organization resource type

Important: APIs under the / beta version in Microsoft Graph are in preview and are subject to change. Use of these APIs in production applications is not supported. Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

The organization resource represents an instance of global settings and resources which operate and are provisioned at the tenant-level.

Methods

Method Return Type Description
List organizations organization collection List properties and relationships of the organization objects.
Get organization organization Read properties and relationships of the organization object.
Update organization organization Update the properties of a organization object.
setMobileDeviceManagementAuthority action Int32 Not yet documented
getEncryptionPublicKey function String Not yet documented
uploadDepToken action None Not yet documented
syncWithAppleDeviceEnrollmentProgram action None Not yet documented
toggleOnPremisesCertificateConnector action Int32 Not yet documented
List depOnboardingSettings depOnboardingSetting collection List properties and relationships of the depOnboardingSetting objects.
List appleVolumePurchaseProgramTokens appleVolumePurchaseProgramToken collection List properties and relationships of the appleVolumePurchaseProgramToken objects.

Properties

Property Type Description
id String The GUID for the object.
mobileDeviceManagementAuthority String Mobile device management authority. Possible values are: unknown, intune, sccm, office365.
defaultDeviceEnrollmentRestrictions defaultDeviceEnrollmentRestrictions Device enrollment restrictions applied to all users by default
defaultDeviceEnrollmentWindowsHelloForBusinessSettings defaultDeviceEnrollmentWindowsHelloForBusinessSettings Windows Hello for Business settings applied to all users by default
defaultDeviceEnrollmentLimit Int32 Device enrollment limit applied to all users by default
certificateConnectorSetting certificateConnectorSetting Certificate connector setting.

Relationships

Relationship Type Description
depOnboardingSettings depOnboardingSetting collection Intune only supports using 1 DEP token per tenant. This collections will support potential future development of multiple DEP tokens per-tenant.
appleVolumePurchaseProgramTokens appleVolumePurchaseProgramToken collection Not yet documented

JSON Representation

Here is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.organization",
  "id": "String (identifier)",
  "mobileDeviceManagementAuthority": "String",
  "defaultDeviceEnrollmentRestrictions": {
    "@odata.type": "microsoft.graph.defaultDeviceEnrollmentRestrictions",
    "iosRestrictions": {
      "@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestrictions",
      "platformBlocked": true,
      "personalDeviceEnrollmentBlocked": true,
      "osMinimumVersion": "String",
      "osMaximumVersion": "String"
    },
    "windowsRestrictions": {
      "@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestrictions",
      "platformBlocked": true,
      "personalDeviceEnrollmentBlocked": true,
      "osMinimumVersion": "String",
      "osMaximumVersion": "String"
    },
    "windowsMobileRestrictions": {
      "@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestrictions",
      "platformBlocked": true,
      "personalDeviceEnrollmentBlocked": true,
      "osMinimumVersion": "String",
      "osMaximumVersion": "String"
    },
    "androidRestrictions": {
      "@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestrictions",
      "platformBlocked": true,
      "personalDeviceEnrollmentBlocked": true,
      "osMinimumVersion": "String",
      "osMaximumVersion": "String"
    },
    "androidForWorkRestrictions": {
      "@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestrictions",
      "platformBlocked": true,
      "personalDeviceEnrollmentBlocked": true,
      "osMinimumVersion": "String",
      "osMaximumVersion": "String"
    },
    "macRestrictions": {
      "@odata.type": "microsoft.graph.deviceEnrollmentPlatformRestrictions",
      "platformBlocked": true,
      "personalDeviceEnrollmentBlocked": true,
      "osMinimumVersion": "String",
      "osMaximumVersion": "String"
    }
  },
  "defaultDeviceEnrollmentWindowsHelloForBusinessSettings": {
    "@odata.type": "microsoft.graph.defaultDeviceEnrollmentWindowsHelloForBusinessSettings",
    "pinMinimumLength": 1024,
    "pinMaximumLength": 1024,
    "pinUppercaseLettersUsage": "String",
    "pinLowercaseLettersUsage": "String",
    "pinSpecialCharactersUsage": "String",
    "windowsHelloForBusiness": "String",
    "securityDeviceRequired": true,
    "unlockWithBiometricsEnabled": true,
    "mobilePinSignInEnabled": true,
    "pinPreviousBlockCount": 1024,
    "pinExpirationInDays": 1024,
    "enhancedBiometrics": "String"
  },
  "defaultDeviceEnrollmentLimit": 1024,
  "certificateConnectorSetting": {
    "@odata.type": "microsoft.graph.certificateConnectorSetting",
    "status": 1024,
    "certExpiryTime": "String (timestamp)",
    "enrollmentError": "String",
    "lastConnectorConnectionTime": "String (timestamp)",
    "connectorVersion": "String",
    "lastUploadVersion": 1024
  }
}