Update directoryObject

Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

Update the properties of a directoryObject object.


One of the following scopes is required to execute this API:


HTTP Request

PATCH /deviceAppManagement/managedAppPolicies/{managedAppPolicyId}/targetedSecurityGroups/{directoryObjectId}
PATCH /deviceAppManagement/managedAppPolicies/{managedAppPolicyId}/microsoft.graph.targetedManagedAppProtection/targetedSecurityGroups/{directoryObjectId}
PATCH /deviceAppManagement/managedAppPolicies/{managedAppPolicyId}/microsoft.graph.targetedManagedAppConfiguration/targetedSecurityGroups/{directoryObjectId}

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

In the request body, supply a JSON representation of a directoryObject object. The following table shows the properties that are required when you create a directoryObject.

Property Type Description
id String The directory object identifier


If successful, this method returns a 200 OK response code and an updated directoryObject object in the response body.



Here is an example of the request.

PATCH https://graph.microsoft.com/beta/deviceAppManagement/managedAppPolicies/{managedAppPolicyId}/targetedSecurityGroups/{directoryObjectId}
Content-type: application/json
Content-length: 2



Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 106

  "@odata.type": "#microsoft.graph.directoryObject",
  "id": "67d4444d-444d-67d4-4d44-d4674d44d467"