values
| Member |
| notStarted |
| current |
| completed |
| failed |
| unknownFutureValue |
subjectRightsRequestStatus values
| Member |
| active |
| closed |
| unknownFutureValue |
subjectRightsRequestType values
| Member |
| export |
| delete |
| access |
| tagForAction |
| unknownFutureValue |
dataSubjectType values
| Member |
| customer |
| currentEmployee |
| formerEmployee |
| prospectiveEmployee |
| student |
| teacher |
| faculty |
| other |
| unknownFutureValue |
advancedConfigState values
| Member |
| default |
| enabled |
| disabled |
| unknownFutureValue |
callRecordingStatus values
| Member |
| success |
| failure |
| initial |
| chunkFinished |
| unknownFutureValue |
endUserNotificationPreference values
| Member |
| unknown |
| microsoft |
| custom |
| unknownFutureValue |
endUserNotificationSettingType values
| Member |
| unknown |
| noTraining |
| trainingSelected |
| noNotification |
| unknownFutureValue |
endUserNotificationType values
| Member |
| unknown |
| positiveReinforcement |
| noTraining |
| trainingAssignment |
| trainingReminder |
| unknownFutureValue |
notificationDeliveryFrequency values
| Member |
| unknown |
| weekly |
| biWeekly |
| unknownFutureValue |
notificationDeliveryPreference values
| Member |
| unknown |
| deliverImmedietly |
| deliverAfterCampaignEnd |
| unknownFutureValue |
oAuthAppScope values
| Member |
| unknown |
| readCalendar |
| readContact |
| readMail |
| readAllChat |
| readAllFile |
| readAndWriteMail |
| sendMail |
| unknownFutureValue |
targettedUserType values
| Member |
| unknown |
| clicked |
| compromised |
| allUsers |
| unknownFutureValue |
trainingAssignedTo values
| Member |
| none |
| allUsers |
| clickedPayload |
| compromised |
| reportedPhish |
| readButNotClicked |
| didNothing |
| unknownFutureValue |
trainingAvailabilityStatus values
| Member |
| unknown |
| notAvailable |
| available |
| archive |
| delete |
| unknownFutureValue |
trainingCompletionDuration values
| Member |
| week |
| fortnite |
| month |
| unknownFutureValue |
trainingSettingType values
| Member |
| microsoftCustom |
| microsoftManaged |
| noTraining |
| custom |
| unknownFutureValue |
trainingType values
| Member |
| unknown |
| phishing |
| unknownFutureValue |
| Member |
| unknown |
| sms |
| email |
| teams |
| unknownFutureValue |
trainingStatus values
| Member |
| unknown |
| assigned |
| inProgress |
| completed |
| overdue |
| unknownFutureValue |
teamworkCallEventType values
| Member |
| call |
| meeting |
| screenShare |
| unknownFutureValue |
bookingReminderRecipients values
| Member |
| allAttendees |
| staff |
| customer |
| unknownFutureValue |
bookingStaffRole values
| Member |
| guest |
| administrator |
| viewer |
| externalGuest |
| unknownFutureValue |
| scheduler |
| teamMember |
| Member |
| text |
| radioButton |
| unknownFutureValue |
bookingPriceType values
| Member |
| undefined |
| fixedPrice |
| startingAt |
| hourly |
| free |
| priceVaries |
| callUs |
| notSet |
| unknownFutureValue |
accessReviewHistoryStatus values
| Member |
| done |
| inprogress |
| error |
| requested |
| unknownFutureValue |
accessReviewHistoryDecisionFilter values
| Member |
| approve |
| deny |
| notReviewed |
| dontKnow |
| notNotified |
| unknownFutureValue |
weakAlgorithms values
| Member |
| rsaSha1 |
| unknownFutureValue |
authenticationProtocol values
longRunningOperationStatus values
| Member |
| notStarted |
| running |
| succeeded |
| failed |
| unknownFutureValue |
delegatedAdminAccessAssignmentStatus values
| Member |
| pending |
| active |
| deleting |
| deleted |
| error |
| unknownFutureValue |
delegatedAdminAccessContainerType values
| Member |
| securityGroup |
| unknownFutureValue |
delegatedAdminRelationshipOperationType values
| Member |
| delegatedAdminAccessAssignmentUpdate |
| unknownFutureValue |
delegatedAdminRelationshipRequestAction values
| Member |
| lockForApproval |
| approve |
| terminate |
| unknownFutureValue |
| reject |
delegatedAdminRelationshipRequestStatus values
| Member |
| created |
| pending |
| succeeded |
| failed |
| unknownFutureValue |
delegatedAdminRelationshipStatus values
| Member |
| activating |
| active |
| approvalPending |
| approved |
| created |
| expired |
| expiring |
| terminated |
| terminating |
| terminationRequested |
| unknownFutureValue |
onPremisesDirectorySynchronizationDeletionPreventionType values
| Member |
| disabled |
| enabledForCount |
| enabledForPercentage |
searchContent values
| Member |
| sharedContent |
| privateContent |
| unknownFutureValue |
authenticationMethodsPolicyMigrationState values
| Member |
| premigration |
| migrationInProgress |
| migrationComplete |
| unknownFutureValue |
authenticationStrengthPolicyType values
| Member |
| builtIn |
| custom |
| unknownFutureValue |
authenticationStrengthRequirements values
| Member |
| none |
| mfa |
| unknownFutureValue |
authenticationMethodModes values
| Member |
| password |
| voice |
| hardwareOath |
| softwareOath |
| sms |
| fido2 |
| windowsHelloForBusiness |
| microsoftAuthenticatorPush |
| deviceBasedPush |
| temporaryAccessPassOneTime |
| temporaryAccessPassMultiUse |
| email |
| x509CertificateSingleFactor |
| x509CertificateMultiFactor |
| federatedSingleFactor |
| federatedMultiFactor |
| unknownFutureValue |
baseAuthenticationMethod values
| Member |
| password |
| voice |
| hardwareOath |
| softwareOath |
| sms |
| fido |
| microsoftAuthenticator |
| windowsHelloForBusiness |
| temporaryAccessPass |
| email |
| x509Certificate |
| federation |
| unknownFutureValue |
browserSharedCookieSourceEnvironment values
| Member |
| microsoftEdge |
| internetExplorer11 |
| both |
| unknownFutureValue |
browserSiteCompatibilityMode values
| Member |
| default |
| internetExplorer8Enterprise |
| internetExplorer7Enterprise |
| internetExplorer11 |
| internetExplorer10 |
| internetExplorer9 |
| internetExplorer8 |
| internetExplorer7 |
| internetExplorer5 |
| unknownFutureValue |
browserSiteMergeType values
| Member |
| noMerge |
| default |
| unknownFutureValue |
browserSiteTargetEnvironment values
| Member |
| internetExplorerMode |
| internetExplorer11 |
| microsoftEdge |
| configurable |
| none |
| unknownFutureValue |
browserSiteStatus values
| Member |
| published |
| pendingAdd |
| pendingEdit |
| pendingDelete |
| unknownFutureValue |
browserSharedCookieStatus values
| Member |
| published |
| pendingAdd |
| pendingEdit |
| pendingDelete |
| unknownFutureValue |
browserSiteListStatus values
| Member |
| draft |
| published |
| pending |
| unknownFutureValue |
chatMessageActions values
| Member |
| reactionAdded |
| reactionRemoved |
| actionUndefined |
| unknownFutureValue |
| Member |
| BaseAttributeName |
| ComplexObjectDefinition |
| IsContainer |
| IsCustomerDefined |
| IsDomainQualified |
| LinkPropertyNames |
| LinkTypeName |
| MaximumLength |
| ReferencedProperty |
attributeFlowBehavior values
| Member |
| FlowWhenChanged |
| FlowAlways |
attributeFlowType values
| Member |
| Always |
| ObjectAddOnly |
| MultiValueAddOnly |
| ValueAddOnly |
| AttributeAddOnly |
attributeMappingSourceType values
| Member |
| Attribute |
| Constant |
| Function |
directoryDefinitionDiscoverabilities values
| Member |
| None |
| AttributeNames |
| AttributeDataTypes |
| AttributeReadOnly |
| ReferenceAttributes |
| UnknownFutureValue |
attributeType values
| Member |
| String |
| Integer |
| Reference |
| Binary |
| Boolean |
| DateTime |
mutability values
| Member |
| ReadWrite |
| ReadOnly |
| Immutable |
| WriteOnly |
| Member |
| PropertyNameAccountEnabled |
| PropertyNameSoftDeleted |
| IsSoftDeletionSupported |
| IsSynchronizeAllSupported |
| ConnectorDataStorageRequired |
| Extensions |
| BaseObjectName |
objectFlowTypes values
| Member |
| None |
| Add |
| Update |
| Delete |
| Member |
| EscrowBehavior |
| DisableMonitoringForChanges |
| OriginalJoiningProperty |
| Disposition |
| IsCustomerDefined |
| ExcludeFromReporting |
| Unsynchronized |
| Member |
| GalleryApplicationIdentifier |
| GalleryApplicationKey |
| IsOAuthEnabled |
| IsSynchronizationAgentAssignmentRequired |
| IsSynchronizationAgentRequired |
| IsSynchronizationInPreview |
| OAuthSettings |
| SynchronizationLearnMoreIbizaFwLink |
| ConfigurationFields |
synchronizationSecret values
| Member |
| None |
| UserName |
| Password |
| SecretToken |
| AppKey |
| BaseAddress |
| ClientIdentifier |
| ClientSecret |
| SingleSignOnType |
| Sandbox |
| Url |
| Domain |
| ConsumerKey |
| ConsumerSecret |
| TokenKey |
| TokenExpiration |
| Oauth2AccessToken |
| Oauth2AccessTokenCreationTime |
| Oauth2RefreshToken |
| SyncAll |
| InstanceName |
| Oauth2ClientId |
| Oauth2ClientSecret |
| CompanyId |
| UpdateKeyOnSoftDelete |
| SynchronizationSchedule |
| SystemOfRecord |
| SandboxName |
| EnforceDomain |
| SyncNotificationSettings |
| SkipOutOfScopeDeletions |
| Oauth2AuthorizationCode |
| Oauth2RedirectUri |
| ApplicationTemplateIdentifier |
| Oauth2TokenExchangeUri |
| Oauth2AuthorizationUri |
| AuthenticationType |
| Server |
| PerformInboundEntitlementGrants |
| HardDeletesEnabled |
| SyncAgentCompatibilityKey |
| SyncAgentADContainer |
| ValidateDomain |
| TestReferences |
| ConnectionString |
synchronizationStatusCode values
| Member |
| NotConfigured |
| NotRun |
| Active |
| Paused |
| Quarantine |
synchronizationTaskExecutionResult values
| Member |
| Succeeded |
| Failed |
| EntryLevelErrors |
stagedFeatureName values
| Member |
| passthroughAuthentication |
| seamlessSso |
| passwordHashSync |
| emailAsAlternateId |
| unknownFutureValue |
| certificateBasedAuthentication |
| multiFactorAuthentication |
synchronizationJobRestartScope values
| Member |
| None |
| ConnectorDataStore |
| Escrows |
| Watermark |
| QuarantineState |
| Full |
| ForceDeletes |
quarantineReason values
| Member |
| EncounteredBaseEscrowThreshold |
| EncounteredTotalEscrowThreshold |
| EncounteredEscrowProportionThreshold |
| EncounteredQuarantineException |
| Unknown |
| QuarantinedOnDemand |
| TooManyDeletes |
| IngestionInterrupted |
synchronizationScheduleState values
| Member |
| Active |
| Disabled |
| Paused |
scopeOperatorMultiValuedComparisonType values
scopeOperatorType values
entryExportStatus values
| Member |
| Noop |
| Success |
| RetryableError |
| PermanentError |
| Error |
entrySyncOperation values
| Member |
| None |
| Add |
| Delete |
| Update |
escrowBehavior values
| Member |
| Default |
| IgnoreLookupReferenceResolutionFailure |
synchronizationDisposition values
| Member |
| Normal |
| Discard |
| Escrow |
outlierMemberType values
| Member |
| user |
| unknownFutureValue |
outlierContainerType values
| Member |
| group |
| unknownFutureValue |
authenticationMethodFeature values
| Member |
| ssprRegistered |
| ssprEnabled |
| ssprCapable |
| passwordlessCapable |
| mfaCapable |
| unknownFutureValue |
featureType values
| Member |
| registration |
| reset |
| unknownFutureValue |
includedUserRoles values
| Member |
| all |
| privilegedAdmin |
| admin |
| user |
| unknownFutureValue |
includedUserTypes values
| Member |
| all |
| member |
| guest |
| unknownFutureValue |
signInUserType values
| Member |
| member |
| guest |
| unknownFutureValue |
userDefaultAuthenticationMethod values
| Member |
| push |
| oath |
| voiceMobile |
| voiceAlternateMobile |
| voiceOffice |
| sms |
| none |
| unknownFutureValue |
layoutTemplateType values
| Member |
| default |
| verticalSplit |
| unknownFutureValue |
meetingAudience values
| Member |
| everyone |
| organization |
| unknownFutureValue |
virtualEventAttendeeRegistrationStatus values
| Member |
| registered |
| canceled |
| waitlisted |
| pendingApproval |
| rejectedByOrganizer |
| unknownFutureValue |
virtualEventStatus values
| Member |
| draft |
| published |
| canceled |
socialIdentitySourceType values
| Member |
| facebook |
| unknownFutureValue |
| Member |
| android |
| androidForWork |
| iOS |
| macOS |
| windowsPhone81 |
| windows81AndLater |
| windows10AndLater |
| androidWorkProfile |
| unknown |
| androidAOSP |
| androidMobileApplicationManagement |
| iOSMobileApplicationManagement |
| unknownFutureValue |
educationAssignmentStatus values
| Member |
| draft |
| published |
| assigned |
| unknownFutureValue |
| inactive |
b2bIdentityProvidersType values
| Member |
| azureActiveDirectory |
| externalFederation |
| socialIdentityProviders |
| emailOneTimePasscode |
| microsoftAccount |
| defaultConfiguredIdp |
| unknownFutureValue |
bookingStaffMembershipStatus values
| Member |
| active |
| pendingAcceptance |
| rejectedByStaff |
| unknownFutureValue |
conditionalAccessInsiderRiskLevels values
| Member |
| minor |
| moderate |
| elevated |
| unknownFutureValue |
bookingPageAccessControl values
| Member |
| unrestricted |
| restrictedToOrganization |
| unknownFutureValue |
bookingsServiceAvailabilityType values
| Member |
| bookWhenStaffAreFree |
| notBookable |
| customWeeklyHours |
| unknownFutureValue |
nativeAuthenticationApisEnabled values
| Member |
| none |
| all |
| unknownFutureValue |
conditionalAccessTransferMethods values
| Member |
| none |
| deviceCodeFlow |
| authenticationTransfer |
| unknownFutureValue |
confirmedBy values
| Member |
| none |
| user |
| manager |
| unknownFutureValue |
timeCardState values
| Member |
| clockedIn |
| onBreak |
| clockedOut |
| unknownFutureValue |
scheduleChangeState values
| Member |
| pending |
| approved |
| declined |
| unknownFutureValue |
scheduleChangeRequestActor values
| Member |
| sender |
| recipient |
| manager |
| system |
| unknownFutureValue |
| Member |
| unknown |
| windows |
| macOS |
| iOS |
| android |
| linux |
| unknownFutureValue |
whatIfAnalysisReasons values
| Member |
| notSet |
| notEnoughInformation |
| invalidCondition |
| users |
| workloadIdentities |
| application |
| userActions |
| authenticationContext |
| devicePlatform |
| devices |
| clientApps |
| ___location |
| signInRisk |
| emptyPolicy |
| invalidPolicy |
| policyNotEnabled |
| userRisk |
| time |
| insiderRisk |
| authenticationFlow |
| unknownFutureValue |
insiderRiskLevel values
| Member |
| none |
| minor |
| moderate |
| elevated |
| unknownFutureValue |
userAction values
| Member |
| registerSecurityInformation |
| registerOrJoinDevices |
| unknownFutureValue |
restoreJobType values
| Member |
| standard |
| bulk |
| unknownFutureValue |
protectionSource values
| Member |
| none |
| manual |
| dynamicRule |
| unknownFutureValue |
engagementConversationMessageReactionType values
| Member |
| like |
| love |
| celebrate |
| thank |
| laugh |
| sad |
| happy |
| excited |
| smile |
| silly |
| intenseLaugh |
| starStruck |
| goofy |
| thinking |
| surprised |
| mindBlown |
| scared |
| crying |
| shocked |
| angry |
| agree |
| praise |
| takingNotes |
| heartBroken |
| support |
| confirmed |
| watching |
| brain |
| medal |
| bullseye |
| unknownFutureValue |
callEventType values
| Member |
| callStarted |
| callEnded |
| unknownFutureValue |
| rosterUpdated |