Update windowsInformationProtectionAppLockerFile

Important: APIs under the /beta version in Microsoft Graph are in preview and are subject to change. Use of these APIs in production applications is not supported. Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

Update the properties of a windowsInformationProtectionAppLockerFile object.


One of the following permission scopes is required to execute this API:


HTTP Request

PATCH /deviceAppManagement/windowsInformationProtectionPolicies{windowsInformationProtectionPolicyId}/exemptAppLockerFiles{windowsInformationProtectionAppLockerFileId}
PATCH /deviceAppManagement/windowsInformationProtectionPolicies{windowsInformationProtectionPolicyId}/allowedAppLockerFiles{windowsInformationProtectionAppLockerFileId}
PATCH /deviceAppManagement/mdmWindowsInformationProtectionPolicies{mdmWindowsInformationProtectionPolicyId}/exemptAppLockerFiles{windowsInformationProtectionAppLockerFileId}
PATCH /deviceAppManagement/mdmWindowsInformationProtectionPolicies{mdmWindowsInformationProtectionPolicyId}/allowedAppLockerFiles{windowsInformationProtectionAppLockerFileId}

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

In the request body, supply a JSON representation of a windowsInformationProtectionAppLockerFile object. The following table shows the properties that are required when you create a windowsInformationProtectionAppLockerFile.

Property Type Description
displayName String The friendly name
fileHash String SHA256 hash of the file
file Binary File as a byte array
id String Key of the entity.
version String Version of the entity.


If successful, this method returns a 200 OK response code and an updated windowsInformationProtectionAppLockerFile object in the response body.



Here is an example of the request.

PATCH https://graph.microsoft.com/beta/deviceAppManagement/windowsInformationProtectionPolicies{windowsInformationProtectionPolicyId}/exemptAppLockerFiles{windowsInformationProtectionAppLockerFileId}
Content-type: application/json
Content-length: 131

  "displayName": "Display Name value",
  "fileHash": "File Hash value",
  "file": "ZmlsZQ==",
  "version": "Version value"


Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 260

  "@odata.type": "#microsoft.graph.windowsInformationProtectionAppLockerFile",
  "displayName": "Display Name value",
  "fileHash": "File Hash value",
  "file": "ZmlsZQ==",
  "id": "d81f0e40-0e40-d81f-400e-1fd8400e1fd8",
  "version": "Version value"