Update androidManagedAppProtection

Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

Update the properties of a androidManagedAppProtection object.

Prerequisites

One of the following scopes is required to execute this API:

DeviceManagementApps.ReadWrite.All

HTTP Request

PATCH /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

In the request body, supply a JSON representation of a androidManagedAppProtection object. The following table shows the properties that are required when you create a androidManagedAppProtection.

Property Type Description
displayName String Policy display name. Inherited from managedAppPolicy
description String The policy's description. Inherited from managedAppPolicy
createdDateTime DateTimeOffset The date and time the policy was created. Inherited from managedAppPolicy
lastModifiedDateTime DateTimeOffset Last time the policy was modified. Inherited from managedAppPolicy
lastModifiedTime DateTimeOffset DEPRECATED: Last time the policy was modified. Inherited from managedAppPolicy
deployedAppCount Int32 Count of apps to which the current policy is deployed. Inherited from managedAppPolicy
id String Key of the entity. Inherited from managedAppPolicy
version String Version of the entity. Inherited from managedAppPolicy
periodOfflineBeforeAccessCheck Duration The period after which access is checked when the device is not connected to the internet. Inherited from managedAppProtection
periodOnlineBeforeAccessCheck Duration The period after which access is checked when the device is connected to the internet. Inherited from managedAppProtection
allowedInboundDataTransferSources String Sources from which data is allowed to be transferred. Inherited from managedAppProtection Possible values are: allApps, managedApps, none.
allowedOutboundDataTransferDestinations String Destinations to which data is allowed to be transferred. Inherited from managedAppProtection Possible values are: allApps, managedApps, none.
organizationalCredentialsRequired Boolean Indicates whether organizational credentials are required for app use. Inherited from managedAppProtection
allowedOutboundClipboardSharingLevel String The level to which the clipboard may be shared between apps on the managed device. Inherited from managedAppProtection Possible values are: allApps, managedAppsWithPasteIn, managedApps, blocked.
dataBackupBlocked Boolean Indicates whether the backup of a managed app's data is blocked. Inherited from managedAppProtection
deviceComplianceRequired Boolean Indicates whether device compliance is required. Inherited from managedAppProtection
managedBrowserToOpenLinksRequired Boolean Indicates whether internet links should be opened in the managed browser app. Inherited from managedAppProtection
saveAsBlocked Boolean Indicates whether users may use the "Save As" menu item to save a copy of protected files. Inherited from managedAppProtection
periodOfflineBeforeWipeIsEnforced Duration The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped. Inherited from managedAppProtection
pinRequired Boolean Indicates whether an app-level pin is required. Inherited from managedAppProtection
maximumPinRetries Int32 Maximum number of incorrect pin retry attempts before the managed app is wiped. Inherited from managedAppProtection
simplePinBlocked Boolean Indicates whether simplePin is blocked. Inherited from managedAppProtection
minimumPinLength Int32 Minimum pin length required for an app-level pin if PinRequired is set to True Inherited from managedAppProtection
pinCharacterSet String Character set which may be used for an app-level pin if PinRequired is set to True. Inherited from managedAppProtection Possible values are: any, numeric, alphanumeric, alphanumericAndSymbol.
allowedDataStorageLocations String collection Data storage locations where a user may store managed data. Inherited from managedAppProtection Possible values are: oneDriveForBusiness, sharePoint, localStorage.
contactSyncBlocked Boolean Indicates whether contacts can be synced to the user's device. Inherited from managedAppProtection
printBlocked Boolean Indicates whether printing is allowed from managed apps. Inherited from managedAppProtection
fingerprintBlocked Boolean Indicates whether use of the fingerprint reader is allowed in place of a pin if PinRequired is set to True. Inherited from managedAppProtection
disableAppPinIfDevicePinIsSet Boolean Indicates whether use of the app pin is required if the device pin is set. Inherited from managedAppProtection
minimumRequiredOsVersion String Versions less than the specified version will block the managed app from accessing company data. Inherited from managedAppProtection
minimumWarningOsVersion String Versions less than the specified version will result in warning message on the managed app from accessing company data. Inherited from managedAppProtection
minimumRequiredAppVersion String Versions less than the specified version will block the managed app from accessing company data. Inherited from managedAppProtection
minimumWarningAppVersion String Versions less than the specified version will result in warning message on the managed app. Inherited from managedAppProtection
targetedSecurityGroupsCount Int32 The number of groups to which the configuration is deployed. Read only property. Inherited from targetedManagedAppProtection
targetedSecurityGroupIds String collection List of security group IDs to which the configuration is deployed Inherited from targetedManagedAppProtection
screenCaptureBlocked Boolean Indicates whether a managed user can take screen captures of managed apps
encryptAppData Boolean Indicates whether application data for managed apps should be encrypted

Response

If successful, this method returns a 200 OK response code and an updated androidManagedAppProtection object in the response body.

Example

Request

Here is an example of the request.

PATCH https://graph.microsoft.com/beta/deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}
Content-type: application/json
Content-length: 1579

{
  "displayName": "Display Name value",
  "description": "Description value",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "lastModifiedTime": "2017-01-01T00:03:18.5958204-08:00",
  "deployedAppCount": 0,
  "version": "Version value",
  "periodOfflineBeforeAccessCheck": "-PT17.1357909S",
  "periodOnlineBeforeAccessCheck": "PT35.0018757S",
  "allowedInboundDataTransferSources": "managedApps",
  "allowedOutboundDataTransferDestinations": "managedApps",
  "organizationalCredentialsRequired": true,
  "allowedOutboundClipboardSharingLevel": "managedAppsWithPasteIn",
  "dataBackupBlocked": true,
  "deviceComplianceRequired": true,
  "managedBrowserToOpenLinksRequired": true,
  "saveAsBlocked": true,
  "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
  "pinRequired": true,
  "maximumPinRetries": 1,
  "simplePinBlocked": true,
  "minimumPinLength": 0,
  "pinCharacterSet": "numeric",
  "allowedDataStorageLocations": [
    "sharePoint"
  ],
  "contactSyncBlocked": true,
  "printBlocked": true,
  "fingerprintBlocked": true,
  "disableAppPinIfDevicePinIsSet": true,
  "minimumRequiredOsVersion": "Minimum Required Os Version value",
  "minimumWarningOsVersion": "Minimum Warning Os Version value",
  "minimumRequiredAppVersion": "Minimum Required App Version value",
  "minimumWarningAppVersion": "Minimum Warning App Version value",
  "targetedSecurityGroupsCount": 11,
  "targetedSecurityGroupIds": [
    "Targeted Security Group Ids value"
  ],
  "screenCaptureBlocked": true,
  "encryptAppData": true
}

Response

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 1753

{
  "@odata.type": "#microsoft.graph.androidManagedAppProtection",
  "displayName": "Display Name value",
  "description": "Description value",
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "lastModifiedTime": "2017-01-01T00:03:18.5958204-08:00",
  "deployedAppCount": 0,
  "id": "cf517ced-7ced-cf51-ed7c-51cfed7c51cf",
  "version": "Version value",
  "periodOfflineBeforeAccessCheck": "-PT17.1357909S",
  "periodOnlineBeforeAccessCheck": "PT35.0018757S",
  "allowedInboundDataTransferSources": "managedApps",
  "allowedOutboundDataTransferDestinations": "managedApps",
  "organizationalCredentialsRequired": true,
  "allowedOutboundClipboardSharingLevel": "managedAppsWithPasteIn",
  "dataBackupBlocked": true,
  "deviceComplianceRequired": true,
  "managedBrowserToOpenLinksRequired": true,
  "saveAsBlocked": true,
  "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
  "pinRequired": true,
  "maximumPinRetries": 1,
  "simplePinBlocked": true,
  "minimumPinLength": 0,
  "pinCharacterSet": "numeric",
  "allowedDataStorageLocations": [
    "sharePoint"
  ],
  "contactSyncBlocked": true,
  "printBlocked": true,
  "fingerprintBlocked": true,
  "disableAppPinIfDevicePinIsSet": true,
  "minimumRequiredOsVersion": "Minimum Required Os Version value",
  "minimumWarningOsVersion": "Minimum Warning Os Version value",
  "minimumRequiredAppVersion": "Minimum Required App Version value",
  "minimumWarningAppVersion": "Minimum Warning App Version value",
  "targetedSecurityGroupsCount": 11,
  "targetedSecurityGroupIds": [
    "Targeted Security Group Ids value"
  ],
  "screenCaptureBlocked": true,
  "encryptAppData": true
}