device resource type

Represents a device registered in the organization. Devices can also be created in the cloud using the Device Registration Service or by Intune. They're used by conditional access policies for multi-factor authentication. These devices can range from desktop and laptop machines to phones and tablets. Inherits from directoryObject.

This resource lets you add your own data to custom properties using extensions.

Methods

Method Return Type Description
Create device device Create a new registered device in the directory.
Get device device Read properties and relationships of a device object.
List devices device collection Retrieve a list of devices registered in the directory.
Update device device Update the properties of a device object.
Delete device None Delete a device object.
Create registeredOwner directoryObject Add a user as a new owner of the device by posting to the registeredOwners navigation property.
List registeredOwners directoryObject collection Get the users that are registered owners of the device from the registeredOwners navigation property.
Create registeredUser directoryObject Add a registered user for the device by posting to the registeredUsers navigation property.
List registeredUsers directoryObject collection Get the registered users of the device from the registeredUsers navigation property.
Open extensions
Create open extension openTypeExtension Create an open extension and add custom properties to a new or existing resource.
Get open extension openTypeExtension collection Get an open extension identified by the extension name.
Schema extensions
Add schema extension values Create a schema extension definition and then use it to add custom typed data to a resource.

Properties

Property Type Description
accountEnabled Boolean true if the account is enabled; otherwise, false. Required.
alternativeSecurityIds alternativeSecurityId collection The any operator is required for filter expressions on multi-valued properties. Not nullable. Required.
approximateLastSignInDateTime DateTimeOffset The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'
deviceId Guid Unique client specified GUID to represent the device. Required.
deviceMetadata String
deviceVersion Int32
displayName String The display name for the device. Required.
id String The unique identifier for the device. Inherited from directoryObject. Key, Not nullable. Read-only.
isCompliant Boolean true if the device complies with Mobile Device Management (MDM) policies; otherwise, false.
isManaged Boolean true if the device is managed by a Mobile Device Management (MDM) app such as Intune; otherwise, false.
onPremisesLastSyncDateTime DateTimeOffset The last time at which the object was synced with the on-premises directory.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'
onPremisesSyncEnabled Boolean true if this object is synced from an on-premises directory; false if this object was originally synced from an on-premises directory but is no longer synced; null if this object has never been synced from an on-premises directory (default).
operatingSystem String The type of operating system on the device. Required.
operatingSystemVersion String The version of the operating system on the device. Required.
physicalIds String collection Not nullable.
trustType String

Relationships

Relationship Type Description
extensions extension collection The collection of open extensions defined for the device. Read-only. Nullable.
registeredOwners directoryObject collection Users that are registered owners of the device. Read-only. Nullable.
registeredUsers directoryObject collection Users that are registered users of the device. Read-only. Nullable.

JSON representation

Here is a JSON representation of the resource

{
  "accountEnabled": true,
  "alternativeSecurityIds": [{"@odata.type": "microsoft.graph.alternativeSecurityId"}],
  "approximateLastSignInDateTime": "String (timestamp)",
  "deviceId": "string",
  "deviceMetadata": "string",
  "deviceVersion": 1024,
  "displayName": "string",
  "id": "string (identifier)",
  "isCompliant": true,
  "isManaged": true,
  "onPremisesLastSyncDateTime": "String (timestamp)",
  "onPremisesSyncEnabled": true,
  "operatingSystem": "string",
  "operatingSystemVersion": "string",
  "physicalIds": ["string"],
  "trustType": "string"
}

See also