diff --git a/.azure-pipelines/common-templates/install-tools.yml b/.azure-pipelines/common-templates/install-tools.yml
index 0b64943de1..0e8feaf9fd 100644
--- a/.azure-pipelines/common-templates/install-tools.yml
+++ b/.azure-pipelines/common-templates/install-tools.yml
@@ -5,7 +5,12 @@ steps:
   - task: UseDotNet@2
     displayName: Use .NET SDK
     inputs:
-      version: 8.x 
+      version: 10.x
+
+  - task: UseDotNet@2
+    displayName: Use .NET SDK
+    inputs:
+      version: 8.x
 
   - task: UseDotNet@2
     displayName: Use .NET SDK
diff --git a/.azure-pipelines/docker-image-refresh.yml b/.azure-pipelines/docker-image-refresh.yml
index ce5ff5b745..59294a3688 100644
--- a/.azure-pipelines/docker-image-refresh.yml
+++ b/.azure-pipelines/docker-image-refresh.yml
@@ -15,12 +15,16 @@
 name: $(Date:yyyyMMdd)$(Rev:.r)_docker-image-refresh
 
 parameters:
+- name: WindowsPool
+  type: string
+  default: 1es-windows-ps-compute-m
 - name: LinuxPool
   type: string
   default: Azure-Pipelines-1ESPT-ExDShared
 
 variables:
   REGISTRY: 'msgraphprodregistry.azurecr.io'
+  REGISTRY_NAME: 'msgraphprodregistry'   # ACR resource name (az acr build uses this, not the FQDN)
   IMAGE_NAME: 'public/microsoftgraph/powershell'
 
 # Rebuild weekly so the image regularly picks up patched OS layers. `always: true` forces a run
@@ -47,10 +51,10 @@ resources:
 extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
-    pool:
-      name: ${{ parameters.LinuxPool }}
-      image: ubuntu-latest
-      os: linux
+    # The 1ES template injects an SDL/compliance stage that MUST run on a Windows pool, so the
+    # template-level pool is Windows. The actual container build overrides to a Linux pool at the
+    # job level below. (Same pattern as sdk-release.yml.)
+    pool: ${{ parameters.WindowsPool }}
     settings:
       networkIsolationPolicy: Permissive
     customBuildTags:
@@ -68,31 +72,22 @@ extends:
         steps:
         - checkout: self
 
+        # Build server-side with ACR Tasks: no local Docker daemon, no buildx/QEMU, and no
+        # Docker Hub dependency (which the network-isolated 1ES pool can't reach). ACR pulls the
+        # base image from MCR and pushes the result back to the registry.
         - task: AzureCLI@2
-          displayName: 'Log in to Azure Container Registry'
+          displayName: 'Build and push patched image (ACR Tasks)'
           inputs:
             azureSubscription: 'ACR Images Push Service Connection'
             scriptType: 'bash'
             scriptLocation: 'inlineScript'
             inlineScript: |
-              az acr login --name $(REGISTRY)
-
-        - script: |
-            docker run --privileged --rm tonistiigi/binfmt --install all
-          displayName: 'Enable multi-platform builds'
-
-        - script: |
-            docker buildx create --use --name refreshbuilder
-          displayName: 'Set up Docker BuildX'
-
-        - bash: |
-            set -euo pipefail
-            formatted_date=$(date +"%Y%m%d%H%M%S")
-            echo "Rebuilding $(REGISTRY)/$(IMAGE_NAME) on a patched base"
-            docker buildx build \
-              --platform linux/amd64 \
-              --push \
-              -t "$(REGISTRY)/$(IMAGE_NAME):latest" \
-              -t "$(REGISTRY)/$(IMAGE_NAME):$formatted_date" \
-              "$(Build.SourcesDirectory)"
-          displayName: 'Build and push refreshed image'
+              set -euo pipefail
+              formatted_date=$(date +"%Y%m%d%H%M%S")
+              echo "Rebuilding $(REGISTRY_NAME) / $(IMAGE_NAME) on a patched base via ACR Tasks"
+              az acr build \
+                --registry $(REGISTRY_NAME) \
+                --image "$(IMAGE_NAME):latest" \
+                --image "$(IMAGE_NAME):$formatted_date" \
+                --platform linux/amd64 \
+                "$(Build.SourcesDirectory)"
diff --git a/.gitignore b/.gitignore
index 3e41c4492f..137e52d5d1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -61,6 +61,7 @@ BenchmarkDotNet.Artifacts/
 project.lock.json
 project.fragment.lock.json
 artifacts/
+sweep_results.json
 
 # StyleCop
 StyleCopReport.xml
diff --git a/openApiDocs/beta/Applications.yml b/openApiDocs/beta/Applications.yml
index 35b2eef603..929469d4b3 100644
--- a/openApiDocs/beta/Applications.yml
+++ b/openApiDocs/beta/Applications.yml
@@ -3406,7 +3406,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action pause
-      description: 'Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.'
+      description: 'Temporarily stop a running synchronizationJob. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-pause?view=graph-rest-beta
@@ -3439,7 +3439,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action provisionOnDemand
-      description: Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.
+      description: Select a user and provision the account on-demand for a synchronizationJob. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-provisionondemand?view=graph-rest-beta
@@ -3490,7 +3490,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action restart
-      description: 'Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
+      description: 'Restart a stopped synchronizationJob, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-restart?view=graph-rest-beta
@@ -3535,7 +3535,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action start
-      description: 'Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
+      description: 'Start an existing synchronizationJob. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-start?view=graph-rest-beta
@@ -3568,7 +3568,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action validateCredentials
-      description: Validate that the credentials are valid in the tenant.
+      description: Validate that the credentials are valid in the tenant for a synchronizationJob.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-validatecredentials?view=graph-rest-beta
@@ -4016,7 +4016,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: 'Discover the latest schema for a directoryDefinition to provision to an application. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-beta
@@ -4091,7 +4091,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-beta
@@ -4177,7 +4177,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-beta
@@ -4263,7 +4263,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-beta
@@ -4390,7 +4390,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action acquireAccessToken
-      description: Acquire an OAuth Access token to authorize the Microsoft Entra provisioning service to provision users into an application.
+      description: Acquire an OAuth access token from the synchronization resource to authorize the Microsoft Entra provisioning service to provision users into an application.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-acquireaccesstoken?view=graph-rest-beta
@@ -4689,7 +4689,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Update synchronizationTemplate
-      description: Update (override) the synchronization template associated with a given application.
+      description: Update (override) the synchronizationTemplate associated with a given application.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationtemplate-update?view=graph-rest-beta
@@ -5152,7 +5152,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: 'Discover the latest schema for a directoryDefinition to provision to an application. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-beta
@@ -5227,7 +5227,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-beta
@@ -5313,7 +5313,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-beta
@@ -5399,7 +5399,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-beta
@@ -6549,6 +6549,41 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
+  /applicationTemplates/microsoft.graph.categories():
+    get:
+      tags:
+        - applicationTemplates.applicationTemplate.Functions
+      summary: Invoke function categories
+      operationId: applicationTemplate_category
+      parameters:
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.applicationTemplateCategory'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: function
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
   '/groups/{group-id}/appRoleAssignments':
     get:
       tags:
@@ -17997,7 +18032,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: List synchronization jobs
-      description: List existing jobs for a given application instance (service principal).
+      description: List existing synchronizationJob objects for a given application instance (service principal).
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-list-jobs?view=graph-rest-beta
@@ -18059,7 +18094,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Create synchronizationJob
-      description: Create new synchronization job with a default synchronization schema. The job is created in a disabled state. Call Start job to start synchronization.
+      description: Create a new synchronizationJob with a default synchronization schema. The job is created in a disabled state. Call Start job to start synchronization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-post-jobs?view=graph-rest-beta
@@ -18095,7 +18130,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Get synchronizationJob
-      description: Retrieve the existing synchronization job and its properties.
+      description: Retrieve an existing synchronizationJob and its properties.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-get?view=graph-rest-beta
@@ -18190,7 +18225,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Delete synchronizationJob
-      description: 'Stop the synchronization job, and permanently delete all the state associated with it. Synchronized accounts are left as-is.'
+      description: 'Stop the synchronizationJob, and permanently delete all the state associated with it. Synchronized accounts are left as-is.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-delete?view=graph-rest-beta
@@ -18460,7 +18495,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action pause
-      description: 'Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.'
+      description: 'Temporarily stop a running synchronizationJob. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-pause?view=graph-rest-beta
@@ -18493,7 +18528,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action provisionOnDemand
-      description: Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.
+      description: Select a user and provision the account on-demand for a synchronizationJob. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-provisionondemand?view=graph-rest-beta
@@ -18544,7 +18579,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action restart
-      description: 'Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
+      description: 'Restart a stopped synchronizationJob, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-restart?view=graph-rest-beta
@@ -18589,7 +18624,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action start
-      description: 'Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
+      description: 'Start an existing synchronizationJob. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-start?view=graph-rest-beta
@@ -18622,7 +18657,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action validateCredentials
-      description: Validate that the credentials are valid in the tenant.
+      description: Validate that the credentials are valid in the tenant for a synchronizationJob.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-validatecredentials?view=graph-rest-beta
@@ -18685,7 +18720,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Get synchronizationSchema
-      description: Retrieve the schema for a given synchronization job or template.
+      description: Retrieve the synchronizationSchema for a given synchronization job or template.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-get?view=graph-rest-beta
@@ -18741,7 +18776,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Update synchronizationSchema
-      description: 'Update the synchronization schema for a given job or template. This method fully replaces the current schema with the one provided in the request. To update the schema of a template, make the call on the application object. You must be the owner of the application.'
+      description: 'Update the synchronizationSchema for a given job or template. This method fully replaces the current schema with the one provided in the request. To update the schema of a template, make the call on the application object. You must be the owner of the application.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-update?view=graph-rest-beta
@@ -19077,7 +19112,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: 'Discover the latest schema for a directoryDefinition to provision to an application. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-beta
@@ -19152,7 +19187,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-beta
@@ -19238,7 +19273,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-beta
@@ -19324,7 +19359,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-beta
@@ -19451,7 +19486,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action acquireAccessToken
-      description: Acquire an OAuth Access token to authorize the Microsoft Entra provisioning service to provision users into an application.
+      description: Acquire an OAuth access token from the synchronization resource to authorize the Microsoft Entra provisioning service to provision users into an application.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-acquireaccesstoken?view=graph-rest-beta
@@ -19527,7 +19562,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Add synchronization secrets
-      description: Provide credentials for establishing connectivity with the target system.
+      description: Provide credentials for establishing connectivity with the target system and store them in the synchronization resource.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-serviceprincipal-put-synchronization?view=graph-rest-beta
@@ -19610,7 +19645,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: List existing synchronization templates
-      description: List the synchronization templates associated with a given application or service principal.
+      description: List synchronizationTemplate objects associated with a given application or service principal.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-list-templates?view=graph-rest-beta
@@ -20216,7 +20251,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: 'Discover the latest schema for a directoryDefinition to provision to an application. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-beta
@@ -20291,7 +20326,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-beta
@@ -20377,7 +20412,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-beta
@@ -20463,7 +20498,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-beta
@@ -23017,7 +23052,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -23044,7 +23079,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -23209,7 +23244,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -23231,7 +23266,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -23266,7 +23301,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -23370,7 +23405,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -23503,6 +23538,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -24044,7 +24085,7 @@ components:
               items:
                 type: string
                 nullable: true
-              description: 'The list of categories for the application. Supported values can be: Collaboration, Business Management, Consumer, Content management, CRM, Data services, Developer services, E-commerce, Education, ERP, Finance, Health, Human resources, IT infrastructure, Mail, Management, Marketing, Media, Productivity, Project management, Telecommunications, Tools, Travel, and Web design & hosting.  Supports $filter (contains).'
+              description: 'The list of categories for the application. To get the full list of supported values, use the applicationTemplate: categories function. Supports $filter (contains).'
             configurationUris:
               type: array
               items:
@@ -24123,6 +24164,18 @@ components:
           $ref: '#/components/schemas/microsoft.graph.servicePrincipal'
       additionalProperties:
         type: object
+    microsoft.graph.applicationTemplateCategory:
+      title: applicationTemplateCategory
+      type: object
+      properties:
+        displayName:
+          type: string
+          description: 'The localizable display name of the category, suitable for showing in a UI.'
+        value:
+          type: string
+          description: The category value as it appears in the categories property of an applicationTemplate. Use this value when filtering application templates by category.
+      additionalProperties:
+        type: object
     microsoft.graph.onPremisesPublishingProfile:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -24511,7 +24564,7 @@ components:
               nullable: true
             roleTemplateId:
               type: string
-              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read only. Supports $filter (eq), $select.'
+              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read-only. Supports $filter (eq), $select.'
               nullable: true
             members:
               type: array
@@ -24543,7 +24596,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -24910,7 +24963,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.selfSignedCertificate:
       title: selfSignedCertificate
       type: object
@@ -25437,6 +25489,8 @@ components:
           type: boolean
           description: Locks the keyCredentials and passwordCredentials properties for modification where credential usage type is Verify. This locks OAuth service principals.
           nullable: true
+        enforcementScope:
+          $ref: '#/components/schemas/microsoft.graph.servicePrincipalLockScope'
         isEnabled:
           type: boolean
           description: 'Enables or disables service principal lock configuration. To allow the sensitive properties to be updated, update this property to false to disable the lock on the service principal.'
@@ -26942,6 +26996,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -27573,6 +27629,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -27648,7 +27738,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.extension:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -28999,7 +29088,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -29049,6 +29137,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -30258,6 +30351,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -31116,6 +31210,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.servicePrincipalLockScope:
+      title: servicePrincipalLockScope
+      enum:
+        - notConfigured
+        - foreignTenantOnly
+        - everywhere
+        - unknownFutureValue
+      type: string
     microsoft.graph.kind:
       title: kind
       enum:
@@ -31178,7 +31280,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -31244,6 +31346,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -32480,7 +32585,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -32496,13 +32601,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -32632,7 +32737,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -32950,6 +33055,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -33366,6 +33473,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -33535,6 +33686,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -33914,7 +34067,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -33928,6 +34081,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -34599,7 +34756,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -34751,7 +34908,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -37268,6 +37425,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -37629,6 +37788,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -37717,6 +37892,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -37966,6 +38146,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -39956,6 +40141,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -41170,6 +41358,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -41419,8 +41616,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -41510,6 +41705,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -41900,6 +42120,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -41918,7 +42150,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -44926,12 +45157,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -44965,6 +45199,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -45257,22 +45501,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -45588,6 +45816,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -46226,7 +46477,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -46612,6 +46863,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -48118,6 +48370,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -48339,28 +48593,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -48379,6 +48611,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -50241,6 +50481,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -50967,16 +51223,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -50995,20 +51254,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -51027,16 +51290,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -51055,16 +51321,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -51085,10 +51354,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -52521,6 +52792,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -52579,14 +52858,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -53307,6 +53578,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -53317,10 +53589,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -53331,6 +53605,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -53341,6 +53616,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -53349,10 +53625,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.printMargin:
@@ -53547,6 +53825,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -53561,6 +53842,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
diff --git a/openApiDocs/beta/BackupRestore.yml b/openApiDocs/beta/BackupRestore.yml
index be7c239728..f5ac643854 100644
--- a/openApiDocs/beta/BackupRestore.yml
+++ b/openApiDocs/beta/BackupRestore.yml
@@ -12500,8 +12500,10 @@ components:
           $ref: '#/components/schemas/microsoft.graph.restorableArtifact'
         queryExpression:
           type: string
-          description: Specifies criteria to retrieve artifacts.
+          description: 'Deprecated. Going forward, use the structuredQueryExpression property instead. Specifies criteria to retrieve artifacts.'
           nullable: true
+        structuredQueryExpression:
+          $ref: '#/components/schemas/microsoft.graph.restoreSearchArtifactQueryExpression'
       additionalProperties:
         type: object
     microsoft.graph.restorePointSearchResponse:
@@ -13141,6 +13143,8 @@ components:
               nullable: true
             destinationType:
               $ref: '#/components/schemas/microsoft.graph.destinationType'
+            error:
+              $ref: '#/components/schemas/microsoft.graph.publicError'
             restoredItemKey:
               type: string
               description: The unique identifier for the restored artifact.
@@ -13346,6 +13350,39 @@ components:
         - message
         - unknownFutureValue
       type: string
+    microsoft.graph.restoreSearchArtifactQueryExpression:
+      title: restoreSearchArtifactQueryExpression
+      type: object
+      properties:
+        hasAttachment:
+          type: boolean
+          description: Indicates whether the artifact has an attachment. Optional.
+          nullable: true
+        items:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.granularRestoreItems'
+          description: The types of items to include in the search. Optional.
+        recipients:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The recipient email addresses to filter by. Optional.
+        senders:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The sender email addresses to filter by. Optional.
+        subjects:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The subject lines to filter by. Optional.
+      additionalProperties:
+        type: object
     microsoft.graph.restorePointSearchResult:
       title: restorePointSearchResult
       type: object
@@ -14099,6 +14136,16 @@ components:
         - completed
         - unknownFutureValue
       type: string
+    microsoft.graph.granularRestoreItems:
+      title: granularRestoreItems
+      enum:
+        - email
+        - note
+        - contact
+        - task
+        - calendar
+        - unknownFutureValue
+      type: string
     microsoft.graph.ODataErrors.MainError:
       required:
         - code
diff --git a/openApiDocs/beta/Bookings.yml b/openApiDocs/beta/Bookings.yml
index 3a71c24979..af7a824a7b 100644
--- a/openApiDocs/beta/Bookings.yml
+++ b/openApiDocs/beta/Bookings.yml
@@ -13917,6 +13917,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -15054,6 +15055,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -16586,19 +16589,19 @@ components:
             completeAfterDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: DateTime after which the migration should be performed
+              description: 'Date and time after which the migration should be performed. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z.'
               format: date-time
             createdBy:
               type: string
-              description: ID of the user that created the job
+              description: User principal name (UPN) of the user who created the job. Read-only.
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: When the job what created
+              description: 'When the job was created. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z. Read-only.'
               format: date-time
             displayName:
               type: string
-              description: Display name of the job. Must be unique per tenant
+              description: Display name of the job. Must be unique per tenant.
             exchangeSettings:
               $ref: '#/components/schemas/microsoft.graph.exchangeOnlineCrossTenantMigrationSettings'
             jobType:
@@ -16606,38 +16609,38 @@ components:
             lastUpdatedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: When this migration job was last updated
+              description: 'When this migration job was last updated. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z. Read-only.'
               format: date-time
             message:
               type: string
-              description: Status message of the migration job
+              description: Status message of the migration job. Nullable. Read-only.
               nullable: true
             resources:
               type: array
               items:
                 type: string
-              description: IDs (GUID) of the resources being migrated with the migration job
+              description: IDs (GUID) of the resources that are migrated with the migration job.
             resourceType:
               type: string
-              description: Type of resource being migrated. Only Users is currently supported
+              description: Type of resource being migrated. Only Users is currently supported.
             sourceTenantId:
               type: string
-              description: ID (GUID) of the tenant that content is being migrated from
+              description: ID (GUID) of the tenant that content is migrated from.
             status:
               $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationJobStatus'
             targetTenantId:
               type: string
-              description: ID of the tenant that content is being migrated to
+              description: ID of the tenant that content is migrated to. Read-only.
             workloads:
               type: array
               items:
                 type: string
-              description: 'Workloads to migrate. Supported workloads are Teams, Exchange, and ODSP (OneDrive/SharePoint)'
+              description: 'Workloads to migrate. Supported workloads are Teams, Exchange, and ODSP (OneDrive/SharePoint).'
             users:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationTask'
-              description: Details and status of the users being migrated in this migration job
+              description: Details and status of the users migrated in this migration job.
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
@@ -16790,12 +16793,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -16829,6 +16835,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -17990,6 +18006,8 @@ components:
               nullable: true
             destinationType:
               $ref: '#/components/schemas/microsoft.graph.destinationType'
+            error:
+              $ref: '#/components/schemas/microsoft.graph.publicError'
             restoredItemKey:
               type: string
               description: The unique identifier for the restored artifact.
diff --git a/openApiDocs/beta/Calendar.yml b/openApiDocs/beta/Calendar.yml
index 55a52d2b9c..8b01cbfc54 100644
--- a/openApiDocs/beta/Calendar.yml
+++ b/openApiDocs/beta/Calendar.yml
@@ -21450,7 +21450,6 @@ components:
               description: 'A short, friendly name for the room, often used for easier identification or display in UI.'
             placeId:
               type: string
-              description: An alternative immutable unique identifier of the room. Read-only.
               nullable: true
             teamsEnabledState:
               $ref: '#/components/schemas/microsoft.graph.placeFeatureEnablement'
@@ -21525,7 +21524,6 @@ components:
               description: 'A short, friendly name for the workspace, often used for easier identification or display in the UI.'
             placeId:
               type: string
-              description: An alternative immutable unique identifier of the workspace. Read-only.
               nullable: true
           additionalProperties:
             type: object
diff --git a/openApiDocs/beta/ChangeNotifications.yml b/openApiDocs/beta/ChangeNotifications.yml
index 9fc6ad201d..a9b712faa0 100644
--- a/openApiDocs/beta/ChangeNotifications.yml
+++ b/openApiDocs/beta/ChangeNotifications.yml
@@ -308,6 +308,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.entity:
diff --git a/openApiDocs/beta/Compliance.yml b/openApiDocs/beta/Compliance.yml
index 93fc00e7b0..d9ead892c9 100644
--- a/openApiDocs/beta/Compliance.yml
+++ b/openApiDocs/beta/Compliance.yml
@@ -9697,7 +9697,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -10064,7 +10064,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.ediscovery.userSource:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.ediscovery.dataSource'
@@ -10628,7 +10627,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -10655,7 +10654,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -10820,7 +10819,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -10842,7 +10841,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -10877,7 +10876,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -10981,7 +10980,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -11114,6 +11113,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -11810,7 +11815,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -11824,6 +11829,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -12381,6 +12390,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -14525,6 +14535,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -15156,6 +15168,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -15177,7 +15223,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -16242,7 +16287,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -16281,6 +16325,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -17069,7 +17118,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -17299,7 +17348,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -18304,6 +18353,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -18673,6 +18724,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.notebook:
@@ -19224,6 +19287,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -19622,6 +19688,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -20924,7 +20995,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -20940,13 +21011,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -21038,7 +21109,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -21356,6 +21427,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -21772,6 +21845,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -24053,6 +24170,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -24414,6 +24533,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -24502,6 +24637,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -26681,8 +26821,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -26772,6 +26910,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -27098,7 +27261,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -27714,6 +27876,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -28050,6 +28215,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.userSet:
       title: userSet
       type: object
@@ -28249,7 +28437,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -29074,6 +29262,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -30604,12 +30801,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -30643,6 +30843,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -30935,22 +31145,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -31780,7 +31974,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -32166,6 +32360,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -32834,28 +33029,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -32874,6 +33047,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -33652,6 +33833,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.expirationPattern:
       title: expirationPattern
       type: object
@@ -34653,6 +34850,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -36055,14 +36254,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.scheduleEntityTheme'
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -38114,6 +38305,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -39021,16 +39220,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -39049,20 +39251,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -39081,16 +39287,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -39109,16 +39318,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -39139,10 +39351,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -39323,6 +39537,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -39337,6 +39554,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -39595,6 +39819,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -39605,10 +39830,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -39619,6 +39846,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -39629,6 +39857,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -39637,10 +39866,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/CrossDeviceExperiences.yml b/openApiDocs/beta/CrossDeviceExperiences.yml
index 7ef725f350..b4d46b0001 100644
--- a/openApiDocs/beta/CrossDeviceExperiences.yml
+++ b/openApiDocs/beta/CrossDeviceExperiences.yml
@@ -5908,7 +5908,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -6275,7 +6275,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.appRoleAssignment:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.directoryObject'
@@ -6640,7 +6639,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -6667,7 +6666,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -6832,7 +6831,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -6854,7 +6853,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -6889,7 +6888,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -6993,7 +6992,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -7126,6 +7125,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -7526,6 +7531,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -9769,6 +9775,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -10176,6 +10184,40 @@ components:
           additionalProperties:
             type: object
           description: Event representing an general failure.
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -10197,7 +10239,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -11230,7 +11271,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -11269,6 +11309,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -12049,6 +12094,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -12592,6 +12640,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -12995,6 +13045,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -13161,7 +13216,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -13175,6 +13230,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -13656,7 +13715,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -13886,7 +13945,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -14156,7 +14215,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -15161,7 +15220,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -15177,13 +15236,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -15275,7 +15334,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -15593,6 +15652,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -15923,6 +15984,50 @@ components:
       additionalProperties:
         type: object
       description: Object containing detailed information about the error and its remediation.
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -18332,6 +18437,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -18693,6 +18800,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -18781,6 +18904,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -20070,6 +20198,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -20537,8 +20668,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -20628,6 +20757,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -21018,6 +21172,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -21036,7 +21202,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -21356,6 +21521,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.siteArchivalDetails:
       title: siteArchivalDetails
       type: object
@@ -23696,6 +23884,15 @@ components:
       additionalProperties:
         type: object
       description: 'Object representing a link to troubleshooting information, the link could be to the Azure Portal or a Microsoft doc.'
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -25390,12 +25587,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -25429,6 +25629,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -25721,22 +25931,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -26566,7 +26760,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -26952,6 +27146,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -27340,28 +27535,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -27380,6 +27553,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -27919,6 +28100,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.siteArchiveStatus:
       title: siteArchiveStatus
       enum:
@@ -29729,6 +29926,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -31143,14 +31342,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -31776,16 +31967,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -31804,20 +31998,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -31836,16 +32034,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -31864,16 +32065,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -31894,10 +32098,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -33420,6 +33626,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -34090,6 +34304,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -34100,10 +34315,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -34114,6 +34331,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -34124,6 +34342,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -34132,10 +34351,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
@@ -34445,6 +34666,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -34459,6 +34683,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
diff --git a/openApiDocs/beta/DeviceManagement.Enrollment.yml b/openApiDocs/beta/DeviceManagement.Enrollment.yml
index b4fadbb518..78729506be 100644
--- a/openApiDocs/beta/DeviceManagement.Enrollment.yml
+++ b/openApiDocs/beta/DeviceManagement.Enrollment.yml
@@ -6044,12 +6044,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.roleManagement'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -6072,12 +6066,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.roleManagement'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/cloudPC:
     get:
@@ -6115,12 +6103,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.rbacApplicationMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -6143,12 +6125,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.rbacApplicationMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -6167,12 +6143,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/cloudPC/resourceNamespaces:
     get:
@@ -6221,12 +6191,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRbacResourceNamespaceCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -6252,12 +6216,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/resourceNamespaces/{unifiedRbacResourceNamespace-id}':
     get:
@@ -6303,12 +6261,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -6340,12 +6292,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -6372,12 +6318,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/resourceNamespaces/{unifiedRbacResourceNamespace-id}/microsoft.graph.importResourceActions':
     post:
@@ -6420,12 +6360,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: action
   '/roleManagement/cloudPC/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions':
     get:
@@ -6483,12 +6417,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRbacResourceActionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -6523,12 +6451,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}':
     get:
@@ -6583,12 +6505,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -6628,12 +6544,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -6668,12 +6578,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}/authenticationContext':
     get:
@@ -6727,12 +6631,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.authenticationContextClassReference'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}/resourceScope':
     get:
@@ -6786,12 +6684,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -6831,12 +6723,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -6871,12 +6757,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/$count':
     get:
@@ -6900,12 +6780,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/cloudPC/resourceNamespaces/$count:
     get:
       tags:
@@ -6920,12 +6794,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/cloudPC/roleAssignments:
     get:
       tags:
@@ -6974,12 +6842,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleAssignmentMultipleCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -7009,12 +6871,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignmentMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}':
     get:
@@ -7064,18 +6920,12 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignmentMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - roleManagement.rbacApplicationMultiple
       summary: Update unifiedRoleAssignmentMultiple
-      description: "Update an existing unifiedRoleAssignmentMultiple object of an RBAC provider.  The following RBAC providers are currently supported:\r\n- Cloud PC \r\n- device management (Intune) In contrast, unifiedRoleAssignment does not support update."
+      description: "Update an existing unifiedRoleAssignmentMultiple object of an RBAC provider.  The following RBAC providers are currently supported:\r\n- Cloud PC \r\n- device management (Intune) In contrast, unifiedRoleAssignment doesn't support update."
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/unifiedroleassignmentmultiple-update?view=graph-rest-beta
@@ -7105,12 +6955,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignmentMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -7141,12 +6985,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/appScopes':
     get:
@@ -7204,12 +7042,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.appScopeCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -7244,12 +7076,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/appScopes/{appScope-id}':
     get:
@@ -7304,12 +7130,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -7349,12 +7169,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -7389,12 +7203,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/appScopes/$count':
     get:
@@ -7418,12 +7226,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/directoryScopes':
     get:
       tags:
@@ -7480,12 +7282,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.directoryObjectCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -7543,12 +7339,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/directoryScopes/$count':
     get:
@@ -7572,12 +7362,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/principals':
     get:
       tags:
@@ -7634,12 +7418,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.directoryObjectCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -7697,12 +7475,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/principals/$count':
     get:
@@ -7726,12 +7498,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/cloudPC/roleAssignments/{unifiedRoleAssignmentMultiple-id}/roleDefinition':
     get:
       tags:
@@ -7777,12 +7543,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/cloudPC/roleAssignments/$count:
     get:
@@ -7798,12 +7558,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/cloudPC/roleDefinitions:
     get:
       tags:
@@ -7855,12 +7609,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleDefinitionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -7890,12 +7638,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleDefinitions/{unifiedRoleDefinition-id}':
     get:
@@ -7945,12 +7687,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -7986,12 +7722,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -8022,12 +7752,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom':
     get:
@@ -8085,12 +7809,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleDefinitionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -8125,12 +7843,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}':
     get:
@@ -8185,12 +7897,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -8230,12 +7936,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -8270,12 +7970,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/cloudPC/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}/microsoft.graph.assignedPrincipals(transitive=@transitive,directoryScopeType=''@directoryScopeType'',directoryScopeId=''@directoryScopeId'')':
     get:
@@ -8381,12 +8075,6 @@ paths:
                   type: object
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: function
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
@@ -8413,12 +8101,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/cloudPC/roleDefinitions/{unifiedRoleDefinition-id}/microsoft.graph.assignedPrincipals(transitive=@transitive,directoryScopeType=''@directoryScopeType'',directoryScopeId=''@directoryScopeId'')':
     get:
       tags:
@@ -8515,12 +8197,6 @@ paths:
                   type: object
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: function
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
@@ -8539,12 +8215,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/deviceManagement:
     get:
       tags:
@@ -8582,12 +8252,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.rbacApplicationMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -8610,12 +8274,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.rbacApplicationMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -8634,12 +8292,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/deviceManagement/resourceNamespaces:
     get:
@@ -8688,12 +8340,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRbacResourceNamespaceCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -8719,12 +8365,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}':
     get:
@@ -8770,12 +8410,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -8807,12 +8441,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -8839,12 +8467,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/microsoft.graph.importResourceActions':
     post:
@@ -8887,12 +8509,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: action
   '/roleManagement/deviceManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions':
     get:
@@ -8950,12 +8566,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRbacResourceActionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -8990,12 +8600,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}':
     get:
@@ -9050,12 +8654,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -9095,12 +8693,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -9135,12 +8727,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}/authenticationContext':
     get:
@@ -9194,12 +8780,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.authenticationContextClassReference'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}/resourceScope':
     get:
@@ -9253,12 +8833,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -9298,12 +8872,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -9338,12 +8906,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/$count':
     get:
@@ -9367,12 +8929,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/deviceManagement/resourceNamespaces/$count:
     get:
       tags:
@@ -9387,12 +8943,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/deviceManagement/roleAssignments:
     get:
       tags:
@@ -9444,12 +8994,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleAssignmentMultipleCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -9479,12 +9023,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignmentMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}':
     get:
@@ -9534,18 +9072,12 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignmentMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - roleManagement.rbacApplicationMultiple
       summary: Update unifiedRoleAssignmentMultiple
-      description: "Update an existing unifiedRoleAssignmentMultiple object of an RBAC provider.  The following RBAC providers are currently supported:\r\n- Cloud PC \r\n- device management (Intune) In contrast, unifiedRoleAssignment does not support update."
+      description: "Update an existing unifiedRoleAssignmentMultiple object of an RBAC provider.  The following RBAC providers are currently supported:\r\n- Cloud PC \r\n- device management (Intune) In contrast, unifiedRoleAssignment doesn't support update."
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/unifiedroleassignmentmultiple-update?view=graph-rest-beta
@@ -9575,12 +9107,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignmentMultiple'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -9611,12 +9137,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/appScopes':
     get:
@@ -9674,12 +9194,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.appScopeCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -9714,12 +9228,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/appScopes/{appScope-id}':
     get:
@@ -9774,12 +9282,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -9819,12 +9321,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -9859,12 +9355,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/appScopes/$count':
     get:
@@ -9888,12 +9378,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/directoryScopes':
     get:
       tags:
@@ -9950,12 +9434,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.directoryObjectCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -10013,12 +9491,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/directoryScopes/$count':
     get:
@@ -10042,12 +9514,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/principals':
     get:
       tags:
@@ -10104,12 +9570,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.directoryObjectCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -10167,12 +9627,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/principals/$count':
     get:
@@ -10196,12 +9650,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/deviceManagement/roleAssignments/{unifiedRoleAssignmentMultiple-id}/roleDefinition':
     get:
       tags:
@@ -10247,12 +9695,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/deviceManagement/roleAssignments/$count:
     get:
@@ -10268,12 +9710,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/deviceManagement/roleDefinitions:
     get:
       tags:
@@ -10321,12 +9757,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleDefinitionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -10352,12 +9782,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleDefinitions/{unifiedRoleDefinition-id}':
     get:
@@ -10403,12 +9827,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -10440,12 +9858,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -10472,12 +9884,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom':
     get:
@@ -10535,12 +9941,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleDefinitionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -10575,12 +9975,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}':
     get:
@@ -10635,12 +10029,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -10680,12 +10068,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -10720,12 +10102,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/deviceManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}/microsoft.graph.assignedPrincipals(transitive=@transitive,directoryScopeType=''@directoryScopeType'',directoryScopeId=''@directoryScopeId'')':
     get:
@@ -10831,12 +10207,6 @@ paths:
                   type: object
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: function
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
@@ -10863,12 +10233,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/deviceManagement/roleDefinitions/{unifiedRoleDefinition-id}/microsoft.graph.assignedPrincipals(transitive=@transitive,directoryScopeType=''@directoryScopeType'',directoryScopeId=''@directoryScopeId'')':
     get:
       tags:
@@ -10965,12 +10329,6 @@ paths:
                   type: object
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: function
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
@@ -10989,12 +10347,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/exchange:
     get:
       tags:
@@ -11031,12 +10383,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacApplication'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -11059,12 +10405,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacApplication'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -11083,12 +10423,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/exchange/customAppScopes:
     get:
@@ -11141,12 +10475,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.customAppScopeCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -11176,12 +10504,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.customAppScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/customAppScopes/{customAppScope-id}':
     get:
@@ -11231,12 +10553,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.customAppScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -11272,12 +10588,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.customAppScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -11308,12 +10618,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/exchange/customAppScopes/$count:
     get:
@@ -11329,12 +10633,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/exchange/resourceNamespaces:
     get:
       tags:
@@ -11383,12 +10681,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRbacResourceNamespaceCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -11414,12 +10706,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/resourceNamespaces/{unifiedRbacResourceNamespace-id}':
     get:
@@ -11466,12 +10752,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -11503,12 +10783,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -11535,12 +10809,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/resourceNamespaces/{unifiedRbacResourceNamespace-id}/microsoft.graph.importResourceActions':
     post:
@@ -11583,12 +10851,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: action
   '/roleManagement/exchange/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions':
     get:
@@ -11646,12 +10908,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRbacResourceActionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -11686,12 +10942,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}':
     get:
@@ -11746,12 +10996,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -11791,12 +11035,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceAction'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -11831,12 +11069,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}/authenticationContext':
     get:
@@ -11890,12 +11122,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.authenticationContextClassReference'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}/resourceScope':
     get:
@@ -11949,12 +11175,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -11994,12 +11214,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRbacResourceScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -12034,12 +11248,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/$count':
     get:
@@ -12063,12 +11271,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/exchange/resourceNamespaces/$count:
     get:
       tags:
@@ -12083,12 +11285,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/exchange/roleAssignments:
     get:
       tags:
@@ -12140,12 +11336,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleAssignmentCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -12175,12 +11365,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignment'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleAssignments/{unifiedRoleAssignment-id}':
     get:
@@ -12230,12 +11414,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignment'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -12267,12 +11445,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignment'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -12303,12 +11475,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleAssignments/{unifiedRoleAssignment-id}/appScope':
     get:
@@ -12355,12 +11521,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -12392,12 +11552,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -12424,12 +11578,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleAssignments/{unifiedRoleAssignment-id}/directoryScope':
     get:
@@ -12476,12 +11624,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleAssignments/{unifiedRoleAssignment-id}/principal':
     get:
@@ -12528,12 +11670,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleAssignments/{unifiedRoleAssignment-id}/roleDefinition':
     get:
@@ -12580,12 +11716,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/exchange/roleAssignments/$count:
     get:
@@ -12601,12 +11731,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/exchange/roleDefinitions:
     get:
       tags:
@@ -12658,12 +11782,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleDefinitionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -12689,12 +11807,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleDefinitions/{unifiedRoleDefinition-id}':
     get:
@@ -12744,12 +11856,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -12781,12 +11887,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -12813,12 +11913,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom':
     get:
@@ -12876,12 +11970,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleDefinitionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -12916,12 +12004,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}':
     get:
@@ -12976,12 +12058,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -13021,12 +12097,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -13061,12 +12131,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}/microsoft.graph.assignedPrincipals(transitive=@transitive,directoryScopeType=''@directoryScopeType'',directoryScopeId=''@directoryScopeId'')':
     get:
@@ -13172,12 +12236,6 @@ paths:
                   type: object
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: function
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
@@ -13204,12 +12262,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   '/roleManagement/exchange/roleDefinitions/{unifiedRoleDefinition-id}/microsoft.graph.assignedPrincipals(transitive=@transitive,directoryScopeType=''@directoryScopeType'',directoryScopeId=''@directoryScopeId'')':
     get:
       tags:
@@ -13306,12 +12358,6 @@ paths:
                   type: object
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: function
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
@@ -13330,12 +12376,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
   /roleManagement/exchange/transitiveRoleAssignments:
     get:
       tags:
@@ -13384,12 +12424,6 @@ paths:
           $ref: '#/components/responses/microsoft.graph.unifiedRoleAssignmentCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
@@ -13415,12 +12449,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignment'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/transitiveRoleAssignments/{unifiedRoleAssignment-id}':
     get:
@@ -13467,12 +12495,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignment'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -13504,12 +12526,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleAssignment'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -13536,12 +12552,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/transitiveRoleAssignments/{unifiedRoleAssignment-id}/appScope':
     get:
@@ -13588,12 +12598,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     patch:
       tags:
@@ -13625,12 +12629,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.appScope'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
     delete:
       tags:
@@ -13657,12 +12655,6 @@ paths:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/transitiveRoleAssignments/{unifiedRoleAssignment-id}/directoryScope':
     get:
@@ -13709,12 +12701,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/transitiveRoleAssignments/{unifiedRoleAssignment-id}/principal':
     get:
@@ -13761,12 +12747,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   '/roleManagement/exchange/transitiveRoleAssignments/{unifiedRoleAssignment-id}/roleDefinition':
     get:
@@ -13813,12 +12793,6 @@ paths:
                 $ref: '#/components/schemas/microsoft.graph.unifiedRoleDefinition'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
       x-ms-docs-operation-type: operation
   /roleManagement/exchange/transitiveRoleAssignments/$count:
     get:
@@ -13834,12 +12808,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2025-12-01'
-        date: '2025-01-01'
-        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
-        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
 components:
   schemas:
     microsoft.graph.androidDeviceOwnerEnrollmentProfile:
@@ -15323,7 +14291,7 @@ components:
           properties:
             displayName:
               type: string
-              description: Provides the display name of the app-specific resource represented by the app scope. Read only.
+              description: Provides the display name of the app-specific resource represented by the app scope. Read-only.
               nullable: true
             type:
               type: string
@@ -15709,7 +14677,7 @@ components:
             description: Indicates Mobile Application Management (MAM) for iOS devices
             name: iOSMobileApplicationManagement
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Evolvable enumeration sentinel value. Do not use
             name: unknownFutureValue
           - value: windowsMobileApplicationManagement
             description: Indicates Mobile Application Management (MAM) for Windows devices.
diff --git a/openApiDocs/beta/DeviceManagement.yml b/openApiDocs/beta/DeviceManagement.yml
index 70eb28ccff..b0909b1acd 100644
--- a/openApiDocs/beta/DeviceManagement.yml
+++ b/openApiDocs/beta/DeviceManagement.yml
@@ -41682,7 +41682,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Singleton that acts as container for a collection of Resource Access entities.
     microsoft.graph.advancedThreatProtectionOnboardingStateSummary:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -42104,7 +42103,7 @@ components:
             description: Indicates Mobile Application Management (MAM) for iOS devices
             name: iOSMobileApplicationManagement
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Evolvable enumeration sentinel value. Do not use
             name: unknownFutureValue
           - value: windowsMobileApplicationManagement
             description: Indicates Mobile Application Management (MAM) for Windows devices.
@@ -44586,6 +44585,13 @@ components:
           description: Json of the rules.
           format: base64url
           nullable: true
+        runIntervalInMinutes:
+          maximum: 2147483647
+          minimum: -2147483648
+          type: number
+          description: 'Indicates the interval, in minutes, at which the custom compliance script is evaluated on the device. Allowed range from 1 to 480. Nullable.'
+          format: int32
+          nullable: true
       additionalProperties:
         type: object
     microsoft.graph.deviceComplianceScriptValidationResult:
@@ -51397,6 +51403,7 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+          description: Singleton entity that acts as a container for all reports functionality.
     microsoft.graph.resourceOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -55938,7 +55945,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -55965,7 +55972,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -56130,7 +56137,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -56152,7 +56159,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -56187,7 +56194,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -56291,7 +56298,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -56424,6 +56431,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -58755,7 +58768,7 @@ components:
             description: Indicated atleast 1 tenant admin & system ingested definitions configured for this policy
             name: mixed
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Unknown future enum value
             name: unknownFutureValue
     microsoft.graph.groupPolicyConfigurationType:
       title: groupPolicyConfigurationType
@@ -59475,7 +59488,7 @@ components:
             description: Indicates that the log collection has failed
             name: failed
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Placeholder value for future expansion enums
             name: unknownFutureValue
     microsoft.graph.microsoftTunnelDeploymentMode:
       title: microsoftTunnelDeploymentMode
@@ -59545,7 +59558,7 @@ components:
             description: 'Indicates the failure of the upgrade during the upgrade cycle of when Intune begins upgrading servers, one server at a time'
             name: upgradeFailed
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Evolvable enumeration sentinel value. Do not use enums.
             name: unknownFutureValue
     microsoft.graph.mobileAppTroubleshootingHistoryItem:
       title: mobileAppTroubleshootingHistoryItem
@@ -62162,7 +62175,7 @@ components:
             description: Offboarding
             name: offboarding
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: UnknownFutureValue
             name: unknownFutureValue
     microsoft.graph.cloudCertificationAuthorityCertificateKeySize:
       title: cloudCertificationAuthorityCertificateKeySize
@@ -63381,7 +63394,7 @@ components:
             description: Indicates the category is ingested through system ingestion process
             name: builtIn
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Unknown future enum value
             name: unknownFutureValue
     microsoft.graph.groupPolicyMigrationReadiness:
       title: groupPolicyMigrationReadiness
@@ -64479,7 +64492,7 @@ components:
             description: Tenant has enabled the connection
             name: enabled
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Future authentication method to be added here.
             name: unknownFutureValue
     microsoft.graph.deviceManagementSettingInsightsDefinition:
       title: deviceManagementSettingInsightsDefinition
@@ -65429,6 +65442,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -66020,6 +66035,8 @@ components:
                 type: string
                 nullable: true
               description: The list of scope tag IDs for this resource. Read-only.
+            snapshotResetMode:
+              $ref: '#/components/schemas/microsoft.graph.cloudPcSnapshotResetMode'
             userExperienceType:
               $ref: '#/components/schemas/microsoft.graph.cloudPcUserExperienceType'
             userSettingsPersistenceConfiguration:
@@ -69244,6 +69261,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -69319,7 +69370,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.extension:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -69528,7 +69578,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -69895,7 +69945,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -70654,7 +70703,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -70704,6 +70752,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -73208,6 +73261,7 @@ components:
         iconPath:
           type: string
           description: 'Specifies the path to the icon file for the application within the OS of the hosting Cloud PC. When an admin updates the path of a cloud app, the value should be a rooted absolute path. For example, C:/Windows/system32/WindowsPowerShell/v1.0/powershell_ise.exe. If this property isn''t defined, a default icon is used.'
+          nullable: true
       additionalProperties:
         type: object
     microsoft.graph.cloudPcCloudAppStatus:
@@ -73458,6 +73512,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcUserAccountType:
       title: cloudPcUserAccountType
@@ -73766,6 +73822,14 @@ components:
           $ref: '#/components/schemas/microsoft.graph.microsoftManagedDesktopType'
       additionalProperties:
         type: object
+    microsoft.graph.cloudPcSnapshotResetMode:
+      title: cloudPcSnapshotResetMode
+      enum:
+        - notApplicable
+        - enabled
+        - disabled
+        - unknownFutureValue
+      type: string
     microsoft.graph.cloudPcUserSettingsPersistenceConfiguration:
       title: cloudPcUserSettingsPersistenceConfiguration
       type: object
@@ -74430,6 +74494,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -76110,7 +76177,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -76126,13 +76193,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -76262,7 +76329,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -76548,6 +76615,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -76717,6 +76828,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -77096,7 +77209,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -77110,6 +77223,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -77632,6 +77749,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -77994,7 +78112,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -78146,7 +78264,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -78980,6 +79098,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -79341,6 +79461,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -79429,6 +79565,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -79678,6 +79819,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -81064,6 +81210,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -81363,7 +81512,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -82372,6 +82521,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -82621,8 +82779,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -82712,6 +82868,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -83102,6 +83283,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -83120,7 +83313,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -85295,12 +85487,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -85334,6 +85529,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -85626,22 +85831,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -85957,6 +86146,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -86595,7 +86807,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -86981,6 +87193,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -88329,6 +88542,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -88529,28 +88744,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -88569,6 +88762,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -90060,6 +90261,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -92398,6 +92615,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -92456,14 +92681,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -93397,16 +93614,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -93425,20 +93645,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -93457,16 +93681,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -93485,16 +93712,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -93515,10 +93745,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -93715,6 +93947,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -93729,6 +93964,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -94174,6 +94416,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -94184,10 +94427,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -94198,6 +94443,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -94208,6 +94454,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -94216,10 +94463,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Devices.CloudPrint.yml b/openApiDocs/beta/Devices.CloudPrint.yml
index 65969999bb..f21fe06341 100644
--- a/openApiDocs/beta/Devices.CloudPrint.yml
+++ b/openApiDocs/beta/Devices.CloudPrint.yml
@@ -10160,7 +10160,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -10527,7 +10527,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.user:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.directoryObject'
@@ -10540,7 +10539,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -10567,7 +10566,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -10732,7 +10731,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -10754,7 +10753,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -10789,7 +10788,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -10893,7 +10892,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -11026,6 +11025,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -11734,6 +11739,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -13940,6 +13946,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -14571,6 +14579,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -14592,7 +14634,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -15686,7 +15727,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -15725,6 +15765,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -17235,6 +17280,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -17765,6 +17813,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -18168,6 +18218,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -18334,7 +18389,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -18348,6 +18403,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -18829,7 +18888,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -19059,7 +19118,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -20482,7 +20541,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -20498,13 +20557,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -20596,7 +20655,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -20914,6 +20973,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -21343,6 +21404,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -23776,6 +23881,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -24225,6 +24332,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -25528,6 +25640,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -25995,8 +26110,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -26086,6 +26199,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -26476,6 +26614,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -26494,7 +26644,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -26814,6 +26963,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.siteArchivalDetails:
       title: siteArchivalDetails
       type: object
@@ -28214,7 +28386,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -29048,6 +29220,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -30735,12 +30916,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -30774,6 +30958,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -31895,7 +32089,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -32281,6 +32475,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -32649,28 +32844,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -32689,6 +32862,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -33228,6 +33409,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.siteArchiveStatus:
       title: siteArchiveStatus
       enum:
@@ -34380,6 +34577,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -35794,14 +35993,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -36777,6 +36968,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -37524,16 +37723,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -37552,20 +37754,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -37584,16 +37790,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -37612,16 +37821,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -37642,10 +37854,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -37826,6 +38040,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -37840,6 +38057,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -38089,6 +38313,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -38099,10 +38324,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -38113,6 +38340,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -38123,6 +38351,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -38131,10 +38360,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Devices.CorporateManagement.yml b/openApiDocs/beta/Devices.CorporateManagement.yml
index da9f4bbcaa..b9f23a1333 100644
--- a/openApiDocs/beta/Devices.CorporateManagement.yml
+++ b/openApiDocs/beta/Devices.CorporateManagement.yml
@@ -56571,6 +56571,8 @@ components:
         - title: iosStoreApp
           type: object
           properties:
+            appleDeviceAppDeliveryProtocolType:
+              $ref: '#/components/schemas/microsoft.graph.appleDeviceDeliveryProtocol'
             applicableDeviceType:
               $ref: '#/components/schemas/microsoft.graph.iosDeviceType'
             appStoreUrl:
@@ -56592,6 +56594,8 @@ components:
         - title: iosVppApp
           type: object
           properties:
+            appleDeviceAppDeliveryProtocolType:
+              $ref: '#/components/schemas/microsoft.graph.appleDeviceDeliveryProtocol'
             applicableDeviceType:
               $ref: '#/components/schemas/microsoft.graph.iosDeviceType'
             appStoreUrl:
@@ -59950,6 +59954,8 @@ components:
               description: Indicates whether printing is allowed from managed apps.
             protectedMessagingRedirectAppType:
               $ref: '#/components/schemas/microsoft.graph.messagingRedirectAppType'
+            purviewContentEvaluationRequired:
+              $ref: '#/components/schemas/microsoft.graph.managedAppPurviewEvaluationRequirement'
             saveAsBlocked:
               type: boolean
               description: Indicates whether users may use the 'Save As' menu item to save a copy of protected files.
@@ -60923,6 +60929,8 @@ components:
       properties:
         deviceRestartBehavior:
           $ref: '#/components/schemas/microsoft.graph.win32LobAppRestartBehavior'
+        inUseBehavior:
+          $ref: '#/components/schemas/microsoft.graph.win32LobAppInUseActionType'
         maxRunTimeInMinutes:
           maximum: 2147483647
           minimum: -2147483648
@@ -63006,7 +63014,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -63033,7 +63041,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -63198,7 +63206,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -63220,7 +63228,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -63255,7 +63263,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -63359,7 +63367,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -63492,6 +63500,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -66278,6 +66292,31 @@ components:
           - value: blocked
             description: App protection policy will block messaging redirection to any app.
             name: blocked
+    microsoft.graph.managedAppPurviewEvaluationRequirement:
+      title: managedAppPurviewEvaluationRequirement
+      enum:
+        - notRequired
+        - requiredWhenOnline
+        - required
+        - unknownFutureValue
+      type: string
+      description: Specifies whether Microsoft Purview Data Loss Prevention (DLP) content evaluation is required before data sharing.
+      x-ms-enum:
+        name: managedAppPurviewEvaluationRequirement
+        modelAsString: false
+        values:
+          - value: notRequired
+            description: Microsoft Purview Data Loss Prevention (DLP) content evaluation is not required.
+            name: notRequired
+          - value: requiredWhenOnline
+            description: Microsoft Purview Data Loss Prevention (DLP) content evaluation is required when online; sharing is allowed if the service is unreachable.
+            name: requiredWhenOnline
+          - value: required
+            description: Microsoft Purview Data Loss Prevention (DLP) content evaluation is always required; sharing is blocked if the service is unreachable.
+            name: required
+          - value: unknownFutureValue
+            description: Evolvable enumeration sentinel value. Do not use.
+            name: unknownFutureValue
     microsoft.graph.managedAppLogUploadState:
       title: managedAppLogUploadState
       enum:
@@ -66507,6 +66546,35 @@ components:
           - value: force
             description: Intune will force the device to restart immediately after the app installation operation.
             name: force
+    microsoft.graph.win32LobAppInUseActionType:
+      title: win32LobAppInUseActionType
+      enum:
+        - notEnabled
+        - fail
+        - terminateWithoutUserInteraction
+        - terminateWithUserInteraction
+        - unknownFutureValue
+      type: string
+      description: 'Indicates whether app-in-use detection is enabled before app enforcement, and if enabled, the action to take when the app is detected to be in-use.'
+      x-ms-enum:
+        name: win32LobAppInUseActionType
+        modelAsString: false
+        values:
+          - value: notEnabled
+            description: Default. Indicates that no in-use detection will be evaluated before an app enforcement.
+            name: notEnabled
+          - value: fail
+            description: 'Indicates that the in-use detection will occur immediately before app enforcement. Enforcement will not occur if the app is detected to be in-use, and an error status will be reported for the app.'
+            name: fail
+          - value: terminateWithoutUserInteraction
+            description: 'Indicates that in-use detection will occur immediately before app enforcement. If the app is detected to be in-use, the processes specified in the corresponding process detection rules will be terminated, and app enforcement will commence.'
+            name: terminateWithoutUserInteraction
+          - value: terminateWithUserInteraction
+            description: 'Indicates that in-use detection will occur immediately before app enforcement. If the app is detected to be in-use, the end user will be prompted according to the configured deferral and countdown settings, and the processes specified in the corresponding process detection rules will be terminated before app enforcement is commenced. If any of the processes cannot be terminated, the app will not be enforced, and an error status will be reported for the app.'
+            name: terminateWithUserInteraction
+          - value: unknownFutureValue
+            description: Evolvable enumeration sentinel value. Do not use.
+            name: unknownFutureValue
     microsoft.graph.runAsAccountType:
       title: runAsAccountType
       enum:
@@ -68760,6 +68828,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -69309,6 +69379,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -69384,7 +69488,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.extension:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -69593,7 +69696,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -69960,7 +70063,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -70560,7 +70662,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -70610,6 +70711,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -71355,6 +71461,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -73047,7 +73156,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -73063,13 +73172,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -73199,7 +73308,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -73481,6 +73590,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcUserAccountType:
       title: cloudPcUserAccountType
@@ -73751,6 +73862,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -73920,6 +74075,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -74299,7 +74456,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -74313,6 +74470,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -74835,6 +74996,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -75197,7 +75359,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -75349,7 +75511,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -76020,6 +76182,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -76381,6 +76545,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -76469,6 +76649,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -76718,6 +76903,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -77835,6 +78025,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -78134,7 +78327,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -79217,6 +79410,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -79466,8 +79668,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -79557,6 +79757,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -79947,6 +80172,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -79965,7 +80202,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -82012,12 +82248,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -82051,6 +82290,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -82343,22 +82592,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -82674,6 +82907,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -83312,7 +83568,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -83698,6 +83954,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -84972,6 +85229,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -85172,28 +85431,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -85212,6 +85449,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -86703,6 +86948,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -89041,6 +89302,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -89099,14 +89368,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -90040,16 +90301,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -90068,20 +90332,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -90100,16 +90368,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -90128,16 +90399,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -90158,10 +90432,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -90358,6 +90634,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -90372,6 +90651,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -90817,6 +91103,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -90827,10 +91114,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -90841,6 +91130,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -90851,6 +91141,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -90859,10 +91150,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Devices.ServiceAnnouncement.yml b/openApiDocs/beta/Devices.ServiceAnnouncement.yml
index 22dbb6f7e1..229100d393 100644
--- a/openApiDocs/beta/Devices.ServiceAnnouncement.yml
+++ b/openApiDocs/beta/Devices.ServiceAnnouncement.yml
@@ -490,7 +490,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Invoke function incidentReport
-      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant. An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document does not exist for the issue.
+      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant. An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document doesn't exist for the issue.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/servicehealthissue-incidentreport?view=graph-rest-beta
@@ -647,7 +647,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Get serviceHealthIssue
-      description: Retrieve the properties and relationships of a serviceHealthIssue object. This operation retrieves a specified service health issue for tenant. The operation returns an error if the issue does not exist for the tenant.
+      description: Retrieve the properties and relationships of a serviceHealthIssue object. This operation retrieves a specified service health issue for tenant. The operation returns an error if the issue doesn't exist for the tenant.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/servicehealthissue-get?view=graph-rest-beta
@@ -753,7 +753,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Invoke function incidentReport
-      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant. An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document does not exist for the issue.
+      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant. An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document doesn't exist for the issue.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/servicehealthissue-incidentreport?view=graph-rest-beta
@@ -880,7 +880,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Get serviceUpdateMessage
-      description: Retrieve the properties and relationships of a serviceUpdateMessage object. This operation retrieves a specified service update message for the tenant. The operation returns an error if the message does not exist for the tenant.
+      description: Retrieve the properties and relationships of a serviceUpdateMessage object. This operation retrieves a specified service update message for the tenant. The operation returns an error if the message doesn't exist for the tenant.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/serviceupdatemessage-get?view=graph-rest-beta
@@ -2146,19 +2146,19 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.serviceHealth'
-              description: 'A collection of service health information for tenant. This property is a contained navigation property, it is nullable and readonly.'
+              description: 'A collection of service health information for tenant. This property is a contained navigation property, it is nullable and read-only.'
               x-ms-navigationProperty: true
             issues:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.serviceHealthIssue'
-              description: 'A collection of service issues for tenant. This property is a contained navigation property, it is nullable and readonly.'
+              description: 'A collection of service issues for tenant. This property is a contained navigation property, it is nullable and read-only.'
               x-ms-navigationProperty: true
             messages:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.serviceUpdateMessage'
-              description: 'A collection of service messages for tenant. This property is a contained navigation property, it is nullable and readonly.'
+              description: 'A collection of service messages for tenant. This property is a contained navigation property, it is nullable and read-only.'
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
diff --git a/openApiDocs/beta/Education.yml b/openApiDocs/beta/Education.yml
index 9bab6c871b..9e542b6103 100644
--- a/openApiDocs/beta/Education.yml
+++ b/openApiDocs/beta/Education.yml
@@ -124,7 +124,7 @@ paths:
       tags:
         - education.educationClass
       summary: Create educationClass
-      description: "Create a new class. This will also create a universal group. When you use this API to create a class, it will add special properties to the group, which will\r\nadd features such as assignments and special handling within Microsoft Teams when teams are created using the group. Please note that this API only creates the universal group and does not create a team. Microsoft Teams provides a user interface for teachers to create teams for their own classes using the groups created by this API."
+      description: "Create a new class. This will also create a universal group. When you use this API to create a class, it will add special properties to the group, which will\r\nadd features such as assignments and special handling within Microsoft Teams when teams are created using the group. Please note that this API only creates the universal group and doesn't create a team. Microsoft Teams provides a user interface for teachers to create teams for their own classes using the groups created by this API."
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/educationroot-post-classes?view=graph-rest-beta
@@ -19127,7 +19127,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -19494,7 +19494,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.educationModule:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -19788,7 +19787,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -19815,7 +19814,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -19980,7 +19979,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -20002,7 +20001,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -20037,7 +20036,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -20141,7 +20140,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -20274,6 +20273,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -21151,6 +21156,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -23505,6 +23511,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -24136,6 +24144,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -24157,7 +24199,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -25251,7 +25292,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -25290,6 +25330,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -26354,6 +26399,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -26885,6 +26933,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -27288,6 +27338,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -27454,7 +27509,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -27468,6 +27523,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -27949,7 +28008,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -28179,7 +28238,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -29662,7 +29721,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -29678,13 +29737,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -29776,7 +29835,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -30094,6 +30153,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -30491,6 +30552,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -32924,6 +33029,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -33285,6 +33392,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -33373,6 +33496,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -34706,6 +34834,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -35167,8 +35298,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -35258,6 +35387,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -35648,6 +35802,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -35666,7 +35832,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -35986,6 +36151,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.siteArchivalDetails:
       title: siteArchivalDetails
       type: object
@@ -37486,7 +37674,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -38312,6 +38500,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -39999,12 +40196,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -40038,6 +40238,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -40330,22 +40540,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -41175,7 +41369,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -41561,6 +41755,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -41949,28 +42144,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -41989,6 +42162,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -42528,6 +42709,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.siteArchiveStatus:
       title: siteArchiveStatus
       enum:
@@ -44203,6 +44400,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -45617,14 +45816,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -47873,6 +48064,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -48780,16 +48979,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -48808,20 +49010,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -48840,16 +49046,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -48868,16 +49077,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -48898,10 +49110,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -49082,6 +49296,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -49096,6 +49313,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -49354,6 +49578,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -49364,10 +49589,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -49378,6 +49605,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -49388,6 +49616,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -49396,10 +49625,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Files.yml b/openApiDocs/beta/Files.yml
index 344e76fe78..52b742f842 100644
--- a/openApiDocs/beta/Files.yml
+++ b/openApiDocs/beta/Files.yml
@@ -100120,6 +100120,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -100267,7 +100269,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -100294,7 +100296,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -100459,7 +100461,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -100481,7 +100483,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -100516,7 +100518,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -100620,7 +100622,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -100753,6 +100755,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -101421,6 +101429,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -101439,7 +101459,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -101572,7 +101591,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -101586,6 +101605,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -102214,8 +102237,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -102305,6 +102326,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -104221,6 +104267,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -104852,6 +104900,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -104873,7 +104955,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -104940,7 +105021,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -105307,7 +105388,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -106527,7 +106607,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -106577,6 +106656,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -108508,28 +108592,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -108548,6 +108610,30 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.pendingContentUpdate:
       title: pendingContentUpdate
       type: object
@@ -108883,6 +108969,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -110441,7 +110530,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -110457,13 +110546,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -110593,7 +110682,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -110911,6 +111000,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -111340,6 +111431,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -111612,6 +111747,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -111974,7 +112110,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -112126,7 +112262,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -114667,6 +114803,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -115116,6 +115254,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -115365,6 +115508,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -116882,30 +117030,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.ODataErrors.InnerError'
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.defaultSharingLink:
       title: defaultSharingLink
       type: object
@@ -117215,6 +117339,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -117479,7 +117606,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -118608,6 +118735,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -120935,12 +121071,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -120974,6 +121113,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -121581,6 +121730,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -122219,7 +122391,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -122605,6 +122777,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -124417,6 +124590,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -125655,6 +125830,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -128275,6 +128466,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -128937,16 +129136,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -128965,20 +129167,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -128997,16 +129203,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -129025,16 +129234,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -129055,10 +129267,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -129255,6 +129469,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -129269,6 +129486,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -129379,6 +129603,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -129389,10 +129614,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -129403,6 +129630,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -129413,6 +129641,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -129421,10 +129650,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Groups.yml b/openApiDocs/beta/Groups.yml
index 8e274833fe..d1288232a5 100644
--- a/openApiDocs/beta/Groups.yml
+++ b/openApiDocs/beta/Groups.yml
@@ -549,7 +549,7 @@ paths:
       tags:
         - groups.directoryObject
       summary: List acceptedSenders
-      description: 'Get a list of users or groups that are in the accepted-senders list for this group. Users in the accepted senders list can post to conversations of the group (identified in the GET request URL). Make sure you do not specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error.'
+      description: 'Get a list of users or groups that are in the accepted-senders list for this group. Users in the accepted senders list can post to conversations of the group (identified in the GET request URL). Make sure you don''t specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-list-acceptedsenders?view=graph-rest-beta
@@ -673,7 +673,7 @@ paths:
       tags:
         - groups.directoryObject
       summary: List acceptedSenders
-      description: 'Get a list of users or groups that are in the accepted-senders list for this group. Users in the accepted senders list can post to conversations of the group (identified in the GET request URL). Make sure you do not specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error.'
+      description: 'Get a list of users or groups that are in the accepted-senders list for this group. Users in the accepted senders list can post to conversations of the group (identified in the GET request URL). Make sure you don''t specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-list-acceptedsenders?view=graph-rest-beta
@@ -10844,7 +10844,7 @@ paths:
       tags:
         - groups.directorySetting
       summary: Create settings
-      description: 'Create a new directory setting based on the templates available in directorySettingTemplates. These settings can be at the tenant-level or at the group level. Group settings apply to only Microsoft 365 groups. The template named Group.Unified can be used to configure tenant-wide Microsoft 365 group settings, while the template named Group.Unified.Guest can be used to configure group-specific settings.'
+      description: 'Create a new directory setting based on the templates available in directorySettingTemplates. These settings can be at the tenant-level or at the group level. The following setting templates are available for groups:'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-post-settings?view=graph-rest-beta
@@ -16454,7 +16454,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -16821,7 +16821,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.conversation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -18021,7 +18020,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -18048,7 +18047,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -18213,7 +18212,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -18235,7 +18234,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -18270,7 +18269,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -18374,7 +18373,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -18507,6 +18506,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -19036,6 +19041,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -20464,6 +20470,8 @@ components:
           type: boolean
           description: Locks the keyCredentials and passwordCredentials properties for modification where credential usage type is Verify. This locks OAuth service principals.
           nullable: true
+        enforcementScope:
+          $ref: '#/components/schemas/microsoft.graph.servicePrincipalLockScope'
         isEnabled:
           type: boolean
           description: 'Enables or disables service principal lock configuration. To allow the sensitive properties to be updated, update this property to false to disable the lock on the service principal.'
@@ -21933,6 +21941,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -22340,6 +22350,40 @@ components:
           additionalProperties:
             type: object
           description: Event representing an general failure.
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -22361,7 +22405,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -23394,7 +23437,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -23433,6 +23475,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -24214,7 +24261,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -24228,6 +24275,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -24570,6 +24621,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -24973,6 +25027,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -25376,6 +25432,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -25841,7 +25902,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -26071,7 +26132,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -26425,6 +26486,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.servicePrincipalLockScope:
+      title: servicePrincipalLockScope
+      enum:
+        - notConfigured
+        - foreignTenantOnly
+        - everywhere
+        - unknownFutureValue
+      type: string
     microsoft.graph.kind:
       title: kind
       enum:
@@ -26694,7 +26763,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -27655,7 +27724,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -27671,13 +27740,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -27769,7 +27838,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -28087,6 +28156,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -28405,6 +28476,50 @@ components:
       additionalProperties:
         type: object
       description: Object containing detailed information about the error and its remediation.
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -30774,6 +30889,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -31135,6 +31252,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -31223,6 +31356,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -32811,6 +32949,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -33236,8 +33377,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -33327,6 +33466,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -33717,6 +33881,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -33735,7 +33911,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -34055,6 +34230,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.siteArchivalDetails:
       title: siteArchivalDetails
       type: object
@@ -36066,6 +36264,15 @@ components:
       additionalProperties:
         type: object
       description: 'Object representing a link to troubleshooting information, the link could be to the Azure Portal or a Microsoft doc.'
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -37760,12 +37967,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -37799,6 +38009,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -38091,22 +38311,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -38936,7 +39140,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -39322,6 +39526,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -39773,28 +39978,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -39813,6 +39996,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -40352,6 +40543,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.siteArchiveStatus:
       title: siteArchiveStatus
       enum:
@@ -42053,6 +42260,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -43499,14 +43708,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -44095,16 +44296,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -44123,20 +44327,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -44155,16 +44363,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -44183,16 +44394,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -44213,10 +44427,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -45739,6 +45955,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -46404,6 +46628,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -46414,10 +46639,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -46428,6 +46655,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -46438,6 +46666,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -46446,10 +46675,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
@@ -46759,6 +46990,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -46773,6 +47007,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
diff --git a/openApiDocs/beta/Identity.DirectoryManagement.yml b/openApiDocs/beta/Identity.DirectoryManagement.yml
index e17ccc1665..29148ef3e8 100644
--- a/openApiDocs/beta/Identity.DirectoryManagement.yml
+++ b/openApiDocs/beta/Identity.DirectoryManagement.yml
@@ -132,7 +132,7 @@ paths:
       tags:
         - admin.peopleAdminSettings
       summary: Update insightsSettings
-      description: "Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:\r\n-  Customize item insights privacy \r\n-  Customize people insights privacy"
+      description: "Update privacy settings to display or return the specified type of insightsSettings in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:\r\n-  Customize item insights privacy \r\n-  Customize people insights privacy"
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/insightssettings-update?view=graph-rest-beta
@@ -556,7 +556,7 @@ paths:
       tags:
         - admin.peopleAdminSettings
       summary: List profilePropertySettings
-      description: Get a collection of profilePropertySetting objects that define the configuration for user profile properties in an organization. The id property identifies each resource object uniquely.
+      description: Get a collection of profilePropertySetting objects that define the configuration for user profile property settings in an organization. The id property identifies each resource object uniquely.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/peopleadminsettings-list-profilepropertysettings?view=graph-rest-beta
@@ -720,7 +720,7 @@ paths:
       tags:
         - admin.peopleAdminSettings
       summary: Delete profilePropertySetting
-      description: Delete a profilePropertySetting object.
+      description: 'Delete a profilePropertySetting object. You shouldn''t delete a profilePropertySetting that includes a source precedence configuration. Instead, patch it to a default state that contains only the Microsoft Entra ID source reference. This delete operation is supported but fails unless the prioritizedSourceUrls property contains only the Entra ID source reference.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/profilepropertysetting-delete?view=graph-rest-beta
@@ -33997,7 +33997,7 @@ paths:
       tags:
         - organization.organizationSettings
       summary: Update insightsSettings
-      description: "Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:\r\n-  Customize item insights privacy \r\n-  Customize people insights privacy"
+      description: "Update privacy settings to display or return the specified type of insightsSettings in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:\r\n-  Customize item insights privacy \r\n-  Customize people insights privacy"
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/insightssettings-update?view=graph-rest-beta
@@ -34341,7 +34341,7 @@ paths:
       tags:
         - organization.organizationSettings
       summary: Update insightsSettings
-      description: "Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:\r\n-  Customize item insights privacy \r\n-  Customize people insights privacy"
+      description: "Update privacy settings to display or return the specified type of insightsSettings in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:\r\n-  Customize item insights privacy \r\n-  Customize people insights privacy"
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/insightssettings-update?view=graph-rest-beta
@@ -34600,7 +34600,7 @@ paths:
       tags:
         - settings.directorySetting
       summary: Create settings
-      description: 'Create a new directory setting based on the templates available in directorySettingTemplates. These settings can be at the tenant-level or at the group level. Group settings apply to only Microsoft 365 groups. The template named Group.Unified can be used to configure tenant-wide Microsoft 365 group settings, while the template named Group.Unified.Guest can be used to configure group-specific settings.'
+      description: 'Create a new directory setting based on the templates available in directorySettingTemplates. These settings can be at the tenant-level or at the group level. The following setting templates are available for groups:'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-post-settings?view=graph-rest-beta
@@ -35326,7 +35326,7 @@ components:
           properties:
             displayName:
               type: string
-              description: Name of the property-level setting.
+              description: Name of the property associated with this setting.
               nullable: true
             name:
               type: string
@@ -35337,7 +35337,7 @@ components:
               items:
                 type: string
                 nullable: true
-              description: A collection of prioritized profile source URLs ordered by data precedence within an organization.
+              description: 'A collection of prioritized profile source URLs ordered by data precedence within an organization. For details, see Manage profile source precedence in Microsoft 365.'
           additionalProperties:
             type: object
     microsoft.graph.profileSource:
@@ -35896,7 +35896,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -36263,7 +36263,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.orgContact:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.directoryObject'
@@ -36661,7 +36660,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -36688,7 +36687,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -36853,7 +36852,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -36875,7 +36874,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -36910,7 +36909,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -37014,7 +37013,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -37147,6 +37146,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -38712,6 +38717,10 @@ components:
               type: string
               description: The date and time when the related tenant was discovered. The timestamp type represents date and time information using ISO 8601 format and is always in UTC.
               format: date-time
+            isMicrosoftInfrastructure:
+              type: boolean
+              description: Indicates whether this tenant is a Microsoft infrastructure tenant.
+              readOnly: true
             appB2BSignInActivityMetrics:
               $ref: '#/components/schemas/microsoft.graph.tenantGovernanceServices.b2BSignInActivityMetrics'
             b2BRegistrationMetrics:
@@ -38817,7 +38826,7 @@ components:
               nullable: true
             roleTemplateId:
               type: string
-              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read only. Supports $filter (eq), $select.'
+              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read-only. Supports $filter (eq), $select.'
               nullable: true
             members:
               type: array
@@ -39930,6 +39939,8 @@ components:
           type: boolean
           description: Locks the keyCredentials and passwordCredentials properties for modification where credential usage type is Verify. This locks OAuth service principals.
           nullable: true
+        enforcementScope:
+          $ref: '#/components/schemas/microsoft.graph.servicePrincipalLockScope'
         isEnabled:
           type: boolean
           description: 'Enables or disables service principal lock configuration. To allow the sensitive properties to be updated, update this property to false to disable the lock on the service principal.'
@@ -40269,6 +40280,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -42289,6 +42301,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -42696,6 +42710,40 @@ components:
           additionalProperties:
             type: object
           description: Event representing an general failure.
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -42717,7 +42765,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -43750,7 +43797,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -43789,6 +43835,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -44611,6 +44662,7 @@ components:
       properties:
         allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled:
           type: boolean
+          description: 'When true, allows clients to update the onPremisesObjectIdentifier property for on-premises Active Directory synced objects.'
           nullable: true
         blockCloudObjectTakeoverThroughHardMatchEnabled:
           type: boolean
@@ -44870,6 +44922,10 @@ components:
       title: delegatedAdministrationRoleAssignment
       type: object
       properties:
+        groupDisplayName:
+          type: string
+          description: The display name of the security group referenced by the group navigation property. Server-populated and read-only; returns null if the referenced group has been deleted.
+          nullable: true
         roleTemplates:
           type: array
           items:
@@ -46619,6 +46675,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.servicePrincipalLockScope:
+      title: servicePrincipalLockScope
+      enum:
+        - notConfigured
+        - foreignTenantOnly
+        - everywhere
+        - unknownFutureValue
+      type: string
     microsoft.graph.kind:
       title: kind
       enum:
@@ -46854,6 +46918,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -47397,6 +47464,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -47800,6 +47869,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -47952,7 +48026,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -47966,6 +48040,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -48447,7 +48525,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -48677,7 +48755,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -48947,7 +49025,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -49793,7 +49871,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -49809,13 +49887,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -49907,7 +49985,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -50225,6 +50303,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -50543,6 +50623,50 @@ components:
       additionalProperties:
         type: object
       description: Object containing detailed information about the error and its remediation.
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -52952,6 +53076,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -53313,6 +53439,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -53401,6 +53543,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -54929,6 +55076,10 @@ components:
       title: delegatedAdministrationRoleAssignmentSnapshot
       type: object
       properties:
+        groupDisplayName:
+          type: string
+          description: The display name of the security group identified by groupId at the time the snapshot was created. Read-only.
+          nullable: true
         groupId:
           type: string
           description: The object ID of the role-assignable security group in the governing tenant that will be assigned the specified roles.
@@ -55412,6 +55563,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -55879,8 +56033,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -55970,6 +56122,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -56360,6 +56537,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -56378,7 +56567,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -56698,6 +56886,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.siteArchivalDetails:
       title: siteArchivalDetails
       type: object
@@ -58784,6 +58995,15 @@ components:
       additionalProperties:
         type: object
       description: 'Object representing a link to troubleshooting information, the link could be to the Azure Portal or a Microsoft doc.'
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -60471,12 +60691,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -60510,6 +60733,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -60802,22 +61035,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -61647,7 +61864,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -62033,6 +62250,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -62788,28 +63006,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -62828,6 +63024,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -63367,6 +63571,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.siteArchiveStatus:
       title: siteArchiveStatus
       enum:
@@ -64807,6 +65027,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -66301,16 +66523,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -66329,20 +66554,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -66361,16 +66590,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -66389,16 +66621,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -66419,10 +66654,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -66613,14 +66850,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -68518,6 +68747,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -68772,6 +69009,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -68782,10 +69020,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -68796,6 +69036,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -68806,6 +69047,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -68814,10 +69056,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
@@ -69538,6 +69782,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -69552,6 +69799,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
diff --git a/openApiDocs/beta/Identity.SignIns.yml b/openApiDocs/beta/Identity.SignIns.yml
index d9dcf6f61a..3bae4bc796 100644
--- a/openApiDocs/beta/Identity.SignIns.yml
+++ b/openApiDocs/beta/Identity.SignIns.yml
@@ -7917,7 +7917,7 @@ paths:
       tags:
         - identity.conditionalAccessRoot
       summary: Invoke function usage
-      description: 'The usage function allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
+      description: 'The usage function allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that don''t require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-usage?view=graph-rest-beta
@@ -8900,7 +8900,7 @@ paths:
       tags:
         - identity.conditionalAccessRoot
       summary: Invoke function usage
-      description: 'The usage function allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
+      description: 'The usage function allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that don''t require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-usage?view=graph-rest-beta
@@ -14917,7 +14917,7 @@ paths:
       tags:
         - informationProtection.bitlocker
       summary: List recoveryKeys
-      description: 'Get a list of the bitlockerRecoveryKey objects and their properties.  This operation does not return the key property. For information about how to read the key property, see Get bitlockerRecoveryKey. You can use this API to programmatically iterate through the list of recovery keys in the tenant and identify devices with BitLocker enabled. For more information, see the sample PowerShell code in BitLocker recovery process.'
+      description: 'Get a list of the bitlockerRecoveryKey objects and their properties.  This operation doesn''t return the key property. For information about how to read the key property, see Get bitlockerRecoveryKey. You can use this API to programmatically iterate through the list of recovery keys in the tenant and identify devices with BitLocker enabled. For more information, see the sample PowerShell code in BitLocker recovery process.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/bitlocker-list-recoverykeys?view=graph-rest-beta
@@ -14972,7 +14972,7 @@ paths:
       tags:
         - informationProtection.bitlocker
       summary: Get bitlockerRecoveryKey
-      description: 'Retrieve the properties and relationships of a bitlockerRecoveryKey object.  By default, this operation does not return the key property that represents the actual recovery key. To include the key property in the response, use the $select OData query parameter. Including the $select query parameter triggers a Microsoft Entra audit of the operation and generates an audit log. You can find the log in Microsoft Entra audit logs under the KeyManagement category.'
+      description: 'Retrieve the properties and relationships of a bitlockerRecoveryKey object.  By default, this operation doesn''t return the key property that represents the actual recovery key. To include the key property in the response, use the $select OData query parameter. Including the $select query parameter triggers a Microsoft Entra audit of the operation and generates an audit log. You can find the log in Microsoft Entra audit logs under the KeyManagement category.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/bitlockerrecoverykey-get?view=graph-rest-beta
@@ -19876,7 +19876,7 @@ paths:
       tags:
         - policies.authenticationStrengthPolicy
       summary: Invoke function usage
-      description: 'The usage function allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
+      description: 'The usage function allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that don''t require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-usage?view=graph-rest-beta
@@ -22428,6 +22428,133 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: action
+  '/policies/crossTenantAccessPolicy/partners/{crossTenantAccessPolicyConfigurationPartner-tenantId}/serviceProviderConstraints':
+    get:
+      tags:
+        - policies.crossTenantAccessPolicy
+      summary: Get serviceProviderConstraints from policies
+      operationId: policy.crossTenantAccessPolicy.partner_GetServiceProviderConstraint
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - policies.crossTenantAccessPolicy
+      summary: Update the navigation property serviceProviderConstraints in policies
+      operationId: policy.crossTenantAccessPolicy.partner_UpdateServiceProviderConstraint
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - policies.crossTenantAccessPolicy
+      summary: Delete navigation property serviceProviderConstraints for policies
+      operationId: policy.crossTenantAccessPolicy.partner_DeleteServiceProviderConstraint
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/policies/crossTenantAccessPolicy/partners/{crossTenantAccessPolicyConfigurationPartner-tenantId}/serviceProviderConstraints/microsoft.graph.restore':
+    post:
+      tags:
+        - policies.crossTenantAccessPolicy
+      summary: Invoke action restore
+      operationId: policy.crossTenantAccessPolicy.partner.serviceProviderConstraint_restore
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
   /policies/crossTenantAccessPolicy/partners/$count:
     get:
       tags:
@@ -23473,6 +23600,133 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: action
+  '/policies/deletedItems/crossTenantPartners/{crossTenantAccessPolicyConfigurationPartner-tenantId}/serviceProviderConstraints':
+    get:
+      tags:
+        - policies.policyDeletableRoot
+      summary: Get serviceProviderConstraints from policies
+      operationId: policy.deletedItem.crossTenantPartner_GetServiceProviderConstraint
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - policies.policyDeletableRoot
+      summary: Update the navigation property serviceProviderConstraints in policies
+      operationId: policy.deletedItem.crossTenantPartner_UpdateServiceProviderConstraint
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - policies.policyDeletableRoot
+      summary: Delete navigation property serviceProviderConstraints for policies
+      operationId: policy.deletedItem.crossTenantPartner_DeleteServiceProviderConstraint
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/policies/deletedItems/crossTenantPartners/{crossTenantAccessPolicyConfigurationPartner-tenantId}/serviceProviderConstraints/microsoft.graph.restore':
+    post:
+      tags:
+        - policies.policyDeletableRoot
+      summary: Invoke action restore
+      operationId: policy.deletedItem.crossTenantPartner.serviceProviderConstraint_restore
+      parameters:
+        - name: crossTenantAccessPolicyConfigurationPartner-tenantId
+          in: path
+          description: The unique identifier of crossTenantAccessPolicyConfigurationPartner
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: crossTenantAccessPolicyConfigurationPartner
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
   /policies/deletedItems/crossTenantPartners/$count:
     get:
       tags:
@@ -39528,7 +39782,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.'
+              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.'
               format: date-time
               nullable: true
             description:
@@ -39546,7 +39800,7 @@ components:
             modifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.'
+              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.'
               format: date-time
               nullable: true
             sessionControls:
@@ -40902,7 +41156,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -40929,7 +41183,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -41094,7 +41348,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -41116,7 +41370,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -41151,7 +41405,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -41255,7 +41509,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -41388,6 +41642,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -42250,6 +42510,8 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.m365CapabilityBase'
               description: Defines the partner-specific Microsoft 365 cross-tenant capabilities for inbound access from the partner organization.
               x-ms-navigationProperty: true
+            serviceProviderConstraints:
+              $ref: '#/components/schemas/microsoft.graph.serviceProviderConstraints'
           additionalProperties:
             type: object
     microsoft.graph.crossTenantIdentitySyncPolicyPartner:
@@ -42274,6 +42536,16 @@ components:
               $ref: '#/components/schemas/microsoft.graph.crossTenantUserSyncInbound'
           additionalProperties:
             type: object
+    microsoft.graph.serviceProviderConstraints:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.policyDeletableItem'
+        - title: serviceProviderConstraints
+          type: object
+          properties:
+            id:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.policyTemplate:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -46405,6 +46677,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -46812,6 +47086,40 @@ components:
           additionalProperties:
             type: object
           description: Event representing an general failure.
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -46887,7 +47195,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.extension:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -47067,7 +47374,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -47434,7 +47741,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -48616,7 +48922,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -48666,6 +48971,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -52153,6 +52463,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -53374,7 +53687,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -53390,13 +53703,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -53526,7 +53839,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -53844,6 +54157,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -54161,6 +54476,50 @@ components:
       additionalProperties:
         type: object
       description: Object containing detailed information about the error and its remediation.
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -54330,6 +54689,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -54709,7 +55070,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -54723,6 +55084,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -55093,6 +55458,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -55455,7 +55821,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -55607,7 +55973,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -58148,6 +58514,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -58509,6 +58877,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -58572,6 +58956,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -58821,6 +59210,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -60621,6 +61015,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -60885,7 +61282,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -61751,6 +62148,15 @@ components:
       additionalProperties:
         type: object
       description: 'Object representing a link to troubleshooting information, the link could be to the Azure Portal or a Microsoft doc.'
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -62000,8 +62406,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -62070,6 +62474,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -62460,6 +62889,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -62478,7 +62919,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -65455,12 +65895,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -65494,6 +65937,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -65760,22 +66213,6 @@ components:
         - waitingOnOthers
         - deferred
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -66032,6 +66469,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -66670,7 +67130,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -67056,6 +67516,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -67338,16 +67799,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -67366,20 +67830,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -67398,16 +67866,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -67426,16 +67897,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -67456,10 +67930,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -67583,6 +68059,7 @@ components:
         - sPSharingNotifyUser
         - sPSharingGenerateIncidentReport
         - restrictWebGrounding
+        - policyTip
       type: string
     microsoft.graph.labelActionBase:
       title: labelActionBase
@@ -68627,6 +69104,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -68848,28 +69327,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -68888,6 +69345,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -70701,6 +71166,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -71321,6 +71802,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -71331,10 +71813,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -71345,6 +71829,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -71355,6 +71840,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -71363,10 +71849,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.conditionalAccessExternalTenantsMembershipKind:
@@ -73032,6 +73520,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -73090,14 +73586,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -74149,6 +74637,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -74163,6 +74654,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
diff --git a/openApiDocs/beta/Migrations.yml b/openApiDocs/beta/Migrations.yml
index f2dd881b1f..85b5fb01c8 100644
--- a/openApiDocs/beta/Migrations.yml
+++ b/openApiDocs/beta/Migrations.yml
@@ -162,7 +162,7 @@ paths:
       tags:
         - solutions.migrationsRoot
       summary: Create crossTenantMigrationJob
-      description: Create a new crossTenantMigrationJob.
+      description: 'Create a new crossTenantMigrationJob. A job defines the migration batch but doesn''t start validation or migration. After you create the job, call validate to verify tenant and resource configuration, then call migrate to begin the actual migration.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/migrationsroot-post-crosstenantmigrationjobs?view=graph-rest-beta
@@ -353,6 +353,10 @@ paths:
       tags:
         - solutions.migrationsRoot
       summary: Invoke action migrate
+      description: 'Migrate a cross-tenant migration job asynchronously. The job must pass validation before migration can start. After a job is created by using the Create crossTenantMigrationJob method and validated by using the validate action, call this action to start the migration of user data from the source tenant to the target tenant for the specified workloads. Validation results expire after seven days; if expired, revalidate the job before you call the migrate API. This action is asynchronous. After you call the migrate API, poll the Get crossTenantMigrationJob endpoint to check for a terminal status of completed, completedWithErrors, or failed.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/crosstenantmigrationjob-migrate?view=graph-rest-beta
       operationId: solution.migration.crossTenantMigrationJob_migrate
       parameters:
         - name: crossTenantMigrationJob-id
@@ -383,6 +387,10 @@ paths:
       tags:
         - solutions.migrationsRoot
       summary: Invoke action validate
+      description: 'Validate the configuration of a cross-tenant migration job asynchronously. This action doesn''t migrate any content, but goes through validation for the specified workloads to find any errors or misconfigurations that affect an actual migration job. The job must be in a submitted or validateFailed status before you can call this action. This action is asynchronous. After you call the validate API, poll the Get crossTenantMigrationJob endpoint to check for a terminal status of validatePassed or validateFailed.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/crosstenantmigrationjob-validate?view=graph-rest-beta
       operationId: solution.migration.crossTenantMigrationJob_validate
       parameters:
         - name: crossTenantMigrationJob-id
@@ -886,6 +894,10 @@ paths:
       tags:
         - solutions.migrationsRoot
       summary: Invoke action migrate
+      description: 'Migrate a cross-tenant migration job asynchronously. The job must pass validation before migration can start. After a job is created by using the Create crossTenantMigrationJob method and validated by using the validate action, call this action to start the migration of user data from the source tenant to the target tenant for the specified workloads. Validation results expire after seven days; if expired, revalidate the job before you call the migrate API. This action is asynchronous. After you call the migrate API, poll the Get crossTenantMigrationJob endpoint to check for a terminal status of completed, completedWithErrors, or failed.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/crosstenantmigrationjob-migrate?view=graph-rest-beta
       operationId: solution.migration.crossTenantMigrationJob.displayName_migrate
       parameters:
         - name: displayName
@@ -915,6 +927,10 @@ paths:
       tags:
         - solutions.migrationsRoot
       summary: Invoke action validate
+      description: 'Validate the configuration of a cross-tenant migration job asynchronously. This action doesn''t migrate any content, but goes through validation for the specified workloads to find any errors or misconfigurations that affect an actual migration job. The job must be in a submitted or validateFailed status before you can call this action. This action is asynchronous. After you call the validate API, poll the Get crossTenantMigrationJob endpoint to check for a terminal status of validatePassed or validateFailed.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/crosstenantmigrationjob-validate?view=graph-rest-beta
       operationId: solution.migration.crossTenantMigrationJob.displayName_validate
       parameters:
         - name: displayName
@@ -958,65 +974,6 @@ paths:
         removalDate: '2026-07-09'
         date: '2023-11-15'
         version: 2023-11/PrivatePreview:CrossTenantContentMigrationAPI
-  /solutions/migrations/crossTenantMigrationJobs/microsoft.graph.validate:
-    post:
-      tags:
-        - solutions.migrationsRoot
-      summary: Invoke action validate
-      description: 'Validate the configuration of a crossTenantMigrationJob. This function doesn''t migrate any content, but goes through validation for the specified workloads to find any errors or misconfigurations that would affect an actual migration job. '
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/crosstenantmigrationjob-validate?view=graph-rest-beta
-      operationId: solution.migration.crossTenantMigrationJob_validate
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                displayName:
-                  type: string
-                  nullable: true
-                completeAfterDateTime:
-                  type: string
-                  nullable: true
-                sourceTenantId:
-                  type: string
-                  nullable: true
-                exchangeSettings:
-                  $ref: '#/components/schemas/microsoft.graph.exchangeOnlineCrossTenantMigrationSettings'
-                workloads:
-                  type: array
-                  items:
-                    type: string
-                    nullable: true
-                resourceType:
-                  type: string
-                  nullable: true
-                resources:
-                  type: array
-                  items:
-                    type: string
-                    nullable: true
-              additionalProperties:
-                type: object
-        required: true
-      responses:
-        2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationJob'
-        default:
-          $ref: '#/components/responses/error'
-      deprecated: true
-      x-ms-deprecation:
-        removalDate: '2026-07-09'
-        date: '2025-07-09'
-        version: 2025-07/PrivatePreview:CrossTenantContentMigrationAPI
-      x-ms-docs-operation-type: action
 components:
   schemas:
     microsoft.graph.migrationsRoot:
@@ -1042,19 +999,19 @@ components:
             completeAfterDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: DateTime after which the migration should be performed
+              description: 'Date and time after which the migration should be performed. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z.'
               format: date-time
             createdBy:
               type: string
-              description: ID of the user that created the job
+              description: User principal name (UPN) of the user who created the job. Read-only.
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: When the job what created
+              description: 'When the job was created. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z. Read-only.'
               format: date-time
             displayName:
               type: string
-              description: Display name of the job. Must be unique per tenant
+              description: Display name of the job. Must be unique per tenant.
             exchangeSettings:
               $ref: '#/components/schemas/microsoft.graph.exchangeOnlineCrossTenantMigrationSettings'
             jobType:
@@ -1062,38 +1019,38 @@ components:
             lastUpdatedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: When this migration job was last updated
+              description: 'When this migration job was last updated. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z. Read-only.'
               format: date-time
             message:
               type: string
-              description: Status message of the migration job
+              description: Status message of the migration job. Nullable. Read-only.
               nullable: true
             resources:
               type: array
               items:
                 type: string
-              description: IDs (GUID) of the resources being migrated with the migration job
+              description: IDs (GUID) of the resources that are migrated with the migration job.
             resourceType:
               type: string
-              description: Type of resource being migrated. Only Users is currently supported
+              description: Type of resource being migrated. Only Users is currently supported.
             sourceTenantId:
               type: string
-              description: ID (GUID) of the tenant that content is being migrated from
+              description: ID (GUID) of the tenant that content is migrated from.
             status:
               $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationJobStatus'
             targetTenantId:
               type: string
-              description: ID of the tenant that content is being migrated to
+              description: ID of the tenant that content is migrated to. Read-only.
             workloads:
               type: array
               items:
                 type: string
-              description: 'Workloads to migrate. Supported workloads are Teams, Exchange, and ODSP (OneDrive/SharePoint)'
+              description: 'Workloads to migrate. Supported workloads are Teams, Exchange, and ODSP (OneDrive/SharePoint).'
             users:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationTask'
-              description: Details and status of the users being migrated in this migration job
+              description: Details and status of the users migrated in this migration job.
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
@@ -1132,6 +1089,15 @@ components:
               description: Type of migration task. Only Users are supported at this time.
           additionalProperties:
             type: object
+    microsoft.graph.entity:
+      title: entity
+      type: object
+      properties:
+        id:
+          type: string
+          description: The unique identifier for an entity. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.exchangeOnlineCrossTenantMigrationSettings:
       title: exchangeOnlineCrossTenantMigrationSettings
       type: object
@@ -1144,15 +1110,6 @@ components:
           description: Delivery domain on the target tenant
       additionalProperties:
         type: object
-    microsoft.graph.entity:
-      title: entity
-      type: object
-      properties:
-        id:
-          type: string
-          description: The unique identifier for an entity. Read-only.
-      additionalProperties:
-        type: object
     microsoft.graph.crossTenantMigrationJobType:
       title: crossTenantMigrationJobType
       enum:
diff --git a/openApiDocs/beta/NetworkAccess.yml b/openApiDocs/beta/NetworkAccess.yml
index b1bddaabea..acc4717025 100644
--- a/openApiDocs/beta/NetworkAccess.yml
+++ b/openApiDocs/beta/NetworkAccess.yml
@@ -11705,7 +11705,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -11732,7 +11732,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -11897,7 +11897,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -11919,7 +11919,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -11954,7 +11954,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -12058,7 +12058,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -12191,6 +12191,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -15687,6 +15693,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -16094,6 +16102,40 @@ components:
           additionalProperties:
             type: object
           description: Event representing an general failure.
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -16169,7 +16211,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.site:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -16371,7 +16412,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -16738,7 +16779,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -17897,7 +17937,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -17947,6 +17986,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -18658,6 +18702,8 @@ components:
         - expired
         - enabled
         - disabled
+        - creating
+        - revoked
       type: string
     microsoft.graph.networkaccess.validityDate:
       title: validityDate
@@ -19013,7 +19059,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -19336,6 +19382,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -20481,7 +20530,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -20497,13 +20546,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -20633,7 +20682,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -20951,6 +21000,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -21281,6 +21332,50 @@ components:
       additionalProperties:
         type: object
       description: Object containing detailed information about the error and its remediation.
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -21450,6 +21545,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -21829,7 +21926,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -21843,6 +21940,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -22365,6 +22466,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -22727,7 +22829,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -22879,7 +22981,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -25396,6 +25498,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -25757,6 +25861,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -25845,6 +25965,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -26094,6 +26219,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -27473,6 +27603,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -28640,6 +28773,15 @@ components:
       additionalProperties:
         type: object
       description: 'Object representing a link to troubleshooting information, the link could be to the Azure Portal or a Microsoft doc.'
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -28889,8 +29031,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -28980,6 +29120,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -29370,6 +29535,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -29388,7 +29565,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -32529,12 +32705,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -32568,6 +32747,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -32860,22 +33049,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -33191,6 +33364,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -33829,7 +34025,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -34215,6 +34411,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -35644,6 +35841,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -35865,28 +36064,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -35905,6 +36082,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -37808,6 +37993,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -38466,16 +38667,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -38494,20 +38698,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -38526,16 +38734,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -38554,16 +38765,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -38584,10 +38798,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -40167,6 +40383,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -40225,14 +40449,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -40937,6 +41153,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -40947,10 +41164,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -40961,6 +41180,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -40971,6 +41191,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -40979,10 +41200,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
@@ -41308,6 +41531,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -41322,6 +41548,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
diff --git a/openApiDocs/beta/Planner.yml b/openApiDocs/beta/Planner.yml
index 15f0918353..ff945046e9 100644
--- a/openApiDocs/beta/Planner.yml
+++ b/openApiDocs/beta/Planner.yml
@@ -2531,187 +2531,12 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.archive':
-    post:
-      tags:
-        - groups.plannerGroup
-      summary: Invoke action archive
-      description: 'Archive a plannerPlan object. Archiving a plan, also archives the plannerTasks and plannerBuckets in the plan.  An archived entity is read-only. Archived entities cannot be updated. An archived plan can be unarchived.  All archived entities can be deleted. Archived tasks are not included in the response for list of tasks assigned to a user. '
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/plannerplan-archive?view=graph-rest-beta
-      operationId: group.planner.plan_archive
-      parameters:
-        - name: group-id
-          in: path
-          description: The unique identifier of group
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: group
-        - name: plannerPlan-id
-          in: path
-          description: The unique identifier of plannerPlan
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerPlan
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                justification:
-                  type: string
-                  nullable: true
-              additionalProperties:
-                type: object
-        required: true
-      responses:
-        2XX:
-          description: Success
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.getUsageRights()':
-    get:
-      tags:
-        - groups.plannerGroup
-      summary: Invoke function getUsageRights
-      operationId: group.planner.plan_getUsageRight
-      parameters:
-        - name: group-id
-          in: path
-          description: The unique identifier of group
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: group
-        - name: plannerPlan-id
-          in: path
-          description: The unique identifier of plannerPlan
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerPlan
-      responses:
-        2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.planUsageRight'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: function
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.moveToContainer':
-    post:
-      tags:
-        - groups.plannerGroup
-      summary: Invoke action moveToContainer
-      description: Move a planner plan object from one planner plan container to another. Planner plans can only be moved from a user container to a group container.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/plannerplan-movetocontainer?view=graph-rest-beta
-      operationId: group.planner.plan_moveToContainer
-      parameters:
-        - name: group-id
-          in: path
-          description: The unique identifier of group
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: group
-        - name: plannerPlan-id
-          in: path
-          description: The unique identifier of plannerPlan
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerPlan
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                container:
-                  $ref: '#/components/schemas/microsoft.graph.plannerPlanContainer'
-              additionalProperties:
-                type: object
-        required: true
-      responses:
-        2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerPlan'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.unarchive':
-    post:
-      tags:
-        - groups.plannerGroup
-      summary: Invoke action unarchive
-      description: 'Unarchive a plannerPlan object. Unarchiving a plan, also unarchives the plannerTasks and plannerBuckets in the plan.  Only a plan that is archived can be unarchived.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/plannerplan-unarchive?view=graph-rest-beta
-      operationId: group.planner.plan_unarchive
-      parameters:
-        - name: group-id
-          in: path
-          description: The unique identifier of group
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: group
-        - name: plannerPlan-id
-          in: path
-          description: The unique identifier of plannerPlan
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerPlan
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                justification:
-                  type: string
-                  nullable: true
-              additionalProperties:
-                type: object
-        required: true
-      responses:
-        2XX:
-          description: Success
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks':
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/historyItems':
     get:
       tags:
         - groups.plannerGroup
-      summary: Get tasks from groups
-      description: Collection of tasks in the plan. Read-only. Nullable.
-      operationId: group.planner.plan_ListTask
+      summary: Get historyItems from groups
+      operationId: group.planner.plan_ListHistoryItem
       parameters:
         - name: group-id
           in: path
@@ -2766,7 +2591,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.plannerTaskCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.plannerHistoryItemCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -2776,8 +2601,8 @@ paths:
     post:
       tags:
         - groups.plannerGroup
-      summary: Create new navigation property to tasks for groups
-      operationId: group.planner.plan_CreateTask
+      summary: Create new navigation property to historyItems for groups
+      operationId: group.planner.plan_CreateHistoryItem
       parameters:
         - name: group-id
           in: path
@@ -2800,7 +2625,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerTask'
+              $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         required: true
       responses:
         2XX:
@@ -2808,17 +2633,16 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTask'
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}':
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/historyItems/{plannerHistoryItem-id}':
     get:
       tags:
         - groups.plannerGroup
-      summary: Get tasks from groups
-      description: Collection of tasks in the plan. Read-only. Nullable.
-      operationId: group.planner.plan_GetTask
+      summary: Get historyItems from groups
+      operationId: group.planner.plan_GetHistoryItem
       parameters:
         - name: group-id
           in: path
@@ -2836,14 +2660,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
+        - name: plannerHistoryItem-id
           in: path
-          description: The unique identifier of plannerTask
+          description: The unique identifier of plannerHistoryItem
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTask
+          x-ms-docs-key-type: plannerHistoryItem
         - name: $select
           in: query
           description: Select properties to be returned
@@ -2870,15 +2694,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTask'
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - groups.plannerGroup
-      summary: Update the navigation property tasks in groups
-      operationId: group.planner.plan_UpdateTask
+      summary: Update the navigation property historyItems in groups
+      operationId: group.planner.plan_UpdateHistoryItem
       parameters:
         - name: group-id
           in: path
@@ -2896,20 +2720,20 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
+        - name: plannerHistoryItem-id
           in: path
-          description: The unique identifier of plannerTask
+          description: The unique identifier of plannerHistoryItem
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTask
+          x-ms-docs-key-type: plannerHistoryItem
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerTask'
+              $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         required: true
       responses:
         2XX:
@@ -2917,15 +2741,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTask'
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - groups.plannerGroup
-      summary: Delete navigation property tasks for groups
-      operationId: group.planner.plan_DeleteTask
+      summary: Delete navigation property historyItems for groups
+      operationId: group.planner.plan_DeleteHistoryItem
       parameters:
         - name: group-id
           in: path
@@ -2943,14 +2767,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
+        - name: plannerHistoryItem-id
           in: path
-          description: The unique identifier of plannerTask
+          description: The unique identifier of plannerHistoryItem
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTask
+          x-ms-docs-key-type: plannerHistoryItem
         - name: If-Match
           in: header
           description: ETag
@@ -2963,13 +2787,12 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/assignedToTaskBoardFormat':
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/historyItems/$count':
     get:
       tags:
         - groups.plannerGroup
-      summary: Get assignedToTaskBoardFormat from groups
-      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by assignedTo.
-      operationId: group.planner.plan.task_GetAssignedToTaskBoardFormat
+      summary: Get the number of the resource
+      operationId: group.planner.plan.historyItem_GetCount
       parameters:
         - name: group-id
           in: path
@@ -2987,49 +2810,23 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
-          in: path
-          description: The unique identifier of plannerTask
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerTask
-        - name: $select
-          in: query
-          description: Select properties to be returned
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
-        - name: $expand
-          in: query
-          description: Expand related entities
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
       responses:
         2XX:
-          description: Retrieved navigation property
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerAssignedToTaskBoardTaskFormat'
+          $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    patch:
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.archive':
+    post:
       tags:
         - groups.plannerGroup
-      summary: Update the navigation property assignedToTaskBoardFormat in groups
-      operationId: group.planner.plan.task_UpdateAssignedToTaskBoardFormat
+      summary: Invoke action archive
+      description: 'Archive a plannerPlan object. Archiving a plan, also archives the plannerTasks and plannerBuckets in the plan.  An archived entity is read-only. Archived entities cannot be updated. An archived plan can be unarchived.  All archived entities can be deleted. Archived tasks are not included in the response for list of tasks assigned to a user. '
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/plannerplan-archive?view=graph-rest-beta
+      operationId: group.planner.plan_archive
       parameters:
         - name: group-id
           in: path
@@ -3047,43 +2844,68 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                justification:
+                  type: string
+                  nullable: true
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.getUsageRights()':
+    get:
+      tags:
+        - groups.plannerGroup
+      summary: Invoke function getUsageRights
+      operationId: group.planner.plan_getUsageRight
+      parameters:
+        - name: group-id
           in: path
-          description: The unique identifier of plannerTask
+          description: The unique identifier of group
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTask
-        - name: If-Match
-          in: header
-          description: ETag value.
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
           required: true
           style: simple
           schema:
             type: string
-      requestBody:
-        description: New navigation property values
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerAssignedToTaskBoardTaskFormat'
-        required: true
+          x-ms-docs-key-type: plannerPlan
       responses:
         2XX:
           description: Success
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerAssignedToTaskBoardTaskFormat'
+                $ref: '#/components/schemas/microsoft.graph.planUsageRight'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    delete:
+      x-ms-docs-operation-type: function
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.moveToContainer':
+    post:
       tags:
         - groups.plannerGroup
-      summary: Delete navigation property assignedToTaskBoardFormat for groups
-      operationId: group.planner.plan.task_DeleteAssignedToTaskBoardFormat
+      summary: Invoke action moveToContainer
+      description: Move a planner plan object from one planner plan container to another. Planner plans can only be moved from a user container to a group container.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/plannerplan-movetocontainer?view=graph-rest-beta
+      operationId: group.planner.plan_moveToContainer
       parameters:
         - name: group-id
           in: path
@@ -3101,33 +2923,81 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                container:
+                  $ref: '#/components/schemas/microsoft.graph.plannerPlanContainer'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerPlan'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/microsoft.graph.unarchive':
+    post:
+      tags:
+        - groups.plannerGroup
+      summary: Invoke action unarchive
+      description: 'Unarchive a plannerPlan object. Unarchiving a plan, also unarchives the plannerTasks and plannerBuckets in the plan.  Only a plan that is archived can be unarchived.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/plannerplan-unarchive?view=graph-rest-beta
+      operationId: group.planner.plan_unarchive
+      parameters:
+        - name: group-id
           in: path
-          description: The unique identifier of plannerTask
+          description: The unique identifier of group
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTask
-        - name: If-Match
-          in: header
-          description: ETag
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
           style: simple
           schema:
             type: string
+          x-ms-docs-key-type: plannerPlan
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                justification:
+                  type: string
+                  nullable: true
+              additionalProperties:
+                type: object
+        required: true
       responses:
         2XX:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/bucketTaskBoardFormat':
+      x-ms-docs-operation-type: action
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks':
     get:
       tags:
         - groups.plannerGroup
-      summary: Get bucketTaskBoardFormat from groups
-      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by bucket.
-      operationId: group.planner.plan.task_GetBucketTaskBoardFormat
+      summary: Get tasks from groups
+      description: Collection of tasks in the plan. Read-only. Nullable.
+      operationId: group.planner.plan_ListTask
       parameters:
         - name: group-id
           in: path
@@ -3145,14 +3015,21 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
-          in: path
-          description: The unique identifier of plannerTask
-          required: true
-          style: simple
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
           schema:
-            type: string
-          x-ms-docs-key-type: plannerTask
+            uniqueItems: true
+            type: array
+            items:
+              type: string
         - name: $select
           in: query
           description: Select properties to be returned
@@ -3175,19 +3052,18 @@ paths:
               type: string
       responses:
         2XX:
-          description: Retrieved navigation property
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerBucketTaskBoardTaskFormat'
+          $ref: '#/components/responses/microsoft.graph.plannerTaskCollectionResponse'
         default:
           $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
       x-ms-docs-operation-type: operation
-    patch:
+    post:
       tags:
         - groups.plannerGroup
-      summary: Update the navigation property bucketTaskBoardFormat in groups
-      operationId: group.planner.plan.task_UpdateBucketTaskBoardFormat
+      summary: Create new navigation property to tasks for groups
+      operationId: group.planner.plan_CreateTask
       parameters:
         - name: group-id
           in: path
@@ -3205,87 +3081,30 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
-          in: path
-          description: The unique identifier of plannerTask
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerTask
-        - name: If-Match
-          in: header
-          description: ETag value.
-          required: true
-          style: simple
-          schema:
-            type: string
       requestBody:
-        description: New navigation property values
+        description: New navigation property
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerBucketTaskBoardTaskFormat'
+              $ref: '#/components/schemas/microsoft.graph.plannerTask'
         required: true
       responses:
         2XX:
-          description: Success
+          description: Created navigation property.
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerBucketTaskBoardTaskFormat'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    delete:
-      tags:
-        - groups.plannerGroup
-      summary: Delete navigation property bucketTaskBoardFormat for groups
-      operationId: group.planner.plan.task_DeleteBucketTaskBoardFormat
-      parameters:
-        - name: group-id
-          in: path
-          description: The unique identifier of group
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: group
-        - name: plannerPlan-id
-          in: path
-          description: The unique identifier of plannerPlan
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerPlan
-        - name: plannerTask-id
-          in: path
-          description: The unique identifier of plannerTask
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerTask
-        - name: If-Match
-          in: header
-          description: ETag
-          style: simple
-          schema:
-            type: string
-      responses:
-        2XX:
-          description: Success
+                $ref: '#/components/schemas/microsoft.graph.plannerTask'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/details':
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}':
     get:
       tags:
         - groups.plannerGroup
-      summary: Get details from groups
-      description: Read-only. Nullable. More details about the task.
-      operationId: group.planner.plan.task_GetDetail
+      summary: Get tasks from groups
+      description: Collection of tasks in the plan. Read-only. Nullable.
+      operationId: group.planner.plan_GetTask
       parameters:
         - name: group-id
           in: path
@@ -3337,15 +3156,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTaskDetails'
+                $ref: '#/components/schemas/microsoft.graph.plannerTask'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - groups.plannerGroup
-      summary: Update the navigation property details in groups
-      operationId: group.planner.plan.task_UpdateDetail
+      summary: Update the navigation property tasks in groups
+      operationId: group.planner.plan_UpdateTask
       parameters:
         - name: group-id
           in: path
@@ -3371,19 +3190,12 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: If-Match
-          in: header
-          description: ETag value.
-          required: true
-          style: simple
-          schema:
-            type: string
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerTaskDetails'
+              $ref: '#/components/schemas/microsoft.graph.plannerTask'
         required: true
       responses:
         2XX:
@@ -3391,15 +3203,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTaskDetails'
+                $ref: '#/components/schemas/microsoft.graph.plannerTask'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - groups.plannerGroup
-      summary: Delete navigation property details for groups
-      operationId: group.planner.plan.task_DeleteDetail
+      summary: Delete navigation property tasks for groups
+      operationId: group.planner.plan_DeleteTask
       parameters:
         - name: group-id
           in: path
@@ -3437,13 +3249,13 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages':
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/assignedToTaskBoardFormat':
     get:
       tags:
         - groups.plannerGroup
-      summary: Get messages from groups
-      description: Read-only. Nullable. Chat messages associated with the task.
-      operationId: group.planner.plan.task_ListMessage
+      summary: Get assignedToTaskBoardFormat from groups
+      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by assignedTo.
+      operationId: group.planner.plan.task_GetAssignedToTaskBoardFormat
       parameters:
         - name: group-id
           in: path
@@ -3469,21 +3281,6 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - $ref: '#/components/parameters/top'
-        - $ref: '#/components/parameters/skip'
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
-        - $ref: '#/components/parameters/count'
-        - name: $orderby
-          in: query
-          description: Order items by property values
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
         - name: $select
           in: query
           description: Select properties to be returned
@@ -3506,18 +3303,19 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.plannerTaskChatMessageCollectionResponse'
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerAssignedToTaskBoardTaskFormat'
         default:
           $ref: '#/components/responses/error'
-      x-ms-pageable:
-        nextLinkName: '@odata.nextLink'
-        operationName: listMore
       x-ms-docs-operation-type: operation
-    post:
+    patch:
       tags:
         - groups.plannerGroup
-      summary: Create new navigation property to messages for groups
-      operationId: group.planner.plan.task_CreateMessage
+      summary: Update the navigation property assignedToTaskBoardFormat in groups
+      operationId: group.planner.plan.task_UpdateAssignedToTaskBoardFormat
       parameters:
         - name: group-id
           in: path
@@ -3543,30 +3341,35 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
+        - name: If-Match
+          in: header
+          description: ETag value.
+          required: true
+          style: simple
+          schema:
+            type: string
       requestBody:
-        description: New navigation property
+        description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+              $ref: '#/components/schemas/microsoft.graph.plannerAssignedToTaskBoardTaskFormat'
         required: true
       responses:
         2XX:
-          description: Created navigation property.
+          description: Success
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+                $ref: '#/components/schemas/microsoft.graph.plannerAssignedToTaskBoardTaskFormat'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/{plannerTaskChatMessage-id}':
-    get:
+    delete:
       tags:
         - groups.plannerGroup
-      summary: Get messages from groups
-      description: Read-only. Nullable. Chat messages associated with the task.
-      operationId: group.planner.plan.task_GetMessage
+      summary: Delete navigation property assignedToTaskBoardFormat for groups
+      operationId: group.planner.plan.task_DeleteAssignedToTaskBoardFormat
       parameters:
         - name: group-id
           in: path
@@ -3592,14 +3395,50 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: plannerTaskChatMessage-id
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/bucketTaskBoardFormat':
+    get:
+      tags:
+        - groups.plannerGroup
+      summary: Get bucketTaskBoardFormat from groups
+      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by bucket.
+      operationId: group.planner.plan.task_GetBucketTaskBoardFormat
+      parameters:
+        - name: group-id
           in: path
-          description: The unique identifier of plannerTaskChatMessage
+          description: The unique identifier of group
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTaskChatMessage
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
         - name: $select
           in: query
           description: Select properties to be returned
@@ -3626,15 +3465,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+                $ref: '#/components/schemas/microsoft.graph.plannerBucketTaskBoardTaskFormat'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - groups.plannerGroup
-      summary: Update the navigation property messages in groups
-      operationId: group.planner.plan.task_UpdateMessage
+      summary: Update the navigation property bucketTaskBoardFormat in groups
+      operationId: group.planner.plan.task_UpdateBucketTaskBoardFormat
       parameters:
         - name: group-id
           in: path
@@ -3660,20 +3499,19 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: plannerTaskChatMessage-id
-          in: path
-          description: The unique identifier of plannerTaskChatMessage
+        - name: If-Match
+          in: header
+          description: ETag value.
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTaskChatMessage
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+              $ref: '#/components/schemas/microsoft.graph.plannerBucketTaskBoardTaskFormat'
         required: true
       responses:
         2XX:
@@ -3681,15 +3519,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+                $ref: '#/components/schemas/microsoft.graph.plannerBucketTaskBoardTaskFormat'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - groups.plannerGroup
-      summary: Delete navigation property messages for groups
-      operationId: group.planner.plan.task_DeleteMessage
+      summary: Delete navigation property bucketTaskBoardFormat for groups
+      operationId: group.planner.plan.task_DeleteBucketTaskBoardFormat
       parameters:
         - name: group-id
           in: path
@@ -3715,14 +3553,6 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: plannerTaskChatMessage-id
-          in: path
-          description: The unique identifier of plannerTaskChatMessage
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerTaskChatMessage
         - name: If-Match
           in: header
           description: ETag
@@ -3735,16 +3565,13 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/{plannerTaskChatMessage-id}/microsoft.graph.setReaction':
-    post:
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/details':
+    get:
       tags:
         - groups.plannerGroup
-      summary: Invoke action setReaction
-      description: Set a reaction to a plannerTaskChatMessage for the current user.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/plannertaskchatmessage-setreaction?view=graph-rest-beta
-      operationId: group.planner.plan.task.message_setReaction
+      summary: Get details from groups
+      description: Read-only. Nullable. More details about the task.
+      operationId: group.planner.plan.task_GetDetail
       parameters:
         - name: group-id
           in: path
@@ -3770,42 +3597,41 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: plannerTaskChatMessage-id
-          in: path
-          description: The unique identifier of plannerTaskChatMessage
-          required: true
-          style: simple
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
           schema:
-            type: string
-          x-ms-docs-key-type: plannerTaskChatMessage
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                reactionType:
-                  type: string
-              additionalProperties:
-                type: object
-        required: true
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
       responses:
         2XX:
-          description: Success
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerTaskDetails'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/{plannerTaskChatMessage-id}/microsoft.graph.unsetReaction':
-    post:
+      x-ms-docs-operation-type: operation
+    patch:
       tags:
         - groups.plannerGroup
-      summary: Invoke action unsetReaction
-      description: Remove a reaction from a plannerTaskChatMessage for the current user.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/plannertaskchatmessage-unsetreaction?view=graph-rest-beta
-      operationId: group.planner.plan.task.message_unsetReaction
+      summary: Update the navigation property details in groups
+      operationId: group.planner.plan.task_UpdateDetail
       parameters:
         - name: group-id
           in: path
@@ -3831,38 +3657,35 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: plannerTaskChatMessage-id
-          in: path
-          description: The unique identifier of plannerTaskChatMessage
+        - name: If-Match
+          in: header
+          description: ETag value.
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTaskChatMessage
       requestBody:
-        description: Action parameters
+        description: New navigation property values
         content:
           application/json:
             schema:
-              type: object
-              properties:
-                reactionType:
-                  type: string
-              additionalProperties:
-                type: object
+              $ref: '#/components/schemas/microsoft.graph.plannerTaskDetails'
         required: true
       responses:
         2XX:
           description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerTaskDetails'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/$count':
-    get:
+      x-ms-docs-operation-type: operation
+    delete:
       tags:
         - groups.plannerGroup
-      summary: Get the number of the resource
-      operationId: group.planner.plan.task.message_GetCount
+      summary: Delete navigation property details for groups
+      operationId: group.planner.plan.task_DeleteDetail
       parameters:
         - name: group-id
           in: path
@@ -3888,20 +3711,25 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
       responses:
         2XX:
-          $ref: '#/components/responses/ODataCountResponse'
+          description: Success
         default:
           $ref: '#/components/responses/error'
-  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/progressTaskBoardFormat':
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages':
     get:
       tags:
         - groups.plannerGroup
-      summary: Get progressTaskBoardFormat from groups
-      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by progress.
-      operationId: group.planner.plan.task_GetProgressTaskBoardFormat
+      summary: Get messages from groups
+      description: Read-only. Nullable. Chat messages associated with the task.
+      operationId: group.planner.plan.task_ListMessage
       parameters:
         - name: group-id
           in: path
@@ -3927,7 +3755,465 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: $select
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.plannerTaskChatMessageCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - groups.plannerGroup
+      summary: Create new navigation property to messages for groups
+      operationId: group.planner.plan.task_CreateMessage
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/{plannerTaskChatMessage-id}':
+    get:
+      tags:
+        - groups.plannerGroup
+      summary: Get messages from groups
+      description: Read-only. Nullable. Chat messages associated with the task.
+      operationId: group.planner.plan.task_GetMessage
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: plannerTaskChatMessage-id
+          in: path
+          description: The unique identifier of plannerTaskChatMessage
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTaskChatMessage
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - groups.plannerGroup
+      summary: Update the navigation property messages in groups
+      operationId: group.planner.plan.task_UpdateMessage
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: plannerTaskChatMessage-id
+          in: path
+          description: The unique identifier of plannerTaskChatMessage
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTaskChatMessage
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerTaskChatMessage'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - groups.plannerGroup
+      summary: Delete navigation property messages for groups
+      operationId: group.planner.plan.task_DeleteMessage
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: plannerTaskChatMessage-id
+          in: path
+          description: The unique identifier of plannerTaskChatMessage
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTaskChatMessage
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/{plannerTaskChatMessage-id}/microsoft.graph.setReaction':
+    post:
+      tags:
+        - groups.plannerGroup
+      summary: Invoke action setReaction
+      description: Set a reaction to a plannerTaskChatMessage for the current user.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/plannertaskchatmessage-setreaction?view=graph-rest-beta
+      operationId: group.planner.plan.task.message_setReaction
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: plannerTaskChatMessage-id
+          in: path
+          description: The unique identifier of plannerTaskChatMessage
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTaskChatMessage
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                reactionType:
+                  type: string
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/{plannerTaskChatMessage-id}/microsoft.graph.unsetReaction':
+    post:
+      tags:
+        - groups.plannerGroup
+      summary: Invoke action unsetReaction
+      description: Remove a reaction from a plannerTaskChatMessage for the current user.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/plannertaskchatmessage-unsetreaction?view=graph-rest-beta
+      operationId: group.planner.plan.task.message_unsetReaction
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: plannerTaskChatMessage-id
+          in: path
+          description: The unique identifier of plannerTaskChatMessage
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTaskChatMessage
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                reactionType:
+                  type: string
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/messages/$count':
+    get:
+      tags:
+        - groups.plannerGroup
+      summary: Get the number of the resource
+      operationId: group.planner.plan.task.message_GetCount
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/groups/{group-id}/planner/plans/{plannerPlan-id}/tasks/{plannerTask-id}/progressTaskBoardFormat':
+    get:
+      tags:
+        - groups.plannerGroup
+      summary: Get progressTaskBoardFormat from groups
+      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by progress.
+      operationId: group.planner.plan.task_GetProgressTaskBoardFormat
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: $select
           in: query
           description: Select properties to be returned
           style: form
@@ -7957,8 +8243,251 @@ paths:
     delete:
       tags:
         - planner.plannerPlan
-      summary: Delete navigation property details for planner
-      operationId: planner.plan_DeleteDetail
+      summary: Delete navigation property details for planner
+      operationId: planner.plan_DeleteDetail
+      parameters:
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/planner/plans/{plannerPlan-id}/historyItems':
+    get:
+      tags:
+        - planner.plannerPlan
+      summary: Get historyItems from planner
+      operationId: planner.plan_ListHistoryItem
+      parameters:
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.plannerHistoryItemCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - planner.plannerPlan
+      summary: Create new navigation property to historyItems for planner
+      operationId: planner.plan_CreateHistoryItem
+      parameters:
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/planner/plans/{plannerPlan-id}/historyItems/{plannerHistoryItem-id}':
+    get:
+      tags:
+        - planner.plannerPlan
+      summary: Get historyItems from planner
+      operationId: planner.plan_GetHistoryItem
+      parameters:
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerHistoryItem-id
+          in: path
+          description: The unique identifier of plannerHistoryItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerHistoryItem
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - planner.plannerPlan
+      summary: Update the navigation property historyItems in planner
+      operationId: planner.plan_UpdateHistoryItem
+      parameters:
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerHistoryItem-id
+          in: path
+          description: The unique identifier of plannerHistoryItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerHistoryItem
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - planner.plannerPlan
+      summary: Delete navigation property historyItems for planner
+      operationId: planner.plan_DeleteHistoryItem
+      parameters:
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerHistoryItem-id
+          in: path
+          description: The unique identifier of plannerHistoryItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerHistoryItem
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/planner/plans/{plannerPlan-id}/historyItems/$count':
+    get:
+      tags:
+        - planner.plannerPlan
+      summary: Get the number of the resource
+      operationId: planner.plan.historyItem_GetCount
       parameters:
         - name: plannerPlan-id
           in: path
@@ -7968,18 +8497,13 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: If-Match
-          in: header
-          description: ETag
-          style: simple
-          schema:
-            type: string
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
       responses:
         2XX:
-          description: Success
+          $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
   '/planner/plans/{plannerPlan-id}/microsoft.graph.archive':
     post:
       tags:
@@ -13673,38 +14197,266 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerTask
-        - name: plannerTaskChatMessage-id
-          in: path
-          description: The unique identifier of plannerTaskChatMessage
-          required: true
+        - name: plannerTaskChatMessage-id
+          in: path
+          description: The unique identifier of plannerTaskChatMessage
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTaskChatMessage
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                reactionType:
+                  type: string
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/{plannerTask-id}/messages/$count':
+    get:
+      tags:
+        - users.plannerUser
+      summary: Get the number of the resource
+      operationId: user.planner.plan.bucket.task.message_GetCount
+      parameters:
+        - name: user-id
+          in: path
+          description: The unique identifier of user
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: user
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerBucket-id
+          in: path
+          description: The unique identifier of plannerBucket
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerBucket
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/{plannerTask-id}/progressTaskBoardFormat':
+    get:
+      tags:
+        - users.plannerUser
+      summary: Get progressTaskBoardFormat from users
+      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by progress.
+      operationId: user.planner.plan.bucket.task_GetProgressTaskBoardFormat
+      parameters:
+        - name: user-id
+          in: path
+          description: The unique identifier of user
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: user
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerBucket-id
+          in: path
+          description: The unique identifier of plannerBucket
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerBucket
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerProgressTaskBoardTaskFormat'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - users.plannerUser
+      summary: Update the navigation property progressTaskBoardFormat in users
+      operationId: user.planner.plan.bucket.task_UpdateProgressTaskBoardFormat
+      parameters:
+        - name: user-id
+          in: path
+          description: The unique identifier of user
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: user
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerBucket-id
+          in: path
+          description: The unique identifier of plannerBucket
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerBucket
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: If-Match
+          in: header
+          description: ETag value.
+          required: true
+          style: simple
+          schema:
+            type: string
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerProgressTaskBoardTaskFormat'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerProgressTaskBoardTaskFormat'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - users.plannerUser
+      summary: Delete navigation property progressTaskBoardFormat for users
+      operationId: user.planner.plan.bucket.task_DeleteProgressTaskBoardFormat
+      parameters:
+        - name: user-id
+          in: path
+          description: The unique identifier of user
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: user
+        - name: plannerPlan-id
+          in: path
+          description: The unique identifier of plannerPlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerPlan
+        - name: plannerBucket-id
+          in: path
+          description: The unique identifier of plannerBucket
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerBucket
+        - name: plannerTask-id
+          in: path
+          description: The unique identifier of plannerTask
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerTask
+        - name: If-Match
+          in: header
+          description: ETag
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTaskChatMessage
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                reactionType:
-                  type: string
-              additionalProperties:
-                type: object
-        required: true
       responses:
         2XX:
           description: Success
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/{plannerTask-id}/messages/$count':
+      x-ms-docs-operation-type: operation
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/$count':
     get:
       tags:
         - users.plannerUser
       summary: Get the number of the resource
-      operationId: user.planner.plan.bucket.task.message_GetCount
+      operationId: user.planner.plan.bucket.task_GetCount
       parameters:
         - name: user-id
           in: path
@@ -13730,14 +14482,6 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerBucket
-        - name: plannerTask-id
-          in: path
-          description: The unique identifier of plannerTask
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerTask
         - $ref: '#/components/parameters/search'
         - $ref: '#/components/parameters/filter'
       responses:
@@ -13745,13 +14489,16 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/{plannerTask-id}/progressTaskBoardFormat':
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/microsoft.graph.delta()':
     get:
       tags:
         - users.plannerUser
-      summary: Get progressTaskBoardFormat from users
-      description: Read-only. Nullable. Used to render the task correctly in the task board view when grouped by progress.
-      operationId: user.planner.plan.bucket.task_GetProgressTaskBoardFormat
+      summary: Invoke function delta
+      description: 'Get newly created, updated, or deleted tasks in either a Planner plan or assigned to the signed-in user without having to perform a full read of the entire resource collection. For details, see Use delta query to track changes in Microsoft Graph data.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/plannertask-delta?view=graph-rest-beta
+      operationId: user.planner.plan.bucket.task_delta
       parameters:
         - name: user-id
           in: path
@@ -13777,14 +14524,11 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerBucket
-        - name: plannerTask-id
-          in: path
-          description: The unique identifier of plannerTask
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerTask
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
         - name: $select
           in: query
           description: Select properties to be returned
@@ -13795,6 +14539,16 @@ paths:
             type: array
             items:
               type: string
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
         - name: $expand
           in: query
           description: Expand related entities
@@ -13807,19 +14561,37 @@ paths:
               type: string
       responses:
         2XX:
-          description: Retrieved navigation property
+          description: Success
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerProgressTaskBoardTaskFormat'
+                title: Collection of plannerTask
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.plannerTask'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                  '@odata.deltaLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    patch:
+      x-ms-docs-operation-type: function
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/$count':
+    get:
       tags:
         - users.plannerUser
-      summary: Update the navigation property progressTaskBoardFormat in users
-      operationId: user.planner.plan.bucket.task_UpdateProgressTaskBoardFormat
+      summary: Get the number of the resource
+      operationId: user.planner.plan.bucket_GetCount
       parameters:
         - name: user-id
           in: path
@@ -13837,51 +14609,109 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerBucket-id
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/microsoft.graph.delta()':
+    get:
+      tags:
+        - users.plannerUser
+      summary: Invoke function delta
+      description: 'Get newly created, updated, or deleted buckets in a Planner plan without having to perform a full read of the entire resource collection. For details, see Use delta query to track changes in Microsoft Graph data.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/plannerbucket-delta?view=graph-rest-beta
+      operationId: user.planner.plan.bucket_delta
+      parameters:
+        - name: user-id
           in: path
-          description: The unique identifier of plannerBucket
+          description: The unique identifier of user
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerBucket
-        - name: plannerTask-id
+          x-ms-docs-key-type: user
+        - name: plannerPlan-id
           in: path
-          description: The unique identifier of plannerTask
+          description: The unique identifier of plannerPlan
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTask
-        - name: If-Match
-          in: header
-          description: ETag value.
-          required: true
-          style: simple
+          x-ms-docs-key-type: plannerPlan
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
           schema:
-            type: string
-      requestBody:
-        description: New navigation property values
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerProgressTaskBoardTaskFormat'
-        required: true
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
       responses:
         2XX:
           description: Success
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerProgressTaskBoardTaskFormat'
+                title: Collection of plannerBucket
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.plannerBucket'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                  '@odata.deltaLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    delete:
+      x-ms-docs-operation-type: function
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/details':
+    get:
       tags:
         - users.plannerUser
-      summary: Delete navigation property progressTaskBoardFormat for users
-      operationId: user.planner.plan.bucket.task_DeleteProgressTaskBoardFormat
+      summary: Get details from users
+      description: Extra details about the plan. Read-only. Nullable.
+      operationId: user.planner.plan_GetDetail
       parameters:
         - name: user-id
           in: path
@@ -13899,40 +14729,87 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerBucket-id
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - users.plannerUser
+      summary: Update the navigation property details in users
+      operationId: user.planner.plan_UpdateDetail
+      parameters:
+        - name: user-id
           in: path
-          description: The unique identifier of plannerBucket
+          description: The unique identifier of user
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerBucket
-        - name: plannerTask-id
+          x-ms-docs-key-type: user
+        - name: plannerPlan-id
           in: path
-          description: The unique identifier of plannerTask
+          description: The unique identifier of plannerPlan
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerTask
+          x-ms-docs-key-type: plannerPlan
         - name: If-Match
           in: header
-          description: ETag
+          description: ETag value.
+          required: true
           style: simple
           schema:
             type: string
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+        required: true
       responses:
         2XX:
           description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/$count':
-    get:
+    delete:
       tags:
         - users.plannerUser
-      summary: Get the number of the resource
-      operationId: user.planner.plan.bucket.task_GetCount
+      summary: Delete navigation property details for users
+      operationId: user.planner.plan_DeleteDetail
       parameters:
         - name: user-id
           in: path
@@ -13950,31 +14827,24 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerBucket-id
-          in: path
-          description: The unique identifier of plannerBucket
-          required: true
+        - name: If-Match
+          in: header
+          description: ETag
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: plannerBucket
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
       responses:
         2XX:
-          $ref: '#/components/responses/ODataCountResponse'
+          description: Success
         default:
           $ref: '#/components/responses/error'
-  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/{plannerBucket-id}/tasks/microsoft.graph.delta()':
+      x-ms-docs-operation-type: operation
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/historyItems':
     get:
       tags:
         - users.plannerUser
-      summary: Invoke function delta
-      description: 'Get newly created, updated, or deleted tasks in either a Planner plan or assigned to the signed-in user without having to perform a full read of the entire resource collection. For details, see Use delta query to track changes in Microsoft Graph data.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/plannertask-delta?view=graph-rest-beta
-      operationId: user.planner.plan.bucket.task_delta
+      summary: Get historyItems from users
+      operationId: user.planner.plan_ListHistoryItem
       parameters:
         - name: user-id
           in: path
@@ -13992,22 +14862,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: plannerBucket-id
-          in: path
-          description: The unique identifier of plannerBucket
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: plannerBucket
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
         - $ref: '#/components/parameters/search'
         - $ref: '#/components/parameters/filter'
         - $ref: '#/components/parameters/count'
-        - name: $select
+        - name: $orderby
           in: query
-          description: Select properties to be returned
+          description: Order items by property values
           style: form
           explode: false
           schema:
@@ -14015,9 +14877,9 @@ paths:
             type: array
             items:
               type: string
-        - name: $orderby
+        - name: $select
           in: query
-          description: Order items by property values
+          description: Select properties to be returned
           style: form
           explode: false
           schema:
@@ -14037,37 +14899,18 @@ paths:
               type: string
       responses:
         2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                title: Collection of plannerTask
-                type: object
-                properties:
-                  value:
-                    type: array
-                    items:
-                      $ref: '#/components/schemas/microsoft.graph.plannerTask'
-                  '@odata.nextLink':
-                    type: string
-                    nullable: true
-                  '@odata.deltaLink':
-                    type: string
-                    nullable: true
-                additionalProperties:
-                  type: object
+          $ref: '#/components/responses/microsoft.graph.plannerHistoryItemCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: function
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
-  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/$count':
-    get:
+      x-ms-docs-operation-type: operation
+    post:
       tags:
         - users.plannerUser
-      summary: Get the number of the resource
-      operationId: user.planner.plan.bucket_GetCount
+      summary: Create new navigation property to historyItems for users
+      operationId: user.planner.plan_CreateHistoryItem
       parameters:
         - name: user-id
           in: path
@@ -14085,23 +14928,29 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        required: true
       responses:
         2XX:
-          $ref: '#/components/responses/ODataCountResponse'
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         default:
           $ref: '#/components/responses/error'
-  '/users/{user-id}/planner/plans/{plannerPlan-id}/buckets/microsoft.graph.delta()':
+      x-ms-docs-operation-type: operation
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/historyItems/{plannerHistoryItem-id}':
     get:
       tags:
         - users.plannerUser
-      summary: Invoke function delta
-      description: 'Get newly created, updated, or deleted buckets in a Planner plan without having to perform a full read of the entire resource collection. For details, see Use delta query to track changes in Microsoft Graph data.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/plannerbucket-delta?view=graph-rest-beta
-      operationId: user.planner.plan.bucket_delta
+      summary: Get historyItems from users
+      operationId: user.planner.plan_GetHistoryItem
       parameters:
         - name: user-id
           in: path
@@ -14119,11 +14968,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - $ref: '#/components/parameters/top'
-        - $ref: '#/components/parameters/skip'
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
-        - $ref: '#/components/parameters/count'
+        - name: plannerHistoryItem-id
+          in: path
+          description: The unique identifier of plannerHistoryItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerHistoryItem
         - name: $select
           in: query
           description: Select properties to be returned
@@ -14134,16 +14986,6 @@ paths:
             type: array
             items:
               type: string
-        - name: $orderby
-          in: query
-          description: Order items by property values
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
         - name: $expand
           in: query
           description: Expand related entities
@@ -14156,38 +14998,19 @@ paths:
               type: string
       responses:
         2XX:
-          description: Success
+          description: Retrieved navigation property
           content:
             application/json:
               schema:
-                title: Collection of plannerBucket
-                type: object
-                properties:
-                  value:
-                    type: array
-                    items:
-                      $ref: '#/components/schemas/microsoft.graph.plannerBucket'
-                  '@odata.nextLink':
-                    type: string
-                    nullable: true
-                  '@odata.deltaLink':
-                    type: string
-                    nullable: true
-                additionalProperties:
-                  type: object
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: function
-      x-ms-pageable:
-        nextLinkName: '@odata.nextLink'
-        operationName: listMore
-  '/users/{user-id}/planner/plans/{plannerPlan-id}/details':
-    get:
+      x-ms-docs-operation-type: operation
+    patch:
       tags:
         - users.plannerUser
-      summary: Get details from users
-      description: Extra details about the plan. Read-only. Nullable.
-      operationId: user.planner.plan_GetDetail
+      summary: Update the navigation property historyItems in users
+      operationId: user.planner.plan_UpdateHistoryItem
       parameters:
         - name: user-id
           in: path
@@ -14205,41 +15028,36 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: $select
-          in: query
-          description: Select properties to be returned
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
-        - name: $expand
-          in: query
-          description: Expand related entities
-          style: form
-          explode: false
+        - name: plannerHistoryItem-id
+          in: path
+          description: The unique identifier of plannerHistoryItem
+          required: true
+          style: simple
           schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
+            type: string
+          x-ms-docs-key-type: plannerHistoryItem
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        required: true
       responses:
         2XX:
-          description: Retrieved navigation property
+          description: Success
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-    patch:
+    delete:
       tags:
         - users.plannerUser
-      summary: Update the navigation property details in users
-      operationId: user.planner.plan_UpdateDetail
+      summary: Delete navigation property historyItems for users
+      operationId: user.planner.plan_DeleteHistoryItem
       parameters:
         - name: user-id
           in: path
@@ -14257,35 +15075,32 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
+        - name: plannerHistoryItem-id
+          in: path
+          description: The unique identifier of plannerHistoryItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: plannerHistoryItem
         - name: If-Match
           in: header
-          description: ETag value.
-          required: true
+          description: ETag
           style: simple
           schema:
             type: string
-      requestBody:
-        description: New navigation property values
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
-        required: true
       responses:
         2XX:
           description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-    delete:
+  '/users/{user-id}/planner/plans/{plannerPlan-id}/historyItems/$count':
+    get:
       tags:
         - users.plannerUser
-      summary: Delete navigation property details for users
-      operationId: user.planner.plan_DeleteDetail
+      summary: Get the number of the resource
+      operationId: user.planner.plan.historyItem_GetCount
       parameters:
         - name: user-id
           in: path
@@ -14303,18 +15118,13 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: plannerPlan
-        - name: If-Match
-          in: header
-          description: ETag
-          style: simple
-          schema:
-            type: string
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
       responses:
         2XX:
-          description: Success
+          $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
   '/users/{user-id}/planner/plans/{plannerPlan-id}/microsoft.graph.archive':
     post:
       tags:
@@ -17649,6 +18459,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -17964,6 +18779,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.planUsageRight:
       title: planUsageRight
       type: object
@@ -18507,6 +19345,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.usageRightsInfo:
       title: usageRightsInfo
       type: object
@@ -18629,6 +19483,19 @@ components:
     ODataCountResponse:
       type: integer
       format: int32
+    microsoft.graph.plannerHistoryItemCollectionResponse:
+      title: Collection of plannerHistoryItem
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.plannerRosterCollectionResponse:
       title: Collection of plannerRoster
       type: object
@@ -18970,6 +19837,12 @@ components:
         text/plain:
           schema:
             $ref: '#/components/schemas/ODataCountResponse'
+    microsoft.graph.plannerHistoryItemCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.plannerHistoryItemCollectionResponse'
     microsoft.graph.plannerRosterCollectionResponse:
       description: Retrieved collection
       content:
diff --git a/openApiDocs/beta/Search.yml b/openApiDocs/beta/Search.yml
index 3c223ff306..abdbd822db 100644
--- a/openApiDocs/beta/Search.yml
+++ b/openApiDocs/beta/Search.yml
@@ -5555,6 +5555,8 @@ components:
               description: An array of access control entries. Each entry specifies the access granted to a user or group. Required.
             content:
               $ref: '#/components/schemas/microsoft.graph.externalConnectors.externalItemContent'
+            informationProtectionLabel:
+              $ref: '#/components/schemas/microsoft.graph.externalConnectors.externalItemInformationProtectionLabel'
             properties:
               $ref: '#/components/schemas/microsoft.graph.externalConnectors.properties'
             activities:
@@ -6393,6 +6395,15 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.externalConnectors.externalItemInformationProtectionLabel:
+      title: externalItemInformationProtectionLabel
+      type: object
+      properties:
+        sensitivityLabelId:
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.externalConnectors.properties:
       title: properties
       type: object
@@ -6770,7 +6781,7 @@ components:
             description: Indicates Mobile Application Management (MAM) for iOS devices
             name: iOSMobileApplicationManagement
           - value: unknownFutureValue
-            description: Evolvable enumeration sentinel value. Do not use.
+            description: Evolvable enumeration sentinel value. Do not use
             name: unknownFutureValue
           - value: windowsMobileApplicationManagement
             description: Indicates Mobile Application Management (MAM) for Windows devices.
@@ -7412,6 +7423,7 @@ components:
         - personLanguages
         - personPublications
         - personPatents
+        - personWorkPositions
       type: string
     microsoft.graph.externalConnectors.rankingHint:
       title: rankingHint
diff --git a/openApiDocs/beta/Sites.yml b/openApiDocs/beta/Sites.yml
index e8613f38a5..39426781da 100644
--- a/openApiDocs/beta/Sites.yml
+++ b/openApiDocs/beta/Sites.yml
@@ -92611,6 +92611,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -92748,7 +92750,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -92762,6 +92764,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -93008,7 +93014,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -93035,7 +93041,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -93200,7 +93206,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -93222,7 +93228,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -93257,7 +93263,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -93361,7 +93367,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -93494,6 +93500,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -94761,6 +94773,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.onenote:
@@ -95818,8 +95842,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -95909,6 +95931,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -96251,7 +96298,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -98228,6 +98274,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -98859,6 +98907,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -98880,7 +98962,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -98918,7 +98999,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -99285,7 +99366,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -100461,7 +100541,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -100511,6 +100590,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -102767,28 +102851,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -102807,6 +102869,30 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -103225,6 +103311,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -104783,7 +104872,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -104799,13 +104888,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -104935,7 +105024,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -105253,6 +105342,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -105669,6 +105760,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -105789,6 +105924,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -106151,7 +106287,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -106303,7 +106439,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -108649,6 +108785,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -109098,6 +109236,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -109347,6 +109490,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -110799,30 +110947,6 @@ components:
         - reactivating
         - unknownFutureValue
       type: string
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -111155,6 +111279,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -111405,7 +111532,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -112534,6 +112661,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -114578,12 +114714,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -114617,6 +114756,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -115224,6 +115373,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -115862,7 +116034,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -116248,6 +116420,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -118035,6 +118208,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -119191,6 +119366,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -119792,6 +119983,7 @@ components:
         - sPSharingNotifyUser
         - sPSharingGenerateIncidentReport
         - restrictWebGrounding
+        - policyTip
       type: string
     microsoft.graph.labelActionBase:
       title: labelActionBase
@@ -121788,6 +121980,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -122450,16 +122650,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -122478,20 +122681,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -122510,16 +122717,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -122538,16 +122748,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -122568,10 +122781,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -122768,6 +122983,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -122782,6 +123000,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -122892,6 +123117,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -122902,10 +123128,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -122916,6 +123144,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -122926,6 +123155,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -122934,10 +123164,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Users.Actions.yml b/openApiDocs/beta/Users.Actions.yml
index 565f46e401..855f5e2151 100644
--- a/openApiDocs/beta/Users.Actions.yml
+++ b/openApiDocs/beta/Users.Actions.yml
@@ -1282,7 +1282,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -1309,7 +1309,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -1474,7 +1474,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -1496,7 +1496,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -1531,7 +1531,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -1635,7 +1635,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -1768,6 +1768,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -3923,6 +3929,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -4554,6 +4562,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -4629,7 +4671,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.site:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -4831,7 +4872,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -5198,7 +5239,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -6268,7 +6308,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -6318,6 +6357,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -7231,6 +7275,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -8742,7 +8789,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -8758,13 +8805,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -8894,7 +8941,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -9212,6 +9259,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -9627,6 +9676,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -9796,6 +9889,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -10175,7 +10270,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -10189,6 +10284,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -10711,6 +10810,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -11073,7 +11173,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -11225,7 +11325,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -13696,6 +13796,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -14057,6 +14159,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -14145,6 +14263,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -14394,6 +14517,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -15622,6 +15750,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -15910,7 +16041,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -16896,6 +17027,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -17145,8 +17285,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -17236,6 +17374,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -17626,6 +17789,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -17644,7 +17819,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -20778,12 +20952,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -20817,6 +20994,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -21095,22 +21282,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -21426,6 +21597,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -22064,7 +22258,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -22450,6 +22644,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -23691,6 +23886,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -23912,28 +24109,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -23952,6 +24127,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -25855,6 +26038,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -28193,6 +28392,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -28251,14 +28458,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -29205,16 +29404,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -29233,20 +29435,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -29265,16 +29471,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -29293,16 +29502,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -29323,10 +29535,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -29523,6 +29737,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -29537,6 +29754,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -29982,6 +30206,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -29992,10 +30217,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -30006,6 +30233,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -30016,6 +30244,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -30024,10 +30253,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Users.Functions.yml b/openApiDocs/beta/Users.Functions.yml
index e305520021..5ed78f054a 100644
--- a/openApiDocs/beta/Users.Functions.yml
+++ b/openApiDocs/beta/Users.Functions.yml
@@ -657,7 +657,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -684,7 +684,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -849,7 +849,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -871,7 +871,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -906,7 +906,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -1010,7 +1010,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -1143,6 +1143,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -2955,6 +2961,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -3586,6 +3594,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -3661,7 +3703,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.extension:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -3870,7 +3911,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -4237,7 +4278,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.team:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -5457,7 +5497,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -5507,6 +5546,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -6200,7 +6244,7 @@ components:
           $ref: '#/components/schemas/microsoft.graph.dateTimeTimeZone'
         eventId:
           type: string
-          description: The unique ID of the event. Read only.
+          description: The unique ID of the event. Read-only.
           nullable: true
         eventLocation:
           $ref: '#/components/schemas/microsoft.graph.location'
@@ -6281,6 +6325,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -7959,7 +8006,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -7975,13 +8022,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -8111,7 +8158,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -8429,6 +8476,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -8858,6 +8907,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -9027,6 +9120,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -9406,7 +9501,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -9420,6 +9515,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -9942,6 +10041,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -10304,7 +10404,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -10456,7 +10556,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -12961,6 +13061,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -13322,6 +13424,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -13410,6 +13528,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -13659,6 +13782,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -14815,6 +14943,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -15114,7 +15245,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -16252,6 +16383,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -16501,8 +16641,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -16592,6 +16730,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -16982,6 +17145,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -17000,7 +17175,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -20141,12 +20315,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -20180,6 +20357,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -20472,22 +20659,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -20803,6 +20974,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -21441,7 +21635,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -21827,6 +22021,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -23121,6 +23316,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -23342,28 +23539,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -23382,6 +23557,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -25285,6 +25468,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -27623,6 +27822,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -27681,14 +27888,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -28635,16 +28834,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -28663,20 +28865,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -28695,16 +28901,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -28723,16 +28932,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -28753,10 +28965,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -28953,6 +29167,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -28967,6 +29184,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -29412,6 +29636,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -29422,10 +29647,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -29436,6 +29663,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -29446,6 +29674,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -29454,10 +29683,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/Users.yml b/openApiDocs/beta/Users.yml
index 62b30d0d1c..639e0bee6e 100644
--- a/openApiDocs/beta/Users.yml
+++ b/openApiDocs/beta/Users.yml
@@ -148,8 +148,8 @@ paths:
     patch:
       tags:
         - users.user
-      summary: Update user or agentUser
-      description: Update the properties of a user or agentUser object.
+      summary: Update user
+      description: 'Update the properties of a user. To use this API to update an agentUser, specify an @odata.type property with a value of #microsoft.graph.agentUser in the request body.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/user-update?view=graph-rest-beta
@@ -16811,8 +16811,8 @@ paths:
     patch:
       tags:
         - users.user
-      summary: Update user or agentUser
-      description: Update the properties of a user or agentUser object.
+      summary: Update user
+      description: 'Update the properties of a user. To use this API to update an agentUser, specify an @odata.type property with a value of #microsoft.graph.agentUser in the request body.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/user-update?view=graph-rest-beta
@@ -16911,7 +16911,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -16938,7 +16938,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -17103,7 +17103,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -17125,7 +17125,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -17160,7 +17160,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -17264,7 +17264,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -17397,6 +17397,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -18242,7 +18248,7 @@ components:
               nullable: true
             roleTemplateId:
               type: string
-              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read only. Supports $filter (eq), $select.'
+              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read-only. Supports $filter (eq), $select.'
               nullable: true
             members:
               type: array
@@ -18274,7 +18280,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -18641,7 +18647,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.notification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -21334,6 +21339,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -21741,6 +21748,40 @@ components:
           additionalProperties:
             type: object
           description: Event representing an general failure.
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.drive:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -21816,7 +21857,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.site:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItem'
@@ -23119,13 +23159,17 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.accessReviewInstance:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -24343,6 +24387,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -25116,6 +25161,8 @@ components:
           type: boolean
           description: Locks the keyCredentials and passwordCredentials properties for modification where credential usage type is Verify. This locks OAuth service principals.
           nullable: true
+        enforcementScope:
+          $ref: '#/components/schemas/microsoft.graph.servicePrincipalLockScope'
         isEnabled:
           type: boolean
           description: 'Enables or disables service principal lock configuration. To allow the sensitive properties to be updated, update this property to false to disable the lock on the service principal.'
@@ -25296,7 +25343,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.changeTrackedEntity:
@@ -25960,6 +26007,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -26968,7 +27018,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -26984,13 +27034,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -27120,7 +27170,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -27438,6 +27488,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -27756,6 +27808,50 @@ components:
       additionalProperties:
         type: object
       description: Object containing detailed information about the error and its remediation.
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.baseItem:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -27925,6 +28021,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -28304,7 +28402,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -28318,6 +28416,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -28963,7 +29065,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -29115,7 +29217,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -31601,6 +31703,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -31804,6 +31908,22 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessReviewError:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.genericError'
@@ -31892,6 +32012,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -32141,6 +32266,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -33071,7 +33201,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -33691,6 +33821,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.servicePrincipalLockScope:
+      title: servicePrincipalLockScope
+      enum:
+        - notConfigured
+        - foreignTenantOnly
+        - everywhere
+        - unknownFutureValue
+      type: string
     microsoft.graph.kind:
       title: kind
       enum:
@@ -33848,6 +33986,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -34930,6 +35071,15 @@ components:
       additionalProperties:
         type: object
       description: 'Object representing a link to troubleshooting information, the link could be to the Azure Portal or a Microsoft doc.'
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.itemReference:
       title: itemReference
       type: object
@@ -35179,8 +35329,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -35270,6 +35418,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -35660,6 +35833,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -35678,7 +35863,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -38634,12 +38818,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -38673,6 +38860,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -38926,22 +39123,6 @@ components:
         - managerOrSponsor
         - unknownFutureValue
       type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.accessReviewInstanceDecisionItemPermission:
       title: accessReviewInstanceDecisionItemPermission
       type: object
@@ -39257,6 +39438,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -39937,6 +40141,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -41300,6 +41505,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -41521,28 +41728,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -41561,6 +41746,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -43369,6 +43562,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerTeamsPublicationInfo:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerTaskCreation'
@@ -45555,6 +45764,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -45613,14 +45830,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -46366,16 +46575,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -46394,20 +46606,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -46426,16 +46642,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -46454,16 +46673,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -46484,10 +46706,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -46844,6 +47068,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -46858,6 +47085,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -47294,6 +47528,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -47304,10 +47539,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -47318,6 +47555,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -47328,6 +47566,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -47336,10 +47575,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/beta/WindowsUpdates.yml b/openApiDocs/beta/WindowsUpdates.yml
index a42857d494..fd6db54e84 100644
--- a/openApiDocs/beta/WindowsUpdates.yml
+++ b/openApiDocs/beta/WindowsUpdates.yml
@@ -1433,7 +1433,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action addMembers
-      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it does not already exist. You can also use the method addMembersById to add members.'
+      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it doesn''t already exist. You can also use the method addMembersById to add members.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-updatableassetgroup-addmembers?view=graph-rest-beta
@@ -2028,7 +2028,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action addMembers
-      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it does not already exist. You can also use the method addMembersById to add members.'
+      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it doesn''t already exist. You can also use the method addMembersById to add members.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-updatableassetgroup-addmembers?view=graph-rest-beta
@@ -2453,7 +2453,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action updateAudienceById
-      description: 'Update the members and exclusions collections of a deploymentAudience with updatableAsset resources of the same type. Adding an azureADDevice to the members or exclusions collections of a deployment audience automatically creates a Microsoft Entra device object if it does not already exist. If the same updatableAsset gets included in the exclusions and members collections of a deploymentAudience, deployment will not apply to that asset. You can also use the method updateAudience to update the deploymentAudience.'
+      description: 'Update the members and exclusions collections of a deploymentAudience with updatableAsset resources of the same type. Adding an azureADDevice to the members or exclusions collections of a deployment audience automatically creates a Microsoft Entra device object if it doesn''t already exist. If the same updatableAsset gets included in the exclusions and members collections of a deploymentAudience, deployment will not apply to that asset. You can also use the method updateAudience to update the deploymentAudience.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-deploymentaudience-updateaudiencebyid?view=graph-rest-beta
@@ -3623,7 +3623,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action addMembers
-      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it does not already exist. You can also use the method addMembersById to add members.'
+      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it doesn''t already exist. You can also use the method addMembersById to add members.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-updatableassetgroup-addmembers?view=graph-rest-beta
@@ -4215,7 +4215,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action addMembers
-      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it does not already exist. You can also use the method addMembersById to add members.'
+      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it doesn''t already exist. You can also use the method addMembersById to add members.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-updatableassetgroup-addmembers?view=graph-rest-beta
@@ -4640,7 +4640,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action updateAudienceById
-      description: 'Update the members and exclusions collections of a deploymentAudience with updatableAsset resources of the same type. Adding an azureADDevice to the members or exclusions collections of a deployment audience automatically creates a Microsoft Entra device object if it does not already exist. If the same updatableAsset gets included in the exclusions and members collections of a deploymentAudience, deployment will not apply to that asset. You can also use the method updateAudience to update the deploymentAudience.'
+      description: 'Update the members and exclusions collections of a deploymentAudience with updatableAsset resources of the same type. Adding an azureADDevice to the members or exclusions collections of a deployment audience automatically creates a Microsoft Entra device object if it doesn''t already exist. If the same updatableAsset gets included in the exclusions and members collections of a deploymentAudience, deployment will not apply to that asset. You can also use the method updateAudience to update the deploymentAudience.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-deploymentaudience-updateaudiencebyid?view=graph-rest-beta
@@ -8137,7 +8137,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action addMembers
-      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it does not already exist. You can also use the method addMembersById to add members.'
+      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it doesn''t already exist. You can also use the method addMembersById to add members.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-updatableassetgroup-addmembers?view=graph-rest-beta
@@ -8315,7 +8315,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action enrollAssets
-      description: 'Enroll updatableAsset resources in update management by Windows Autopatch. You can enroll an azureADDevice resource in update management, but may not enroll an updatableAssetGroup in update management. Enrolling a Microsoft Entra device in update management automatically creates an azureADDevice object if it does not already exist. You can also use the method enrollAssetsById to enroll assets.'
+      description: 'Enroll updatableAsset resources in update management by Windows Autopatch. You can enroll an azureADDevice resource in update management, but may not enroll an updatableAssetGroup in update management. Enrolling a Microsoft Entra device in update management automatically creates an azureADDevice object if it doesn''t already exist. You can also use the method enrollAssetsById to enroll assets.'
       operationId: admin.window.update.updatableAsset_enrollAsset
       requestBody:
         description: Action parameters
@@ -9537,7 +9537,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action addMembers
-      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it does not already exist. You can also use the method addMembersById to add members.'
+      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it doesn''t already exist. You can also use the method addMembersById to add members.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-updatableassetgroup-addmembers?view=graph-rest-beta
@@ -10129,7 +10129,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action addMembers
-      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it does not already exist. You can also use the method addMembersById to add members.'
+      description: 'Add members to an updatableAssetGroup. You can add azureADDevice resources as members, but may not add updatableAssetGroup resources as members. Adding a Microsoft Entra device as a member of an updatable asset group automatically creates an azureADDevice object, if it doesn''t already exist. You can also use the method addMembersById to add members.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-updatableassetgroup-addmembers?view=graph-rest-beta
@@ -10554,7 +10554,7 @@ paths:
       tags:
         - admin.adminWindows
       summary: Invoke action updateAudienceById
-      description: 'Update the members and exclusions collections of a deploymentAudience with updatableAsset resources of the same type. Adding an azureADDevice to the members or exclusions collections of a deployment audience automatically creates a Microsoft Entra device object if it does not already exist. If the same updatableAsset gets included in the exclusions and members collections of a deploymentAudience, deployment will not apply to that asset. You can also use the method updateAudience to update the deploymentAudience.'
+      description: 'Update the members and exclusions collections of a deploymentAudience with updatableAsset resources of the same type. Adding an azureADDevice to the members or exclusions collections of a deployment audience automatically creates a Microsoft Entra device object if it doesn''t already exist. If the same updatableAsset gets included in the exclusions and members collections of a deploymentAudience, deployment will not apply to that asset. You can also use the method updateAudience to update the deploymentAudience.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/windowsupdates-deploymentaudience-updateaudiencebyid?view=graph-rest-beta
@@ -12110,7 +12110,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -12477,7 +12477,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.windowsUpdates.bodyType:
       title: bodyType
       enum:
@@ -12549,6 +12548,7 @@ components:
         - private
         - secret
         - public
+        - unknownFutureValue
       type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
@@ -13698,6 +13698,9 @@ components:
         - title: usageRight
           type: object
           properties:
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -14241,6 +14244,8 @@ components:
               $ref: '#/components/schemas/microsoft.graph.image'
             location:
               $ref: '#/components/schemas/microsoft.graph.geoCoordinates'
+            lockInfo:
+              $ref: '#/components/schemas/microsoft.graph.lockInfo'
             malware:
               $ref: '#/components/schemas/microsoft.graph.malware'
             media:
@@ -14644,6 +14649,11 @@ components:
               x-ms-navigationProperty: true
             details:
               $ref: '#/components/schemas/microsoft.graph.plannerPlanDetails'
+            historyItems:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.plannerHistoryItem'
+              x-ms-navigationProperty: true
             tasks:
               type: array
               items:
@@ -14810,7 +14820,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.hyperlinkOrPictureColumn'
             indexed:
               type: boolean
-              description: Specifies whether the column values can used for sorting and searching.
+              description: Specifies whether the column values can be used for sorting and searching.
               nullable: true
             isDeletable:
               type: boolean
@@ -14824,6 +14834,10 @@ components:
               type: boolean
               description: Specifies whether the column can be changed.
               nullable: true
+            isSearchable:
+              type: boolean
+              description: Specifies whether the column values can be used for searching. Currently supported only for columns in a fileStorageContainer.
+              nullable: true
             lookup:
               $ref: '#/components/schemas/microsoft.graph.lookupColumn'
             name:
@@ -15334,7 +15348,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -15517,7 +15531,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when creating the object. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -15544,7 +15558,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. Only one number can be set for this property. Read-only for users synced from on-premises directory. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -15709,7 +15723,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory.  Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -15731,7 +15745,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property associates an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. Note: The $ and _ characters can''t be used when specifying this property. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -15766,7 +15780,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of additional email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters.Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -15870,7 +15884,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s verified domain collection. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -16003,6 +16017,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.directoryObject'
               description: The users and contacts that report to the user. (The users and contacts with their manager property set to this user.) Read-only. Nullable. Supports $expand.
               x-ms-navigationProperty: true
+            distributionLists:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionList'
+              description: The personal distribution lists in the user's mailbox. Read-only. Nullable.
+              x-ms-navigationProperty: true
             drive:
               $ref: '#/components/schemas/microsoft.graph.drive'
             drives:
@@ -16285,7 +16305,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -16551,6 +16571,9 @@ components:
               type: number
               description: The number of licenses that are currently consumed by assignments from this allotment. Not nullable. Read-only.
               format: int32
+            externalServiceIdentifier:
+              type: string
+              nullable: true
             services:
               type: array
               items:
@@ -17076,8 +17099,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.fileArchiveStatus'
         hashes:
           $ref: '#/components/schemas/microsoft.graph.hashes'
-        lockInfo:
-          $ref: '#/components/schemas/microsoft.graph.lockInfo'
         mimeType:
           type: string
           description: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
@@ -17167,6 +17188,31 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockInfo:
+      title: lockInfo
+      type: object
+      properties:
+        createdDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock was created, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        expirationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: 'The date and time when the lock expires, in UTC. Read-only.'
+          format: date-time
+          nullable: true
+        lockType:
+          $ref: '#/components/schemas/microsoft.graph.lockType'
+        owners:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.userIdentity'
+          description: The collection of users that currently hold the lock on the file. Read-only.
+      additionalProperties:
+        type: object
     microsoft.graph.malware:
       title: malware
       type: object
@@ -17557,6 +17603,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.thumbnailSet:
@@ -17575,7 +17633,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.thumbnail'
           additionalProperties:
             type: object
-          description: The ThumbnailSet resource is a keyed collection of thumbnail resources.
     microsoft.graph.driveItemVersion:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.baseItemVersion'
@@ -17902,6 +17959,29 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.plannerHistoryItem:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
+        - title: plannerHistoryItem
+          type: object
+          properties:
+            actor:
+              $ref: '#/components/schemas/microsoft.graph.identitySet'
+            entityId:
+              type: string
+            entityType:
+              $ref: '#/components/schemas/microsoft.graph.historyEntityType'
+            eventType:
+              $ref: '#/components/schemas/microsoft.graph.historyEventType'
+            occurredDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            planId:
+              type: string
+          additionalProperties:
+            type: object
     microsoft.graph.plannerTask:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.plannerDelta'
@@ -19095,7 +19175,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -19111,13 +19191,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -19231,7 +19311,7 @@ components:
               nullable: true
             webUrl:
               type: string
-              description: Deep link URL of the tab instance. Read only.
+              description: Deep link URL of the tab instance. Read-only.
               nullable: true
             teamsApp:
               $ref: '#/components/schemas/microsoft.graph.teamsApp'
@@ -20472,6 +20552,8 @@ components:
               type: string
               description: Name of the OS image that's on the Cloud PC.
               nullable: true
+            isDisasterRecoveryActive:
+              type: boolean
             lastLoginResult:
               $ref: '#/components/schemas/microsoft.graph.cloudPcLoginResult'
             lastModifiedDateTime:
@@ -21103,6 +21185,40 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.distributionList:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.outlookItem'
+        - title: distributionList
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The display name of the distribution list.
+              nullable: true
+            members:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.member'
+              description: The list of members in the distribution list. Not returned by default; use $select=members to include.
+            notes:
+              type: string
+              nullable: true
+            personIdentifier:
+              type: string
+              nullable: true
+            distributionListMembers:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.distributionListMember'
+              description: The expanded members of the distribution list. Each member contains detailed information including resolved email addresses. Read-only.
+              x-ms-navigationProperty: true
+            singleValueExtendedProperties:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
     microsoft.graph.employeeExperienceUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -21124,7 +21240,6 @@ components:
               $ref: '#/components/schemas/microsoft.graph.storyline'
           additionalProperties:
             type: object
-          description: Represents a container that exposes navigation properties for employee experience user resources.
     microsoft.graph.inferenceClassification:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -22189,7 +22304,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -22228,6 +22342,11 @@ components:
         - title: accessReviewInstance
           type: object
           properties:
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this review instance to the current reviewer. Null if the instance wasn't delegated. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             endDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -23431,28 +23550,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockInfo:
-      title: lockInfo
-      type: object
-      properties:
-        createdDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        expirationDateTime:
-          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
-          type: string
-          format: date-time
-          nullable: true
-        lockType:
-          $ref: '#/components/schemas/microsoft.graph.lockType'
-        owners:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.userIdentity'
-      additionalProperties:
-        type: object
     microsoft.graph.folderView:
       title: folderView
       type: object
@@ -23471,6 +23568,30 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.lockType:
+      title: lockType
+      enum:
+        - none
+        - exclusive
+        - shared
+        - unknownFutureValue
+      type: string
+    microsoft.graph.userIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: userIdentity
+          type: object
+          properties:
+            ipAddress:
+              type: string
+              description: Indicates the client IP address associated with the user performing the activity (audit log only).
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: The userPrincipalName attribute of the user.
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.mediaSource:
       title: mediaSource
       type: object
@@ -24010,6 +24131,22 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.historyEntityType:
+      title: historyEntityType
+      enum:
+        - task
+        - unknownFutureValue
+      type: string
+    microsoft.graph.historyEventType:
+      title: historyEventType
+      enum:
+        - created
+        - updated
+        - deleted
+        - undeleted
+        - moved
+        - unknownFutureValue
+      type: string
     microsoft.graph.plannerAppliedCategories:
       title: plannerAppliedCategories
       type: object
@@ -26538,6 +26675,8 @@ components:
         - modifyingSingleSignOn
         - refreshPolicyConfiguration
         - preparing
+        - failoverInProgress
+        - failbackInProgress
       type: string
     microsoft.graph.cloudPcStatusDetail:
       title: cloudPcStatusDetail
@@ -26923,6 +27062,50 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.member:
+      title: member
+      type: object
+      properties:
+        contactId:
+          type: string
+          description: 'The ID of the referenced contact, if applicable. Optional.'
+          nullable: true
+        displayName:
+          type: string
+          description: The display name of the member. Optional.
+          nullable: true
+        key:
+          type: string
+          description: The email address or routing key of the member. Required.
+          nullable: true
+        recipientType:
+          $ref: '#/components/schemas/microsoft.graph.recipientType'
+        routingType:
+          type: string
+          description: 'The routing type for the member, for example, SMTP. Optional.'
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.distributionListMember:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: distributionListMember
+          type: object
+          properties:
+            contactId:
+              type: string
+              description: 'The ID of the referenced contact, if applicable. Read-only.'
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the member. Read-only.
+              nullable: true
+            recipientType:
+              $ref: '#/components/schemas/microsoft.graph.recipientType'
+            contact:
+              $ref: '#/components/schemas/microsoft.graph.contact'
+          additionalProperties:
+            type: object
     microsoft.graph.engagementRole:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -29164,6 +29347,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -29613,6 +29798,11 @@ components:
               type: string
               description: 'Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).'
               nullable: true
+            delegatedBy:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.userIdentity'
+              description: The identities of users who delegated this decision item to the current reviewer. Null if the item wasn't delegated. A collection because multiple reviewers can delegate to the same user. Only returned via filterByCurrentUser when explicitly requested via $select. Read-only.
             justification:
               type: string
               description: Justification left by the reviewer when they made the decision.
@@ -31018,30 +31208,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.lockType:
-      title: lockType
-      enum:
-        - none
-        - exclusive
-        - shared
-        - unknownFutureValue
-      type: string
-    microsoft.graph.userIdentity:
-      allOf:
-        - $ref: '#/components/schemas/microsoft.graph.identity'
-        - title: userIdentity
-          type: object
-          properties:
-            ipAddress:
-              type: string
-              description: Indicates the client IP address associated with the user performing the activity (audit log only).
-              nullable: true
-            userPrincipalName:
-              type: string
-              description: The userPrincipalName attribute of the user.
-              nullable: true
-          additionalProperties:
-            type: object
     microsoft.graph.mediaSourceContentCategory:
       title: mediaSourceContentCategory
       enum:
@@ -32036,7 +32202,7 @@ components:
           nullable: true
         defaultLabel:
           type: string
-          description: Label that would be used if no customizedLabel is provided. Read only.
+          description: Label that would be used if no customizedLabel is provided. Read-only.
           nullable: true
         fieldId:
           type: string
@@ -32658,6 +32824,15 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.recipientType:
+      title: recipientType
+      enum:
+        - contact
+        - oneOff
+        - mailbox
+        - privateDL
+        - unknownFutureValue
+      type: string
     microsoft.graph.engagementRoleMember:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -34188,12 +34363,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -34227,6 +34405,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -35168,7 +35356,7 @@ components:
           items:
             type: string
             nullable: true
-          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read only.'
+          description: 'The list of languages the user does not need translated. This is computed from the authoringLanguages collection in regionalAndLanguageSettings, and the languageOverrides collection in translationPreferences. The list specifies neutral culture values that include the language code without any country or region association. For example, it would specify ''fr'' for the neutral French culture, but not ''fr-FR'' for the French culture in France. Returned by default. Read-only.'
       additionalProperties:
         type: object
     microsoft.graph.shiftAvailability:
@@ -35510,6 +35698,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -37048,6 +37237,8 @@ components:
           items:
             $ref: '#/components/schemas/microsoft.graph.processContentMetadataBase'
           description: 'A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses, file metadata for files, and content activity metadata for enforcement result status entries. Required.'
+        contextMetadata:
+          $ref: '#/components/schemas/microsoft.graph.contextMetadata'
         deviceMetadata:
           $ref: '#/components/schemas/microsoft.graph.deviceMetadata'
         integratedAppMetadata:
@@ -40169,6 +40360,14 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.contextMetadata:
+      title: contextMetadata
+      type: object
+      properties:
+        metadataProperties:
+          $ref: '#/components/schemas/microsoft.graph.customMetadataDictionary'
+      additionalProperties:
+        type: object
     microsoft.graph.deviceMetadata:
       title: deviceMetadata
       type: object
@@ -40696,16 +40895,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -40724,20 +40926,24 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions. Patterns must follow specific validation rules for standard URI formats or URN formats.
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -40756,16 +40962,19 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed globally across all platforms. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedDomainConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -40784,16 +40993,19 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed globally across all platforms. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme.
         excludeActors:
           $ref: '#/components/schemas/microsoft.graph.appManagementPolicyActorExemptions'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         publicClient:
           $ref: '#/components/schemas/microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration'
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         spa:
@@ -40814,10 +41026,12 @@ components:
           $ref: '#/components/schemas/microsoft.graph.redirectUriWildcardExcludeFormats'
         isStateSetByMicrosoft:
           type: boolean
+          description: Indicates whether the restriction state was set by Microsoft.
           readOnly: true
         restrictForAppsCreatedAfterDateTime:
           pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
           type: string
+          description: Date and time when this restriction starts applying to newly created applications. Applications created before this date are not affected.
           format: date-time
           nullable: true
         state:
@@ -40990,6 +41204,9 @@ components:
         - downloadText
         - downloadFile
         - copyToClipboard
+        - pasteFromClipboard
+        - print
+        - accessDebugTools
         - unknownFutureValue
       type: string
     microsoft.graph.contentBase:
@@ -41004,6 +41221,13 @@ components:
         - ai
         - unknownFutureValue
       type: string
+    microsoft.graph.customMetadataDictionary:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.Dictionary'
+        - title: customMetadataDictionary
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.operatingSystemSpecifications:
       title: operatingSystemSpecifications
       type: object
@@ -41074,6 +41298,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are blocked for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformBlockedSchemeConfiguration:
@@ -41084,10 +41309,12 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are blocked for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1.
         exemptFormats:
           type: array
           items:
             type: string
+          description: Collection of URI patterns that are exempt from the blocked scheme restrictions for this platform. Patterns must follow specific validation rules for standard URI formats or URN formats.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedDomainConfiguration:
@@ -41098,6 +41325,7 @@ components:
           type: array
           items:
             type: string
+          description: 'Collection of domain names that are allowed for this specific platform. Domain validation follows RFC 3986 (URI syntax, section 3.2.2 for the host component). Domain matching is case-insensitive and exact; wildcards are not supported.'
       additionalProperties:
         type: object
     microsoft.graph.redirectUriPlatformAllowedSchemeConfiguration:
@@ -41108,6 +41336,7 @@ components:
           type: array
           items:
             type: string
+          description: Collection of URI schemes that are allowed for this specific platform. Schemes refer to URI schemes as defined in RFC 3986 §3.1. The value '*' can be used to allow any scheme for this platform.
       additionalProperties:
         type: object
     microsoft.graph.redirectUriWildcardExcludeFormats:
@@ -41116,10 +41345,12 @@ components:
       properties:
         excludeWildcardsInPath:
           type: boolean
+          description: 'When true, blocks the use of wildcards in the path portion of redirect URIs. When false, allows wildcards in paths.'
         excludeWildcardsInPathWithDomains:
           type: array
           items:
             type: string
+          description: 'Collection of domain names where wildcards in the path portion of redirect URIs are blocked. Accepts only valid host names (no wildcards) as defined in RFC 3986 §3.2.2. For example, login.microsoft.com or contoso.com.'
       additionalProperties:
         type: object
     microsoft.graph.attributeMapping:
diff --git a/openApiDocs/v1.0/Applications.yml b/openApiDocs/v1.0/Applications.yml
index f8d816e7ce..52a6b946d6 100644
--- a/openApiDocs/v1.0/Applications.yml
+++ b/openApiDocs/v1.0/Applications.yml
@@ -3286,7 +3286,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action pause
-      description: 'Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job will continue from where it left off when a start call is made.'
+      description: 'Temporarily stop a running synchronizationJob. All the progress, including job state, is persisted, and the job will continue from where it left off when a start call is made.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-pause?view=graph-rest-1.0
@@ -3319,7 +3319,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action provisionOnDemand
-      description: Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds.
+      description: Select a user and provision the account on-demand for a synchronizationJob. The rate limit for this API is 5 requests per 10 seconds.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-provisionondemand?view=graph-rest-1.0
@@ -3370,7 +3370,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action restart
-      description: 'Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
+      description: 'Restart a stopped synchronizationJob, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-restart?view=graph-rest-1.0
@@ -3415,7 +3415,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action start
-      description: 'Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
+      description: 'Start an existing synchronizationJob. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-start?view=graph-rest-1.0
@@ -3448,7 +3448,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action validateCredentials
-      description: Validate that the credentials are valid in the tenant.
+      description: Validate that the credentials are valid in the tenant for a synchronizationJob.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-validatecredentials?view=graph-rest-1.0
@@ -3890,7 +3890,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: Discover the latest schema definition for provisioning to an application for the directoryDefinition.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-1.0
@@ -3965,7 +3965,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-1.0
@@ -4051,7 +4051,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-1.0
@@ -4137,7 +4137,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a given string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-1.0
@@ -4258,7 +4258,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action acquireAccessToken
-      description: Acquire an OAuth access token to authorize the Microsoft Entra provisioning service to provision users into an application.
+      description: Acquire an OAuth access token from the synchronization resource to authorize the Microsoft Entra provisioning service to provision users into an application.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-acquireaccesstoken?view=graph-rest-1.0
@@ -4508,7 +4508,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Update synchronizationTemplate
-      description: Update (override) the synchronization template associated with a given application.
+      description: Update (override) the synchronizationTemplate associated with a given application.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationtemplate-update?view=graph-rest-1.0
@@ -4971,7 +4971,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: Discover the latest schema definition for provisioning to an application for the directoryDefinition.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-1.0
@@ -5046,7 +5046,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-1.0
@@ -5132,7 +5132,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-1.0
@@ -5218,7 +5218,7 @@ paths:
       tags:
         - applications.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a given string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-1.0
@@ -12810,7 +12810,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: List synchronization jobs
-      description: List existing jobs for a given application instance (service principal).
+      description: List existing synchronizationJob objects for a given application instance (service principal).
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-list-jobs?view=graph-rest-1.0
@@ -12872,7 +12872,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Create synchronizationJob
-      description: Create new synchronization job with a default synchronization schema. The job is created in a disabled state. Call Start job to start synchronization.
+      description: Create a new synchronizationJob with a default synchronization schema. The job is created in a disabled state. Call Start job to start synchronization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-post-jobs?view=graph-rest-1.0
@@ -12908,7 +12908,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Get synchronizationJob
-      description: Retrieve the existing synchronization job and its properties.
+      description: Retrieve an existing synchronizationJob and its properties.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-get?view=graph-rest-1.0
@@ -13003,7 +13003,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Delete synchronizationJob
-      description: 'Stop the synchronization job, and permanently delete all the state associated with it. Synchronized accounts are left as-is.'
+      description: 'Stop the synchronizationJob, and permanently delete all the state associated with it. Synchronized accounts are left as-is.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-delete?view=graph-rest-1.0
@@ -13273,7 +13273,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action pause
-      description: 'Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job will continue from where it left off when a start call is made.'
+      description: 'Temporarily stop a running synchronizationJob. All the progress, including job state, is persisted, and the job will continue from where it left off when a start call is made.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-pause?view=graph-rest-1.0
@@ -13306,7 +13306,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action provisionOnDemand
-      description: Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds.
+      description: Select a user and provision the account on-demand for a synchronizationJob. The rate limit for this API is 5 requests per 10 seconds.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-provisionondemand?view=graph-rest-1.0
@@ -13357,7 +13357,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action restart
-      description: 'Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
+      description: 'Restart a stopped synchronizationJob, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-restart?view=graph-rest-1.0
@@ -13402,7 +13402,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action start
-      description: 'Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
+      description: 'Start an existing synchronizationJob. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don''t create scripts to call the start job continuously while it''s running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-start?view=graph-rest-1.0
@@ -13435,7 +13435,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action validateCredentials
-      description: Validate that the credentials are valid in the tenant.
+      description: Validate that the credentials are valid in the tenant for a synchronizationJob.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationjob-validatecredentials?view=graph-rest-1.0
@@ -13492,7 +13492,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Get synchronizationSchema
-      description: Retrieve the schema for a given synchronization job or template.
+      description: Retrieve the synchronizationSchema for a given synchronization job or template.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-get?view=graph-rest-1.0
@@ -13548,7 +13548,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Update synchronizationSchema
-      description: 'Update the synchronization schema for a given job or template. This method fully replaces the current schema with the one provided in the request. To update the schema of a template, make the call on the application object. You must be the owner of the application.'
+      description: 'Update the synchronizationSchema for a given job or template. This method fully replaces the current schema with the one provided in the request. To update the schema of a template, make the call on the application object. You must be the owner of the application.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-update?view=graph-rest-1.0
@@ -13884,7 +13884,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: Discover the latest schema definition for provisioning to an application for the directoryDefinition.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-1.0
@@ -13959,7 +13959,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-1.0
@@ -14045,7 +14045,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-1.0
@@ -14131,7 +14131,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a given string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-1.0
@@ -14252,7 +14252,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action acquireAccessToken
-      description: Acquire an OAuth access token to authorize the Microsoft Entra provisioning service to provision users into an application.
+      description: Acquire an OAuth access token from the synchronization resource to authorize the Microsoft Entra provisioning service to provision users into an application.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-acquireaccesstoken?view=graph-rest-1.0
@@ -14291,7 +14291,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Add synchronization secrets
-      description: Provide credentials for establishing connectivity with the target system.
+      description: Provide credentials for establishing connectivity with the target system and store them in the synchronization resource.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-serviceprincipal-put-synchronization?view=graph-rest-1.0
@@ -14362,7 +14362,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: List existing synchronization templates
-      description: List the synchronization templates associated with a given application or service principal.
+      description: List synchronizationTemplate objects associated with a given application or service principal.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronization-list-templates?view=graph-rest-1.0
@@ -14968,7 +14968,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action discover
-      description: 'Discover the latest schema definition for provisioning to an application. '
+      description: Discover the latest schema definition for provisioning to an application for the directoryDefinition.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-directorydefinition-discover?view=graph-rest-1.0
@@ -15043,7 +15043,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function filterOperators
-      description: List all operators supported in the scoping filters.
+      description: List all operators supported in the scoping filters for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-filteroperators?view=graph-rest-1.0
@@ -15129,7 +15129,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke function functions
-      description: List all the functions currently supported in the attributeMappingSource.
+      description: List all the functions currently supported in the attributeMappingSource for a synchronizationSchema.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-functions?view=graph-rest-1.0
@@ -15215,7 +15215,7 @@ paths:
       tags:
         - servicePrincipals.synchronization
       summary: Invoke action parseExpression
-      description: 'Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
+      description: 'Parse a given string expression into an attributeMappingSource object for a synchronizationSchema. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/synchronization-synchronizationschema-parseexpression?view=graph-rest-1.0
@@ -17290,6 +17290,7 @@ components:
             subject:
               type: string
               description: 'Required. The identifier of the external software workload within the external identity provider. Like the audience value, it has no fixed format; each identity provider uses their own - sometimes a GUID, sometimes a colon delimited identifier, sometimes arbitrary strings. The value here must match the sub claim within the token presented to Microsoft Entra ID. The combination of issuer and subject must be unique within the app. It has a limit of 600 characters. Supports $filter (eq).'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.homeRealmDiscoveryPolicy:
@@ -17716,7 +17717,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -17743,7 +17744,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -17890,7 +17891,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -17912,7 +17913,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -17945,7 +17946,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -18043,7 +18044,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -18300,7 +18301,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.synchronization:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -18796,7 +18796,7 @@ components:
               nullable: true
             roleTemplateId:
               type: string
-              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read only. Supports $filter (eq), $select.'
+              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read-only. Supports $filter (eq), $select.'
               nullable: true
             members:
               type: array
@@ -18818,6 +18818,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -18826,7 +18828,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -18889,6 +18891,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -18923,6 +18929,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -19000,11 +19008,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -19151,7 +19173,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.selfSignedCertificate:
       title: selfSignedCertificate
       type: object
@@ -22009,7 +22030,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -22776,6 +22796,15 @@ components:
         - high
         - unknownFutureValue
       type: string
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -23498,6 +23527,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -24367,7 +24397,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -24383,13 +24413,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -24853,6 +24883,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -25439,7 +25474,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -25608,7 +25643,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -29727,6 +29762,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
diff --git a/openApiDocs/v1.0/BackupRestore.yml b/openApiDocs/v1.0/BackupRestore.yml
index 98d57e843d..22cd9b5b70 100644
--- a/openApiDocs/v1.0/BackupRestore.yml
+++ b/openApiDocs/v1.0/BackupRestore.yml
@@ -960,6 +960,91 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
+  /solutions/backupRestore/emailNotificationsSetting:
+    get:
+      tags:
+        - solutions.backupRestoreRoot
+      summary: Get emailNotificationsSetting
+      description: Read the properties and relationships of an emailNotificationsSetting object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/emailnotificationssetting-get?view=graph-rest-1.0
+      operationId: solution.backupRestore_GetEmailNotificationsSetting
+      parameters:
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.emailNotificationsSetting'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - solutions.backupRestoreRoot
+      summary: Update emailNotificationsSetting
+      description: Update the properties of an emailNotificationsSetting object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/emailnotificationssetting-update?view=graph-rest-1.0
+      operationId: solution.backupRestore_UpdateEmailNotificationsSetting
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.emailNotificationsSetting'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.emailNotificationsSetting'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - solutions.backupRestoreRoot
+      summary: Delete navigation property emailNotificationsSetting for solutions
+      operationId: solution.backupRestore_DeleteEmailNotificationsSetting
+      parameters:
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
   /solutions/backupRestore/exchangeProtectionPolicies:
     get:
       tags:
@@ -9024,6 +9109,8 @@ components:
               items:
                 $ref: '#/components/schemas/microsoft.graph.driveProtectionUnitsBulkAdditionJob'
               x-ms-navigationProperty: true
+            emailNotificationsSetting:
+              $ref: '#/components/schemas/microsoft.graph.emailNotificationsSetting'
             exchangeProtectionPolicies:
               type: array
               items:
@@ -9278,6 +9365,21 @@ components:
               description: The list of email addresses to add to the OneDrive protection policy.
           additionalProperties:
             type: object
+    microsoft.graph.emailNotificationsSetting:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: emailNotificationsSetting
+          type: object
+          properties:
+            additionalEvents:
+              $ref: '#/components/schemas/microsoft.graph.notificationEventsType'
+            isEnabled:
+              type: boolean
+              description: Indicates whether notifications are enabled.
+            recipients:
+              $ref: '#/components/schemas/microsoft.graph.notificationRecipients'
+          additionalProperties:
+            type: object
     microsoft.graph.exchangeProtectionPolicy:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.protectionPolicyBase'
@@ -10120,6 +10222,28 @@ components:
               $ref: '#/components/schemas/microsoft.graph.protectionUnitsBulkJobStatus'
           additionalProperties:
             type: object
+    microsoft.graph.notificationEventsType:
+      title: notificationEventsType
+      enum:
+        - none
+        - restoreAndPolicyUpdates
+        - unknownFutureValue
+      type: string
+      x-ms-enum-flags:
+        isFlags: true
+    microsoft.graph.notificationRecipients:
+      title: notificationRecipients
+      type: object
+      properties:
+        customRecipients:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.emailIdentity'
+          description: A list of users or groups that receive notifications. Only specify this property when role is set to custom.
+        role:
+          $ref: '#/components/schemas/microsoft.graph.notificationRecipientsType'
+      additionalProperties:
+        type: object
     microsoft.graph.restoreArtifactBase:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -10943,6 +11067,30 @@ components:
         - completedWithErrors
         - unknownFutureValue
       type: string
+    microsoft.graph.emailIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: emailIdentity
+          type: object
+          properties:
+            email:
+              type: string
+              description: Email address of the user.
+              nullable: true
+          additionalProperties:
+            type: object
+    microsoft.graph.notificationRecipientsType:
+      title: notificationRecipientsType
+      enum:
+        - none
+        - globalAdmins
+        - backupAdmins
+        - custom
+        - allAdmins
+        - unknownFutureValue
+      type: string
+      x-ms-enum-flags:
+        isFlags: true
     microsoft.graph.destinationType:
       title: destinationType
       enum:
diff --git a/openApiDocs/v1.0/Bookings.yml b/openApiDocs/v1.0/Bookings.yml
index 8f5c6e7fcf..2bf69c0e14 100644
--- a/openApiDocs/v1.0/Bookings.yml
+++ b/openApiDocs/v1.0/Bookings.yml
@@ -70,7 +70,7 @@ paths:
       tags:
         - solutions.bookingBusiness
       summary: List bookingBusinesses
-      description: 'Get a collection of bookingBusiness objects that has been created for the tenant. This operation returns only the id and displayName of each Microsoft Bookings business in the collection. For performance considerations, it does not return other properties. You can get the other properties of a Bookings business by specifying its id in a GET operation.'
+      description: 'Get a collection of bookingBusiness objects that has been created for the tenant. This operation returns only the id and displayName of each Microsoft Bookings business in the collection. For performance considerations, it doesn''t return other properties. You can get the other properties of a Bookings business by specifying its id in a GET operation.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/bookingbusiness-list?view=graph-rest-1.0
@@ -8607,6 +8607,8 @@ components:
               items:
                 $ref: '#/components/schemas/microsoft.graph.driveProtectionUnitsBulkAdditionJob'
               x-ms-navigationProperty: true
+            emailNotificationsSetting:
+              $ref: '#/components/schemas/microsoft.graph.emailNotificationsSetting'
             exchangeProtectionPolicies:
               type: array
               items:
@@ -9680,6 +9682,21 @@ components:
               description: The list of email addresses to add to the OneDrive protection policy.
           additionalProperties:
             type: object
+    microsoft.graph.emailNotificationsSetting:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: emailNotificationsSetting
+          type: object
+          properties:
+            additionalEvents:
+              $ref: '#/components/schemas/microsoft.graph.notificationEventsType'
+            isEnabled:
+              type: boolean
+              description: Indicates whether notifications are enabled.
+            recipients:
+              $ref: '#/components/schemas/microsoft.graph.notificationRecipients'
+          additionalProperties:
+            type: object
     microsoft.graph.exchangeProtectionPolicy:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.protectionPolicyBase'
@@ -10600,6 +10617,28 @@ components:
               $ref: '#/components/schemas/microsoft.graph.protectionUnitsBulkJobStatus'
           additionalProperties:
             type: object
+    microsoft.graph.notificationEventsType:
+      title: notificationEventsType
+      enum:
+        - none
+        - restoreAndPolicyUpdates
+        - unknownFutureValue
+      type: string
+      x-ms-enum-flags:
+        isFlags: true
+    microsoft.graph.notificationRecipients:
+      title: notificationRecipients
+      type: object
+      properties:
+        customRecipients:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.emailIdentity'
+          description: A list of users or groups that receive notifications. Only specify this property when role is set to custom.
+        role:
+          $ref: '#/components/schemas/microsoft.graph.notificationRecipientsType'
+      additionalProperties:
+        type: object
     microsoft.graph.granularMailboxRestoreArtifact:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.mailboxRestoreArtifact'
@@ -11019,6 +11058,30 @@ components:
         - completedWithErrors
         - unknownFutureValue
       type: string
+    microsoft.graph.emailIdentity:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.identity'
+        - title: emailIdentity
+          type: object
+          properties:
+            email:
+              type: string
+              description: Email address of the user.
+              nullable: true
+          additionalProperties:
+            type: object
+    microsoft.graph.notificationRecipientsType:
+      title: notificationRecipientsType
+      enum:
+        - none
+        - globalAdmins
+        - backupAdmins
+        - custom
+        - allAdmins
+        - unknownFutureValue
+      type: string
+      x-ms-enum-flags:
+        isFlags: true
     microsoft.graph.restoreArtifactBase:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
diff --git a/openApiDocs/v1.0/Calendar.yml b/openApiDocs/v1.0/Calendar.yml
index 420583ee3b..7103e6e3a0 100644
--- a/openApiDocs/v1.0/Calendar.yml
+++ b/openApiDocs/v1.0/Calendar.yml
@@ -19493,6 +19493,10 @@ components:
               type: string
               description: The phone number of the place.
               nullable: true
+            placeId:
+              type: string
+              description: A stable service-level identifier for the place object used by Places workloads.
+              nullable: true
             tags:
               type: array
               items:
@@ -19653,6 +19657,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.mailboxDetails'
             mode:
               $ref: '#/components/schemas/microsoft.graph.placeMode'
+            servicePlans:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.placeServicePlanInfo'
+              description: The service plans associated with the desk.
           additionalProperties:
             type: object
     microsoft.graph.floor:
@@ -19715,10 +19724,6 @@ components:
             nickname:
               type: string
               description: 'Specifies a nickname for the room, for example, ''conf room''.'
-            placeId:
-              type: string
-              description: An alternative immutable unique identifier of the room. Read-only.
-              nullable: true
             teamsEnabledState:
               $ref: '#/components/schemas/microsoft.graph.placeFeatureEnablement'
             videoDeviceName:
@@ -19775,10 +19780,6 @@ components:
             nickname:
               type: string
               description: 'A short, friendly name for the workspace, often used for easier identification or display in the UI.'
-            placeId:
-              type: string
-              description: An alternative immutable unique identifier of the workspace. Read-only.
-              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.section:
@@ -20253,6 +20254,16 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.placeServicePlanInfo:
+      title: placeServicePlanInfo
+      type: object
+      properties:
+        servicePlanId:
+          type: string
+          description: The service plan identifier.
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.bookingType:
       title: bookingType
       enum:
diff --git a/openApiDocs/v1.0/CloudCommunications.yml b/openApiDocs/v1.0/CloudCommunications.yml
index 7107092ad4..5447f32c86 100644
--- a/openApiDocs/v1.0/CloudCommunications.yml
+++ b/openApiDocs/v1.0/CloudCommunications.yml
@@ -3339,7 +3339,7 @@ paths:
       tags:
         - communications.call
       summary: Invoke action keepAlive
-      description: 'Make a request to this API every 15 to 45 minutes to ensure that an ongoing call remains active. A call that does not receive this request within 45 minutes is considered inactive and will subsequently end. At least one successful request must be made within 45 minutes of the previous request, or the start of the call. We recommend that you send a request in shorter time intervals (every 15 minutes). Make sure that these requests are successful to prevent the call from timing out and ending. Attempting to send a request to a call that has already ended will result in a 404 Not-Found error. The resources related to the call should be cleaned up on the application side.'
+      description: 'Make a request to this API every 15 to 45 minutes to ensure that an ongoing call remains active. A call that doesn''t receive this request within 45 minutes is considered inactive and will subsequently end. At least one successful request must be made within 45 minutes of the previous request, or the start of the call. We recommend that you send a request in shorter time intervals (every 15 minutes). Make sure that these requests are successful to prevent the call from timing out and ending. Attempting to send a request to a call that has already ended will result in a 404 Not-Found error. The resources related to the call should be cleaned up on the application side.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/call-keepalive?view=graph-rest-1.0
@@ -3577,7 +3577,7 @@ paths:
       tags:
         - communications.call
       summary: Invoke action reject
-      description: 'Enable a bot to reject an incoming call. The incoming call request can be an invite from a participant in a group call or a peer-to-peer call. If an invite to a group call is received, the notification will contain the chatInfo and meetingInfo parameters. The bot is expected to answer or reject the call before the call times out. The current timeout value is 15 seconds. This API does not end existing calls that have already been answered. Use delete call to end a call.'
+      description: 'Enable a bot to reject an incoming call. The incoming call request can be an invite from a participant in a group call or a peer-to-peer call. If an invite to a group call is received, the notification will contain the chatInfo and meetingInfo parameters. The bot is expected to answer or reject the call before the call times out. The current timeout value is 15 seconds. This API doesn''t end existing calls that have already been answered. Use delete call to end a call.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/call-reject?view=graph-rest-1.0
@@ -11685,7 +11685,7 @@ paths:
       tags:
         - users.onlineMeeting
       summary: List transcripts
-      description: Retrieve the list of callTranscript objects associated with a scheduled onlineMeeting. This API supports the retrieval of call transcripts from all meeting types except live events.
+      description: 'Retrieve the list of callTranscript objects associated with a scheduled onlineMeeting. This API supports the retrieval of call transcripts from all meeting types except live events. Access to this API is governed by tenant administrator settings. For more information, see Error responses.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/onlinemeeting-list-transcripts?view=graph-rest-1.0
@@ -13970,7 +13970,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.meetingAttendanceReport:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
diff --git a/openApiDocs/v1.0/Compliance.yml b/openApiDocs/v1.0/Compliance.yml
index 9750ea3e85..c684bccc4d 100644
--- a/openApiDocs/v1.0/Compliance.yml
+++ b/openApiDocs/v1.0/Compliance.yml
@@ -1712,7 +1712,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -1739,7 +1739,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -1886,7 +1886,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -1908,7 +1908,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -1941,7 +1941,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -2039,7 +2039,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -2296,7 +2296,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.mailboxSettings:
       title: mailboxSettings
       type: object
@@ -4848,7 +4847,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -5391,7 +5389,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -5481,6 +5479,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -5489,7 +5489,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -5552,6 +5552,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -5586,6 +5590,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -5663,11 +5669,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -5814,7 +5834,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAppInstallation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -5938,7 +5957,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -6216,6 +6235,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -7035,7 +7055,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -7051,13 +7071,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -7509,6 +7529,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -9887,6 +9912,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -11815,6 +11849,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
diff --git a/openApiDocs/v1.0/ConfigurationManagement.yml b/openApiDocs/v1.0/ConfigurationManagement.yml
index 48be2b20d7..5eb013c91f 100644
--- a/openApiDocs/v1.0/ConfigurationManagement.yml
+++ b/openApiDocs/v1.0/ConfigurationManagement.yml
@@ -1682,6 +1682,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.Dictionary:
       title: Dictionary
       type: object
diff --git a/openApiDocs/v1.0/CrossDeviceExperiences.yml b/openApiDocs/v1.0/CrossDeviceExperiences.yml
index 4829270c51..d3c154f50d 100644
--- a/openApiDocs/v1.0/CrossDeviceExperiences.yml
+++ b/openApiDocs/v1.0/CrossDeviceExperiences.yml
@@ -805,6 +805,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
diff --git a/openApiDocs/v1.0/DeviceManagement.Administration.yml b/openApiDocs/v1.0/DeviceManagement.Administration.yml
index 7c2e73894e..bf9fad2edc 100644
--- a/openApiDocs/v1.0/DeviceManagement.Administration.yml
+++ b/openApiDocs/v1.0/DeviceManagement.Administration.yml
@@ -5845,6 +5845,121 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: action
+  /deviceManagement/virtualEndpoint/servicePlans:
+    get:
+      tags:
+        - deviceManagement.virtualEndpoint
+      summary: List servicePlans
+      description: 'List the currently available service plans that an organization can purchase for their Cloud PCs. For examples of currently available service plans, see Windows 365 compare plans and pricing. Currently, the Microsoft Graph API is available for Windows 365 Enterprise.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/virtualendpoint-list-serviceplans?view=graph-rest-1.0
+      operationId: deviceManagement.virtualEndpoint_ListServicePlan
+      parameters:
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.cloudPcServicePlanCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+  '/deviceManagement/virtualEndpoint/servicePlans/{cloudPcServicePlan-id}':
+    get:
+      tags:
+        - deviceManagement.virtualEndpoint
+      summary: Get servicePlans from deviceManagement
+      description: A collection of Cloud PC service plans.
+      operationId: deviceManagement.virtualEndpoint_GetServicePlan
+      parameters:
+        - name: cloudPcServicePlan-id
+          in: path
+          description: The unique identifier of cloudPcServicePlan
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: cloudPcServicePlan
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.cloudPcServicePlan'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  /deviceManagement/virtualEndpoint/servicePlans/$count:
+    get:
+      tags:
+        - deviceManagement.virtualEndpoint
+      summary: Get the number of the resource
+      operationId: deviceManagement.virtualEndpoint.servicePlan_GetCount
+      parameters:
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
   /deviceManagement/virtualEndpoint/userSettings:
     get:
       tags:
@@ -6946,6 +7061,12 @@ components:
               x-ms-navigationProperty: true
             report:
               $ref: '#/components/schemas/microsoft.graph.cloudPcReport'
+            servicePlans:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.cloudPcServicePlan'
+              description: A collection of Cloud PC service plans.
+              x-ms-navigationProperty: true
             userSettings:
               type: array
               items:
@@ -7399,7 +7520,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -7426,7 +7547,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -7573,7 +7694,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -7595,7 +7716,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -7628,7 +7749,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -7726,7 +7847,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -7983,7 +8104,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.mailboxSettings:
       title: mailboxSettings
       type: object
@@ -8029,6 +8149,35 @@ components:
         - cloudPcUsageCategoryReport
         - unknownFutureValue
       type: string
+    microsoft.graph.cloudPcServicePlan:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: cloudPcServicePlan
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The name for the service plan. Read-only.
+            ramInGB:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: The size of the RAM in GB. Read-only.
+              format: int32
+            storageInGB:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: The size of the operating system disk in GB. Read-only.
+              format: int32
+            vCpuCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: The number of vCPUs. Read-only.
+              format: int32
+          additionalProperties:
+            type: object
     microsoft.graph.cloudPcUserSetting:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -10898,7 +11047,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -11606,6 +11754,19 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.cloudPcServicePlanCollectionResponse:
+      title: Collection of cloudPcServicePlan
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.cloudPcServicePlan'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.cloudPcUserSettingCollectionResponse:
       title: Collection of cloudPcUserSetting
       type: object
@@ -11812,6 +11973,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -12681,7 +12843,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -12697,13 +12859,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -13160,6 +13322,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -13771,7 +13938,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -13861,6 +14028,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -13869,7 +14038,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -13932,6 +14101,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -13966,6 +14139,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -14043,11 +14218,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -14194,7 +14383,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAsyncOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -14280,7 +14468,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -17775,6 +17963,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -18736,6 +18929,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -25597,6 +25799,12 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.serviceProvisioningErrorCollectionResponse'
+    microsoft.graph.cloudPcServicePlanCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.cloudPcServicePlanCollectionResponse'
     microsoft.graph.cloudPcUserSettingCollectionResponse:
       description: Retrieved collection
       content:
diff --git a/openApiDocs/v1.0/DeviceManagement.yml b/openApiDocs/v1.0/DeviceManagement.yml
index b441d72e00..84acc406ce 100644
--- a/openApiDocs/v1.0/DeviceManagement.yml
+++ b/openApiDocs/v1.0/DeviceManagement.yml
@@ -13947,6 +13947,12 @@ components:
               x-ms-navigationProperty: true
             report:
               $ref: '#/components/schemas/microsoft.graph.cloudPcReport'
+            servicePlans:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.cloudPcServicePlan'
+              description: A collection of Cloud PC service plans.
+              x-ms-navigationProperty: true
             userSettings:
               type: array
               items:
@@ -14716,7 +14722,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -14743,7 +14749,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -14890,7 +14896,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -14912,7 +14918,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -14945,7 +14951,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -15043,7 +15049,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -15300,7 +15306,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.deviceAndAppManagementAssignmentTarget:
       title: deviceAndAppManagementAssignmentTarget
       type: object
@@ -18004,6 +18009,35 @@ components:
           type: object
           additionalProperties:
             type: object
+    microsoft.graph.cloudPcServicePlan:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: cloudPcServicePlan
+          type: object
+          properties:
+            displayName:
+              type: string
+              description: The name for the service plan. Read-only.
+            ramInGB:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: The size of the RAM in GB. Read-only.
+              format: int32
+            storageInGB:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: The size of the operating system disk in GB. Read-only.
+              format: int32
+            vCpuCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: The number of vCPUs. Read-only.
+              format: int32
+          additionalProperties:
+            type: object
     microsoft.graph.cloudPcUserSetting:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -20107,7 +20141,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -21040,6 +21073,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -21909,7 +21943,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -21925,13 +21959,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -22376,6 +22410,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -22987,7 +23026,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -23077,6 +23116,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -23085,7 +23126,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -23148,6 +23189,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -23182,6 +23227,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -23259,11 +23306,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -23410,7 +23471,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAsyncOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -23496,7 +23556,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -26168,6 +26228,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -27129,6 +27194,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
diff --git a/openApiDocs/v1.0/Devices.CloudPrint.yml b/openApiDocs/v1.0/Devices.CloudPrint.yml
index 4114ef50f3..feb3317556 100644
--- a/openApiDocs/v1.0/Devices.CloudPrint.yml
+++ b/openApiDocs/v1.0/Devices.CloudPrint.yml
@@ -6881,6 +6881,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -6889,7 +6891,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -6952,6 +6954,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -6986,6 +6992,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -7063,11 +7071,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -7214,7 +7236,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.user:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.directoryObject'
@@ -7227,7 +7248,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -7254,7 +7275,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -7401,7 +7422,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -7423,7 +7444,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -7456,7 +7477,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -7554,7 +7575,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -7811,7 +7832,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.automaticRepliesSetting:
       title: automaticRepliesSetting
       type: object
@@ -8409,6 +8429,15 @@ components:
               nullable: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -8451,6 +8480,72 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.onPremisesExtensionAttributes:
+      title: onPremisesExtensionAttributes
+      type: object
+      properties:
+        extensionAttribute1:
+          type: string
+          description: First customizable extension attribute.
+          nullable: true
+        extensionAttribute10:
+          type: string
+          description: Tenth customizable extension attribute.
+          nullable: true
+        extensionAttribute11:
+          type: string
+          description: Eleventh customizable extension attribute.
+          nullable: true
+        extensionAttribute12:
+          type: string
+          description: Twelfth customizable extension attribute.
+          nullable: true
+        extensionAttribute13:
+          type: string
+          description: Thirteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute14:
+          type: string
+          description: Fourteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute15:
+          type: string
+          description: Fifteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute2:
+          type: string
+          description: Second customizable extension attribute.
+          nullable: true
+        extensionAttribute3:
+          type: string
+          description: Third customizable extension attribute.
+          nullable: true
+        extensionAttribute4:
+          type: string
+          description: Fourth customizable extension attribute.
+          nullable: true
+        extensionAttribute5:
+          type: string
+          description: Fifth customizable extension attribute.
+          nullable: true
+        extensionAttribute6:
+          type: string
+          description: Sixth customizable extension attribute.
+          nullable: true
+        extensionAttribute7:
+          type: string
+          description: Seventh customizable extension attribute.
+          nullable: true
+        extensionAttribute8:
+          type: string
+          description: Eighth customizable extension attribute.
+          nullable: true
+        extensionAttribute9:
+          type: string
+          description: Ninth customizable extension attribute.
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.onPremisesProvisioningError:
       title: onPremisesProvisioningError
       type: object
@@ -9421,72 +9516,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.onPremisesExtensionAttributes:
-      title: onPremisesExtensionAttributes
-      type: object
-      properties:
-        extensionAttribute1:
-          type: string
-          description: First customizable extension attribute.
-          nullable: true
-        extensionAttribute10:
-          type: string
-          description: Tenth customizable extension attribute.
-          nullable: true
-        extensionAttribute11:
-          type: string
-          description: Eleventh customizable extension attribute.
-          nullable: true
-        extensionAttribute12:
-          type: string
-          description: Twelfth customizable extension attribute.
-          nullable: true
-        extensionAttribute13:
-          type: string
-          description: Thirteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute14:
-          type: string
-          description: Fourteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute15:
-          type: string
-          description: Fifteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute2:
-          type: string
-          description: Second customizable extension attribute.
-          nullable: true
-        extensionAttribute3:
-          type: string
-          description: Third customizable extension attribute.
-          nullable: true
-        extensionAttribute4:
-          type: string
-          description: Fourth customizable extension attribute.
-          nullable: true
-        extensionAttribute5:
-          type: string
-          description: Fifth customizable extension attribute.
-          nullable: true
-        extensionAttribute6:
-          type: string
-          description: Sixth customizable extension attribute.
-          nullable: true
-        extensionAttribute7:
-          type: string
-          description: Seventh customizable extension attribute.
-          nullable: true
-        extensionAttribute8:
-          type: string
-          description: Eighth customizable extension attribute.
-          nullable: true
-        extensionAttribute9:
-          type: string
-          description: Ninth customizable extension attribute.
-          nullable: true
-      additionalProperties:
-        type: object
     microsoft.graph.passwordProfile:
       title: passwordProfile
       type: object
@@ -10944,7 +10973,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -12681,6 +12709,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -13448,7 +13481,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -13655,7 +13688,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -13839,6 +13872,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -14356,7 +14390,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -14372,13 +14406,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -16967,6 +17001,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
diff --git a/openApiDocs/v1.0/Devices.CorporateManagement.yml b/openApiDocs/v1.0/Devices.CorporateManagement.yml
index 0704b31e0c..cfbb9c91fa 100644
--- a/openApiDocs/v1.0/Devices.CorporateManagement.yml
+++ b/openApiDocs/v1.0/Devices.CorporateManagement.yml
@@ -34817,7 +34817,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -34844,7 +34844,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -34991,7 +34991,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -35013,7 +35013,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -35046,7 +35046,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -35144,7 +35144,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -35401,7 +35401,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.policyPlatformType:
       title: policyPlatformType
       enum:
@@ -39199,7 +39198,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -39676,6 +39674,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -40545,7 +40544,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -40561,13 +40560,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -41031,6 +41030,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -41642,7 +41646,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -41732,6 +41736,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -41740,7 +41746,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -41803,6 +41809,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -41837,6 +41847,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -41914,11 +41926,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -42065,7 +42091,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAsyncOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -42151,7 +42176,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -44637,6 +44662,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -45598,6 +45628,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
diff --git a/openApiDocs/v1.0/Devices.ServiceAnnouncement.yml b/openApiDocs/v1.0/Devices.ServiceAnnouncement.yml
index 0033694291..e088719c6a 100644
--- a/openApiDocs/v1.0/Devices.ServiceAnnouncement.yml
+++ b/openApiDocs/v1.0/Devices.ServiceAnnouncement.yml
@@ -490,7 +490,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Invoke function incidentReport
-      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant.  An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document does not exist for the issue.
+      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant.  An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document doesn't exist for the issue.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/servicehealthissue-incidentreport?view=graph-rest-1.0
@@ -647,7 +647,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Get serviceHealthIssue
-      description: Retrieve the properties and relationships of a serviceHealthIssue object. This operation retrieves a specified service health issue for tenant. The operation returns an error if the issue does not exist for the tenant.
+      description: Retrieve the properties and relationships of a serviceHealthIssue object. This operation retrieves a specified service health issue for tenant. The operation returns an error if the issue doesn't exist for the tenant.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/servicehealthissue-get?view=graph-rest-1.0
@@ -753,7 +753,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Invoke function incidentReport
-      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant.  An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document does not exist for the issue.
+      description: Provide the Post-Incident Review (PIR) document of a specified service issue for tenant.  An issue only with status of PostIncidentReviewPublished indicates that the PIR document exists for the issue. The operation returns an error if the specified issue doesn't exist for the tenant or if PIR document doesn't exist for the issue.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/servicehealthissue-incidentreport?view=graph-rest-1.0
@@ -880,7 +880,7 @@ paths:
       tags:
         - admin.serviceAnnouncement
       summary: Get serviceUpdateMessage
-      description: Retrieve the properties and relationships of a serviceUpdateMessage object. This operation retrieves a specified service update message for the tenant. The operation returns an error if the message does not exist for the tenant.
+      description: Retrieve the properties and relationships of a serviceUpdateMessage object. This operation retrieves a specified service update message for the tenant. The operation returns an error if the message doesn't exist for the tenant.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/serviceupdatemessage-get?view=graph-rest-1.0
@@ -1699,19 +1699,19 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.serviceHealth'
-              description: 'A collection of service health information for tenant. This property is a contained navigation property, it is nullable and readonly.'
+              description: 'A collection of service health information for tenant. This property is a contained navigation property, it is nullable and read-only.'
               x-ms-navigationProperty: true
             issues:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.serviceHealthIssue'
-              description: 'A collection of service issues for tenant. This property is a contained navigation property, it is nullable and readonly.'
+              description: 'A collection of service issues for tenant. This property is a contained navigation property, it is nullable and read-only.'
               x-ms-navigationProperty: true
             messages:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.serviceUpdateMessage'
-              description: 'A collection of service messages for tenant. This property is a contained navigation property, it is nullable and readonly.'
+              description: 'A collection of service messages for tenant. This property is a contained navigation property, it is nullable and read-only.'
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
diff --git a/openApiDocs/v1.0/Education.yml b/openApiDocs/v1.0/Education.yml
index 6135188ce0..70cf3fb992 100644
--- a/openApiDocs/v1.0/Education.yml
+++ b/openApiDocs/v1.0/Education.yml
@@ -19120,6 +19120,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -19128,7 +19130,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -19191,6 +19193,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -19225,6 +19231,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -19302,11 +19310,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -19453,7 +19475,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.educationModule:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -19745,7 +19766,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -19772,7 +19793,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -19919,7 +19940,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -19941,7 +19962,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -19974,7 +19995,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -20072,7 +20093,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -20329,7 +20350,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.mailboxSettings:
       title: mailboxSettings
       type: object
@@ -20976,6 +20996,15 @@ components:
               nullable: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -21018,6 +21047,72 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.onPremisesExtensionAttributes:
+      title: onPremisesExtensionAttributes
+      type: object
+      properties:
+        extensionAttribute1:
+          type: string
+          description: First customizable extension attribute.
+          nullable: true
+        extensionAttribute10:
+          type: string
+          description: Tenth customizable extension attribute.
+          nullable: true
+        extensionAttribute11:
+          type: string
+          description: Eleventh customizable extension attribute.
+          nullable: true
+        extensionAttribute12:
+          type: string
+          description: Twelfth customizable extension attribute.
+          nullable: true
+        extensionAttribute13:
+          type: string
+          description: Thirteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute14:
+          type: string
+          description: Fourteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute15:
+          type: string
+          description: Fifteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute2:
+          type: string
+          description: Second customizable extension attribute.
+          nullable: true
+        extensionAttribute3:
+          type: string
+          description: Third customizable extension attribute.
+          nullable: true
+        extensionAttribute4:
+          type: string
+          description: Fourth customizable extension attribute.
+          nullable: true
+        extensionAttribute5:
+          type: string
+          description: Fifth customizable extension attribute.
+          nullable: true
+        extensionAttribute6:
+          type: string
+          description: Sixth customizable extension attribute.
+          nullable: true
+        extensionAttribute7:
+          type: string
+          description: Seventh customizable extension attribute.
+          nullable: true
+        extensionAttribute8:
+          type: string
+          description: Eighth customizable extension attribute.
+          nullable: true
+        extensionAttribute9:
+          type: string
+          description: Ninth customizable extension attribute.
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.onPremisesProvisioningError:
       title: onPremisesProvisioningError
       type: object
@@ -22162,72 +22257,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.onPremisesExtensionAttributes:
-      title: onPremisesExtensionAttributes
-      type: object
-      properties:
-        extensionAttribute1:
-          type: string
-          description: First customizable extension attribute.
-          nullable: true
-        extensionAttribute10:
-          type: string
-          description: Tenth customizable extension attribute.
-          nullable: true
-        extensionAttribute11:
-          type: string
-          description: Eleventh customizable extension attribute.
-          nullable: true
-        extensionAttribute12:
-          type: string
-          description: Twelfth customizable extension attribute.
-          nullable: true
-        extensionAttribute13:
-          type: string
-          description: Thirteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute14:
-          type: string
-          description: Fourteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute15:
-          type: string
-          description: Fifteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute2:
-          type: string
-          description: Second customizable extension attribute.
-          nullable: true
-        extensionAttribute3:
-          type: string
-          description: Third customizable extension attribute.
-          nullable: true
-        extensionAttribute4:
-          type: string
-          description: Fourth customizable extension attribute.
-          nullable: true
-        extensionAttribute5:
-          type: string
-          description: Fifth customizable extension attribute.
-          nullable: true
-        extensionAttribute6:
-          type: string
-          description: Sixth customizable extension attribute.
-          nullable: true
-        extensionAttribute7:
-          type: string
-          description: Seventh customizable extension attribute.
-          nullable: true
-        extensionAttribute8:
-          type: string
-          description: Eighth customizable extension attribute.
-          nullable: true
-        extensionAttribute9:
-          type: string
-          description: Ninth customizable extension attribute.
-          nullable: true
-      additionalProperties:
-        type: object
     microsoft.graph.userPrint:
       title: userPrint
       type: object
@@ -23649,7 +23678,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -24968,6 +24996,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -25735,7 +25768,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -25942,7 +25975,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -26178,6 +26211,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -26695,7 +26729,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -26711,13 +26745,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -29304,6 +29338,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
diff --git a/openApiDocs/v1.0/Groups.yml b/openApiDocs/v1.0/Groups.yml
index 1fc7c28c44..98eae550c2 100644
--- a/openApiDocs/v1.0/Groups.yml
+++ b/openApiDocs/v1.0/Groups.yml
@@ -519,7 +519,7 @@ paths:
       tags:
         - groups.directoryObject
       summary: List acceptedSenders
-      description: "Users in the accepted senders list can post to conversations of the group (identified in the GET request URL).\r\nMake sure you do not specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error."
+      description: "Users in the accepted senders list can post to conversations of the group (identified in the GET request URL).\r\nMake sure you don't specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error."
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-list-acceptedsenders?view=graph-rest-1.0
@@ -642,7 +642,7 @@ paths:
       tags:
         - groups.directoryObject
       summary: List acceptedSenders
-      description: "Users in the accepted senders list can post to conversations of the group (identified in the GET request URL).\r\nMake sure you do not specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error."
+      description: "Users in the accepted senders list can post to conversations of the group (identified in the GET request URL).\r\nMake sure you don't specify the same user or group in the accepted senders and rejected senders lists, otherwise you will get an error."
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-list-acceptedsenders?view=graph-rest-1.0
@@ -9701,7 +9701,7 @@ paths:
       tags:
         - groups.groupSetting
       summary: Create settings
-      description: 'Create a new group setting based on the templates available in groupSettingTemplates. These settings can be at the tenant-level or at the group level. Group settings apply to only Microsoft 365 groups. The template named Group.Unified can be used to configure tenant-wide Microsoft 365 group settings, while the template named Group.Unified.Guest can be used to configure group-specific settings.'
+      description: 'Create a new group setting based on the templates available in groupSettingTemplates. These settings can be at the tenant-level or at the group level. The following group setting templates are available for groups:'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-post-settings?view=graph-rest-1.0
@@ -14352,7 +14352,7 @@ paths:
       tags:
         - groupSettings.groupSetting
       summary: Create settings
-      description: 'Create a new group setting based on the templates available in groupSettingTemplates. These settings can be at the tenant-level or at the group level. Group settings apply to only Microsoft 365 groups. The template named Group.Unified can be used to configure tenant-wide Microsoft 365 group settings, while the template named Group.Unified.Guest can be used to configure group-specific settings.'
+      description: 'Create a new group setting based on the templates available in groupSettingTemplates. These settings can be at the tenant-level or at the group level. The following group setting templates are available for groups:'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/group-post-settings?view=graph-rest-1.0
@@ -15193,6 +15193,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -15201,7 +15203,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -15264,6 +15266,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -15298,6 +15304,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -15375,11 +15383,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -15526,7 +15548,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.conversation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -16569,7 +16590,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -16596,7 +16617,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -16743,7 +16764,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -16765,7 +16786,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -16798,7 +16819,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -16896,7 +16917,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -17153,7 +17174,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.assignedLicense:
       title: assignedLicense
       type: object
@@ -17440,6 +17460,15 @@ components:
           description: The unique identifier for an entity. Read-only.
       additionalProperties:
         type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -17463,6 +17492,72 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.onPremisesExtensionAttributes:
+      title: onPremisesExtensionAttributes
+      type: object
+      properties:
+        extensionAttribute1:
+          type: string
+          description: First customizable extension attribute.
+          nullable: true
+        extensionAttribute10:
+          type: string
+          description: Tenth customizable extension attribute.
+          nullable: true
+        extensionAttribute11:
+          type: string
+          description: Eleventh customizable extension attribute.
+          nullable: true
+        extensionAttribute12:
+          type: string
+          description: Twelfth customizable extension attribute.
+          nullable: true
+        extensionAttribute13:
+          type: string
+          description: Thirteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute14:
+          type: string
+          description: Fourteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute15:
+          type: string
+          description: Fifteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute2:
+          type: string
+          description: Second customizable extension attribute.
+          nullable: true
+        extensionAttribute3:
+          type: string
+          description: Third customizable extension attribute.
+          nullable: true
+        extensionAttribute4:
+          type: string
+          description: Fourth customizable extension attribute.
+          nullable: true
+        extensionAttribute5:
+          type: string
+          description: Fifth customizable extension attribute.
+          nullable: true
+        extensionAttribute6:
+          type: string
+          description: Sixth customizable extension attribute.
+          nullable: true
+        extensionAttribute7:
+          type: string
+          description: Seventh customizable extension attribute.
+          nullable: true
+        extensionAttribute8:
+          type: string
+          description: Eighth customizable extension attribute.
+          nullable: true
+        extensionAttribute9:
+          type: string
+          description: Ninth customizable extension attribute.
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.onPremisesProvisioningError:
       title: onPremisesProvisioningError
       type: object
@@ -18693,6 +18788,7 @@ components:
             subject:
               type: string
               description: 'Required. The identifier of the external software workload within the external identity provider. Like the audience value, it has no fixed format; each identity provider uses their own - sometimes a GUID, sometimes a colon delimited identifier, sometimes arbitrary strings. The value here must match the sub claim within the token presented to Microsoft Entra ID. The combination of issuer and subject must be unique within the app. It has a limit of 600 characters. Supports $filter (eq).'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.homeRealmDiscoveryPolicy:
@@ -19127,72 +19223,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.workingHours'
       additionalProperties:
         type: object
-    microsoft.graph.onPremisesExtensionAttributes:
-      title: onPremisesExtensionAttributes
-      type: object
-      properties:
-        extensionAttribute1:
-          type: string
-          description: First customizable extension attribute.
-          nullable: true
-        extensionAttribute10:
-          type: string
-          description: Tenth customizable extension attribute.
-          nullable: true
-        extensionAttribute11:
-          type: string
-          description: Eleventh customizable extension attribute.
-          nullable: true
-        extensionAttribute12:
-          type: string
-          description: Twelfth customizable extension attribute.
-          nullable: true
-        extensionAttribute13:
-          type: string
-          description: Thirteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute14:
-          type: string
-          description: Fourteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute15:
-          type: string
-          description: Fifteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute2:
-          type: string
-          description: Second customizable extension attribute.
-          nullable: true
-        extensionAttribute3:
-          type: string
-          description: Third customizable extension attribute.
-          nullable: true
-        extensionAttribute4:
-          type: string
-          description: Fourth customizable extension attribute.
-          nullable: true
-        extensionAttribute5:
-          type: string
-          description: Fifth customizable extension attribute.
-          nullable: true
-        extensionAttribute6:
-          type: string
-          description: Sixth customizable extension attribute.
-          nullable: true
-        extensionAttribute7:
-          type: string
-          description: Seventh customizable extension attribute.
-          nullable: true
-        extensionAttribute8:
-          type: string
-          description: Eighth customizable extension attribute.
-          nullable: true
-        extensionAttribute9:
-          type: string
-          description: Ninth customizable extension attribute.
-          nullable: true
-      additionalProperties:
-        type: object
     microsoft.graph.passwordProfile:
       title: passwordProfile
       type: object
@@ -20624,7 +20654,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -21895,6 +21924,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -22466,7 +22500,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -22673,7 +22707,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -23195,6 +23229,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -23712,7 +23747,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -23728,13 +23763,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -26543,6 +26578,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
diff --git a/openApiDocs/v1.0/Identity.DirectoryManagement.yml b/openApiDocs/v1.0/Identity.DirectoryManagement.yml
index 63e05e7c0f..1316cc4dc6 100644
--- a/openApiDocs/v1.0/Identity.DirectoryManagement.yml
+++ b/openApiDocs/v1.0/Identity.DirectoryManagement.yml
@@ -13028,6 +13028,750 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
+  /directory/recovery:
+    get:
+      tags:
+        - directory.recovery
+      summary: Get recovery from directory
+      operationId: directory_GetRecovery
+      parameters:
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recovery'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - directory.recovery
+      summary: Update the navigation property recovery in directory
+      operationId: directory_UpdateRecovery
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recovery'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recovery'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - directory.recovery
+      summary: Delete navigation property recovery for directory
+      operationId: directory_DeleteRecovery
+      parameters:
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  /directory/recovery/jobs:
+    get:
+      tags:
+        - directory.recovery
+      summary: Get jobs from directory
+      operationId: directory.recovery_ListJob
+      parameters:
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.entraRecoveryServices.recoveryJobBaseCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - directory.recovery
+      summary: Create new navigation property to jobs for directory
+      operationId: directory.recovery_CreateJob
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/jobs/{recoveryJobBase-id}':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get jobs from directory
+      operationId: directory.recovery_GetJob
+      parameters:
+        - name: recoveryJobBase-id
+          in: path
+          description: The unique identifier of recoveryJobBase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: recoveryJobBase
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - directory.recovery
+      summary: Update the navigation property jobs in directory
+      operationId: directory.recovery_UpdateJob
+      parameters:
+        - name: recoveryJobBase-id
+          in: path
+          description: The unique identifier of recoveryJobBase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: recoveryJobBase
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - directory.recovery
+      summary: Delete navigation property jobs for directory
+      operationId: directory.recovery_DeleteJob
+      parameters:
+        - name: recoveryJobBase-id
+          in: path
+          description: The unique identifier of recoveryJobBase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: recoveryJobBase
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/jobs/{recoveryJobBase-id}/microsoft.graph.entraRecoveryServices.cancel':
+    post:
+      tags:
+        - directory.recovery
+      summary: Invoke action cancel
+      operationId: directory.recovery.job_cancel
+      parameters:
+        - name: recoveryJobBase-id
+          in: path
+          description: The unique identifier of recoveryJobBase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: recoveryJobBase
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  /directory/recovery/jobs/$count:
+    get:
+      tags:
+        - directory.recovery
+      summary: Get the number of the resource
+      operationId: directory.recovery.job_GetCount
+      parameters:
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  /directory/recovery/snapshots:
+    get:
+      tags:
+        - directory.recovery
+      summary: Get snapshots from directory
+      operationId: directory.recovery_ListSnapshot
+      parameters:
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.entraRecoveryServices.snapshotCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - directory.recovery
+      summary: Create new navigation property to snapshots for directory
+      operationId: directory.recovery_CreateSnapshot
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshot'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshot'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/snapshots/{snapshot-id}':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get snapshots from directory
+      operationId: directory.recovery_GetSnapshot
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshot'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - directory.recovery
+      summary: Update the navigation property snapshots in directory
+      operationId: directory.recovery_UpdateSnapshot
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshot'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshot'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - directory.recovery
+      summary: Delete navigation property snapshots for directory
+      operationId: directory.recovery_DeleteSnapshot
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/snapshots/{snapshot-id}/recoveryJobs':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get recoveryJobs from directory
+      operationId: directory.recovery.snapshot_ListRecoveryJob
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.entraRecoveryServices.recoveryJobCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/snapshots/{snapshot-id}/recoveryJobs/{recoveryJob-id}':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get recoveryJobs from directory
+      operationId: directory.recovery.snapshot_GetRecoveryJob
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - name: recoveryJob-id
+          in: path
+          description: The unique identifier of recoveryJob
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: recoveryJob
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJob'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/snapshots/{snapshot-id}/recoveryJobs/$count':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get the number of the resource
+      operationId: directory.recovery.snapshot.recoveryJob_GetCount
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/directory/recovery/snapshots/{snapshot-id}/recoveryPreviewJobs':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get recoveryPreviewJobs from directory
+      operationId: directory.recovery.snapshot_ListRecoveryPreviewJob
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.entraRecoveryServices.recoveryPreviewJobCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/snapshots/{snapshot-id}/recoveryPreviewJobs/{recoveryPreviewJob-id}':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get recoveryPreviewJobs from directory
+      operationId: directory.recovery.snapshot_GetRecoveryPreviewJob
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - name: recoveryPreviewJob-id
+          in: path
+          description: The unique identifier of recoveryPreviewJob
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: recoveryPreviewJob
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryPreviewJob'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/directory/recovery/snapshots/{snapshot-id}/recoveryPreviewJobs/$count':
+    get:
+      tags:
+        - directory.recovery
+      summary: Get the number of the resource
+      operationId: directory.recovery.snapshot.recoveryPreviewJob_GetCount
+      parameters:
+        - name: snapshot-id
+          in: path
+          description: The unique identifier of snapshot
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: snapshot
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  /directory/recovery/snapshots/$count:
+    get:
+      tags:
+        - directory.recovery
+      summary: Get the number of the resource
+      operationId: directory.recovery.snapshot_GetCount
+      parameters:
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
   /directory/subscriptions:
     get:
       tags:
@@ -21217,6 +21961,9 @@ components:
               type: string
               description: 'Identifies a profileCardProperty resource in Get, Update, or Delete operations. Allows an administrator to surface hidden Microsoft Entra ID properties on the Microsoft 365 profile card within their tenant. When present, the Microsoft Entra ID field referenced in this property is visible to all users in your tenant on the contact pane of the profile card. Allowed values for this field are: UserPrincipalName, Fax, StreetAddress, PostalCode, StateOrProvince, Alias, CustomAttribute1,  CustomAttribute2, CustomAttribute3, CustomAttribute4, CustomAttribute5, CustomAttribute6, CustomAttribute7, CustomAttribute8, CustomAttribute9, CustomAttribute10, CustomAttribute11, CustomAttribute12, CustomAttribute13, CustomAttribute14, CustomAttribute15.'
               nullable: true
+            isVisible:
+              type: boolean
+              description: Indicates whether the given directory property should be shown on a user’s profile card.
           additionalProperties:
             type: object
     microsoft.graph.profilePropertySetting:
@@ -21403,7 +22150,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -21430,7 +22177,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -21577,7 +22324,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -21599,7 +22346,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -21632,7 +22379,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -21730,7 +22477,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -21987,7 +22734,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.administrativeUnit:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.directoryObject'
@@ -22048,6 +22794,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -22056,7 +22804,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -22119,6 +22867,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -22153,6 +22905,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -22230,11 +22984,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -22381,7 +23149,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -22995,6 +23762,8 @@ components:
               x-ms-navigationProperty: true
             publicKeyInfrastructure:
               $ref: '#/components/schemas/microsoft.graph.publicKeyInfrastructureRoot'
+            recovery:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recovery'
             subscriptions:
               type: array
               items:
@@ -23440,6 +24209,122 @@ components:
               description: 'The thumbprint of certificate authority certificate. Supports $filter (eq, startswith).'
           additionalProperties:
             type: object
+    microsoft.graph.entraRecoveryServices.recovery:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: recovery
+          type: object
+          properties:
+            jobs:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+              x-ms-navigationProperty: true
+            snapshots:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshot'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
+    microsoft.graph.entraRecoveryServices.recoveryJobBase:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: recoveryJobBase
+          type: object
+          properties:
+            filteringCriteria:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobFilteringCriteriaBase'
+            jobCompletionDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+              nullable: true
+            jobStartDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+            status:
+              $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryStatus'
+            targetStateDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+            totalChangedLinksCalculated:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              format: int32
+              nullable: true
+            totalChangedObjectsCalculated:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              format: int32
+              nullable: true
+          additionalProperties:
+            type: object
+    microsoft.graph.entraRecoveryServices.snapshot:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: snapshot
+          type: object
+          properties:
+            createdDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              format: date-time
+            totalChangedObjects:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              format: int32
+              nullable: true
+            recoveryJobs:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJob'
+              x-ms-navigationProperty: true
+            recoveryPreviewJobs:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryPreviewJob'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
+    microsoft.graph.entraRecoveryServices.recoveryJob:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        - title: recoveryJob
+          type: object
+          properties:
+            totalFailedChanges:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              format: int32
+              nullable: true
+            totalLinksModified:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              format: int32
+              nullable: true
+            totalObjectsModified:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              format: int32
+              nullable: true
+          additionalProperties:
+            type: object
+    microsoft.graph.entraRecoveryServices.recoveryPreviewJob:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        - title: recoveryPreviewJob
+          type: object
+          additionalProperties:
+            type: object
     microsoft.graph.companySubscription:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -23520,7 +24405,7 @@ components:
               nullable: true
             roleTemplateId:
               type: string
-              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read only. Supports $filter (eq), $select.'
+              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read-only. Supports $filter (eq), $select.'
               nullable: true
             members:
               type: array
@@ -26303,7 +27188,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -26583,6 +27467,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -27097,6 +27990,7 @@ components:
             subject:
               type: string
               description: 'Required. The identifier of the external software workload within the external identity provider. Like the audience value, it has no fixed format; each identity provider uses their own - sometimes a GUID, sometimes a colon delimited identifier, sometimes arbitrary strings. The value here must match the sub claim within the token presented to Microsoft Entra ID. The combination of issuer and subject must be unique within the app. It has a limit of 600 characters. Supports $filter (eq).'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.homeRealmDiscoveryPolicy:
@@ -27443,6 +28337,7 @@ components:
       properties:
         allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled:
           type: boolean
+          description: 'When true, allows on-premises directory sync clients to update the onPremisesObjectIdentifier property.'
           nullable: true
         blockCloudObjectTakeoverThroughHardMatchEnabled:
           type: boolean
@@ -27529,6 +28424,51 @@ components:
         - intermediate
         - unknownFutureValue
       type: string
+    microsoft.graph.entraRecoveryServices.recoveryJobFilteringCriteriaBase:
+      title: recoveryJobFilteringCriteriaBase
+      type: object
+      additionalProperties:
+        type: object
+    microsoft.graph.entraRecoveryServices.recoveryStatus:
+      title: recoveryStatus
+      enum:
+        - initialized
+        - running
+        - successful
+        - failed
+        - abandoned
+        - unknownFutureValue
+        - calculating
+        - loadingData
+      type: string
+      x-ms-enum:
+        name: recoveryStatus
+        modelAsString: false
+        values:
+          - value: initialized
+            description: Represents a job that has been initialized but has not been started yet
+            name: initialized
+          - value: running
+            description: Represents a job that is in progress
+            name: running
+          - value: successful
+            description: Represents a job that ran successfully and is now complete
+            name: successful
+          - value: failed
+            description: Represents a job that we were not able to run successfully
+            name: failed
+          - value: abandoned
+            description: Represents a job that was abandoned by the user
+            name: abandoned
+          - value: unknownFutureValue
+            description: This will help in making this enum evolable and adding more values in the future-
+            name: unknownFutureValue
+          - value: calculating
+            description: Represents a job for which we have started calculating the diff/preview.
+            name: calculating
+          - value: loadingData
+            description: Represents a job for which we have started loading data of the snapshot.
+            name: loadingData
     microsoft.graph.servicePlanInfo:
       title: servicePlanInfo
       type: object
@@ -28246,6 +29186,58 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.entraRecoveryServices.recoveryJobBaseCollectionResponse:
+      title: Collection of recoveryJobBase
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBase'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.entraRecoveryServices.snapshotCollectionResponse:
+      title: Collection of snapshot
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshot'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.entraRecoveryServices.recoveryJobCollectionResponse:
+      title: Collection of recoveryJob
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJob'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.entraRecoveryServices.recoveryPreviewJobCollectionResponse:
+      title: Collection of recoveryPreviewJob
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryPreviewJob'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.companySubscriptionCollectionResponse:
       title: Collection of companySubscription
       type: object
@@ -28507,6 +29499,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -29376,7 +30369,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -29392,13 +30385,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -29862,6 +30855,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -30473,7 +31471,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -30642,7 +31640,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -34274,6 +35272,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -42860,6 +43863,30 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.certificateAuthorityDetailCollectionResponse'
+    microsoft.graph.entraRecoveryServices.recoveryJobBaseCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobBaseCollectionResponse'
+    microsoft.graph.entraRecoveryServices.snapshotCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.snapshotCollectionResponse'
+    microsoft.graph.entraRecoveryServices.recoveryJobCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryJobCollectionResponse'
+    microsoft.graph.entraRecoveryServices.recoveryPreviewJobCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.entraRecoveryServices.recoveryPreviewJobCollectionResponse'
     microsoft.graph.companySubscriptionCollectionResponse:
       description: Retrieved collection
       content:
diff --git a/openApiDocs/v1.0/Identity.Governance.yml b/openApiDocs/v1.0/Identity.Governance.yml
index 9f7151b89c..15830af5d8 100644
--- a/openApiDocs/v1.0/Identity.Governance.yml
+++ b/openApiDocs/v1.0/Identity.Governance.yml
@@ -3061,7 +3061,7 @@ paths:
       tags:
         - identityGovernance.accessReviewSet
       summary: Invoke function filterByCurrentUser
-      description: 'Retrieve all decision items for an instance of an access review or a stage of an instance of a multi-stage access review, for which the calling user is the reviewer. The decision items are represented by accessReviewInstanceDecisionItem objects on a given accessReviewInstance or accessReviewStage for which the calling user is the reviewer.'
+      description: Retrieve all decision items for an instance of an access review or a stage of an instance of a multi-stage access review for which the calling user is the reviewer. The decision items are presented as accessReviewInstanceDecisionItem objects on a given accessReviewInstance or accessReviewStage for which the calling user is the reviewer.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/accessreviewinstancedecisionitem-filterbycurrentuser?view=graph-rest-1.0
@@ -3220,7 +3220,7 @@ paths:
       tags:
         - identityGovernance.accessReviewSet
       summary: Invoke action batchRecordDecisions
-      description: 'Enables reviewers to review all accessReviewInstanceDecisionItem objects in batches by using principalId, resourceId, or neither.'
+      description: 'Enables reviewers to review all accessReviewInstanceDecisionItem objects in a specific accessReviewInstance in batches by using principalId, resourceId, or neither.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/accessreviewinstance-batchrecorddecisions?view=graph-rest-1.0
@@ -3374,7 +3374,7 @@ paths:
       tags:
         - identityGovernance.accessReviewSet
       summary: List stages (of an access review)
-      description: Retrieve the stages in a multi-stage access review instance.
+      description: Retrieve the accessReviewStage objects for a specific accessReviewInstance in a multi-stage access review.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/accessreviewinstance-list-stages?view=graph-rest-1.0
@@ -3642,7 +3642,7 @@ paths:
       tags:
         - identityGovernance.accessReviewSet
       summary: List decisions (from a multi-stage access review)
-      description: Get the decisions from a stage in a multi-stage access review. The decisions in an accessReviewStage object are represented by an accessReviewInstanceDecisionItem object.
+      description: Get the accessReviewInstanceDecisionItem objects from an accessReviewStage in a multi-stage access review.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/accessreviewstage-list-decisions?view=graph-rest-1.0
@@ -4372,7 +4372,7 @@ paths:
       tags:
         - identityGovernance.accessReviewSet
       summary: Invoke function filterByCurrentUser
-      description: 'Retrieve all decision items for an instance of an access review or a stage of an instance of a multi-stage access review, for which the calling user is the reviewer. The decision items are represented by accessReviewInstanceDecisionItem objects on a given accessReviewInstance or accessReviewStage for which the calling user is the reviewer.'
+      description: Retrieve all decision items for an instance of an access review or a stage of an instance of a multi-stage access review for which the calling user is the reviewer. The decision items are presented as accessReviewInstanceDecisionItem objects on a given accessReviewInstance or accessReviewStage for which the calling user is the reviewer.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/accessreviewinstancedecisionitem-filterbycurrentuser?view=graph-rest-1.0
@@ -8957,7 +8957,7 @@ paths:
       tags:
         - identityGovernance.entitlementManagement
       summary: Invoke action getApplicablePolicyRequirements
-      description: 'In Microsoft Entra entitlement management, this action retrieves a list of accessPackageAssignmentRequestRequirements objects that the currently signed-in user can use to create an accessPackageAssignmentRequest.  Each requirement object corresponds to an access package assignment policy that the currently signed-in user is allowed to request an assignment for.'
+      description: 'In Microsoft Entra entitlement management, this action retrieves accessPackageAssignmentRequestRequirements objects for an accessPackage that the currently signed-in user can use to create an accessPackageAssignmentRequest. Each requirement object corresponds to an access package assignment policy that the currently signed-in user is allowed to request an assignment for.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/accesspackage-getapplicablepolicyrequirements?view=graph-rest-1.0
@@ -12325,16 +12325,13 @@ paths:
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
-  /identityGovernance/entitlementManagement/assignmentPolicies:
+  /identityGovernance/entitlementManagement/accessPackageSuggestions:
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: List assignmentPolicies
-      description: 'Retrieve a list of accessPackageAssignmentPolicy objects in Microsoft Entra entitlement management. If the delegated user is in a directory role, the resulting list includes all the assignment policies that the caller has access to read, across all catalogs and access packages. If the delegated user is an access package manager or catalog owner, they should instead retrieve the policies for the access packages they can read with list accessPackages by including $expand=assignmentPolicies as a query parameter.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/entitlementmanagement-list-assignmentpolicies?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_ListAssignmentPolicy
+      summary: Get accessPackageSuggestions from identityGovernance
+      description: Suggested access packages for end users based on various criteria such as related people insights and assignment history.
+      operationId: identityGovernance.entitlementManagement_ListAccessPackageSuggestion
       parameters:
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
@@ -12373,7 +12370,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.accessPackageAssignmentPolicyCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.accessPackageSuggestionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -12383,18 +12380,14 @@ paths:
     post:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Create assignmentPolicies
-      description: 'Create a new accessPackageAssignmentPolicy object in Microsoft Entra entitlement management. The request includes a reference to the accessPackage that contains this policy, which must already exist.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/entitlementmanagement-post-assignmentpolicies?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_CreateAssignmentPolicy
+      summary: Create new navigation property to accessPackageSuggestions for identityGovernance
+      operationId: identityGovernance.entitlementManagement_CreateAccessPackageSuggestion
       requestBody:
         description: New navigation property
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
+              $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
         required: true
       responses:
         2XX:
@@ -12402,29 +12395,26 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}':
+  '/identityGovernance/entitlementManagement/accessPackageSuggestions/{accessPackageSuggestion-id}':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get accessPackageAssignmentPolicy
-      description: "In Microsoft Entra entitlement management, retrieve the properties and relationships of an\r\n accessPackageAssignmentPolicy object."
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackageassignmentpolicy-get?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_GetAssignmentPolicy
+      summary: Get accessPackageSuggestions from identityGovernance
+      description: Suggested access packages for end users based on various criteria such as related people insights and assignment history.
+      operationId: identityGovernance.entitlementManagement_GetAccessPackageSuggestion
       parameters:
-        - name: accessPackageAssignmentPolicy-id
+        - name: accessPackageSuggestion-id
           in: path
-          description: The unique identifier of accessPackageAssignmentPolicy
+          description: The unique identifier of accessPackageSuggestion
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageAssignmentPolicy
+          x-ms-docs-key-type: accessPackageSuggestion
         - name: $select
           in: query
           description: Select properties to be returned
@@ -12451,34 +12441,30 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-    put:
+    patch:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Update accessPackageAssignmentPolicy
-      description: 'Update an existing accessPackageAssignmentPolicy object to change one or more of its properties, such as the display name or description.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackageassignmentpolicy-update?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_SetAssignmentPolicy
+      summary: Update the navigation property accessPackageSuggestions in identityGovernance
+      operationId: identityGovernance.entitlementManagement_UpdateAccessPackageSuggestion
       parameters:
-        - name: accessPackageAssignmentPolicy-id
+        - name: accessPackageSuggestion-id
           in: path
-          description: The unique identifier of accessPackageAssignmentPolicy
+          description: The unique identifier of accessPackageSuggestion
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageAssignmentPolicy
+          x-ms-docs-key-type: accessPackageSuggestion
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
+              $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
         required: true
       responses:
         2XX:
@@ -12486,28 +12472,24 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Delete accessPackageAssignmentPolicy
-      description: 'In Microsoft Entra entitlement management, delete an accessPackageAssignmentPolicy.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackageassignmentpolicy-delete?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_DeleteAssignmentPolicy
+      summary: Delete navigation property accessPackageSuggestions for identityGovernance
+      operationId: identityGovernance.entitlementManagement_DeleteAccessPackageSuggestion
       parameters:
-        - name: accessPackageAssignmentPolicy-id
+        - name: accessPackageSuggestion-id
           in: path
-          description: The unique identifier of accessPackageAssignmentPolicy
+          description: The unique identifier of accessPackageSuggestion
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageAssignmentPolicy
+          x-ms-docs-key-type: accessPackageSuggestion
         - name: If-Match
           in: header
           description: ETag
@@ -12520,22 +12502,22 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/accessPackage':
+  '/identityGovernance/entitlementManagement/accessPackageSuggestions/{accessPackageSuggestion-id}/accessPackage':
     get:
       tags:
         - identityGovernance.entitlementManagement
       summary: Get accessPackage from identityGovernance
-      description: Access package containing this policy. Read-only. Supports $expand.
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy_GetAccessPackage
+      description: The access package information for the suggested package.
+      operationId: identityGovernance.entitlementManagement.accessPackageSuggestion_GetAccessPackage
       parameters:
-        - name: accessPackageAssignmentPolicy-id
+        - name: accessPackageSuggestion-id
           in: path
-          description: The unique identifier of accessPackageAssignmentPolicy
+          description: The unique identifier of accessPackageSuggestion
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageAssignmentPolicy
+          x-ms-docs-key-type: accessPackageSuggestion
         - name: $select
           in: query
           description: Select properties to be returned
@@ -12562,26 +12544,47 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackage'
+                $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/catalog':
+  /identityGovernance/entitlementManagement/accessPackageSuggestions/$count:
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get catalog from identityGovernance
-      description: Catalog of the access package containing this policy. Read-only.
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy_GetCatalog
+      summary: Get the number of the resource
+      operationId: identityGovernance.entitlementManagement.accessPackageSuggestion_GetCount
       parameters:
-        - name: accessPackageAssignmentPolicy-id
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/identityGovernance/entitlementManagement/accessPackageSuggestions/microsoft.graph.filterByCurrentUser(on=''{on}'')':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Invoke function filterByCurrentUser
+      description: Retrieve suggested accessPackageSuggestion objects for the current end user. This operation returns access packages that are suggested based on various criteria such as related people insights and the user's assignment history. The suggestions help end users discover relevant access packages they may need for their role or work context.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackagesuggestions-filterbycurrentuser?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.accessPackageSuggestion_filterGraphBPreCurrentUser
+      parameters:
+        - name: on
           in: path
-          description: The unique identifier of accessPackageAssignmentPolicy
+          description: 'Usage: on=''{on}'''
           required: true
           style: simple
           schema:
-            type: string
-          x-ms-docs-key-type: accessPackageAssignmentPolicy
+            $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestionFilterByCurrentUserOptions'
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
         - name: $select
           in: query
           description: Select properties to be returned
@@ -12592,6 +12595,16 @@ paths:
             type: array
             items:
               type: string
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
         - name: $expand
           in: query
           description: Expand related entities
@@ -12604,30 +12617,39 @@ paths:
               type: string
       responses:
         2XX:
-          description: Retrieved navigation property
+          description: Success
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
+                title: Collection of accessPackageSuggestion
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/customExtensionStageSettings':
+      x-ms-docs-operation-type: function
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  /identityGovernance/entitlementManagement/assignmentPolicies:
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get customExtensionStageSettings from identityGovernance
-      description: The collection of stages when to execute one or more custom access package workflow extensions. Supports $expand.
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy_ListCustomExtensionStageSetting
+      summary: List assignmentPolicies
+      description: 'Retrieve a list of accessPackageAssignmentPolicy objects in Microsoft Entra entitlement management. If the delegated user is in a directory role, the resulting list includes all the assignment policies that the caller has access to read, across all catalogs and access packages. If the delegated user is an access package manager or catalog owner, they should instead retrieve the policies for the access packages they can read with list accessPackages by including $expand=assignmentPolicies as a query parameter.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/entitlementmanagement-list-assignmentpolicies?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_ListAssignmentPolicy
       parameters:
-        - name: accessPackageAssignmentPolicy-id
-          in: path
-          description: The unique identifier of accessPackageAssignmentPolicy
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: accessPackageAssignmentPolicy
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
         - $ref: '#/components/parameters/search'
@@ -12665,7 +12687,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.customExtensionStageSettingCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.accessPackageAssignmentPolicyCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -12675,23 +12697,18 @@ paths:
     post:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Create new navigation property to customExtensionStageSettings for identityGovernance
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy_CreateCustomExtensionStageSetting
-      parameters:
-        - name: accessPackageAssignmentPolicy-id
-          in: path
-          description: The unique identifier of accessPackageAssignmentPolicy
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: accessPackageAssignmentPolicy
+      summary: Create assignmentPolicies
+      description: 'Create a new accessPackageAssignmentPolicy object in Microsoft Entra entitlement management. The request includes a reference to the accessPackage that contains this policy, which must already exist.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/entitlementmanagement-post-assignmentpolicies?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_CreateAssignmentPolicy
       requestBody:
         description: New navigation property
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+              $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
         required: true
       responses:
         2XX:
@@ -12699,17 +12716,20 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/customExtensionStageSettings/{customExtensionStageSetting-id}':
+  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get customExtensionStageSettings from identityGovernance
-      description: The collection of stages when to execute one or more custom access package workflow extensions. Supports $expand.
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy_GetCustomExtensionStageSetting
+      summary: Get accessPackageAssignmentPolicy
+      description: "In Microsoft Entra entitlement management, retrieve the properties and relationships of an\r\n accessPackageAssignmentPolicy object."
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackageassignmentpolicy-get?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_GetAssignmentPolicy
       parameters:
         - name: accessPackageAssignmentPolicy-id
           in: path
@@ -12719,14 +12739,6 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageAssignmentPolicy
-        - name: customExtensionStageSetting-id
-          in: path
-          description: The unique identifier of customExtensionStageSetting
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: customExtensionStageSetting
         - name: $select
           in: query
           description: Select properties to be returned
@@ -12753,15 +12765,19 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-    patch:
+    put:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Update the navigation property customExtensionStageSettings in identityGovernance
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy_UpdateCustomExtensionStageSetting
+      summary: Update accessPackageAssignmentPolicy
+      description: 'Update an existing accessPackageAssignmentPolicy object to change one or more of its properties, such as the display name or description.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackageassignmentpolicy-update?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_SetAssignmentPolicy
       parameters:
         - name: accessPackageAssignmentPolicy-id
           in: path
@@ -12771,20 +12787,12 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageAssignmentPolicy
-        - name: customExtensionStageSetting-id
-          in: path
-          description: The unique identifier of customExtensionStageSetting
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: customExtensionStageSetting
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+              $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
         required: true
       responses:
         2XX:
@@ -12792,15 +12800,19 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Delete navigation property customExtensionStageSettings for identityGovernance
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy_DeleteCustomExtensionStageSetting
+      summary: Delete accessPackageAssignmentPolicy
+      description: 'In Microsoft Entra entitlement management, delete an accessPackageAssignmentPolicy.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackageassignmentpolicy-delete?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_DeleteAssignmentPolicy
       parameters:
         - name: accessPackageAssignmentPolicy-id
           in: path
@@ -12810,14 +12822,6 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageAssignmentPolicy
-        - name: customExtensionStageSetting-id
-          in: path
-          description: The unique identifier of customExtensionStageSetting
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: customExtensionStageSetting
         - name: If-Match
           in: header
           description: ETag
@@ -12830,13 +12834,13 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/customExtensionStageSettings/{customExtensionStageSetting-id}/customExtension':
+  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/accessPackage':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get customExtension from identityGovernance
-      description: Indicates the custom workflow extension that will be executed at this stage. Nullable. Supports $expand.
-      operationId: identityGovernance.entitlementManagement.assignmentPolicy.customExtensionStageSetting_GetCustomExtension
+      summary: Get accessPackage from identityGovernance
+      description: Access package containing this policy. Read-only. Supports $expand.
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy_GetAccessPackage
       parameters:
         - name: accessPackageAssignmentPolicy-id
           in: path
@@ -12846,14 +12850,324 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageAssignmentPolicy
-        - name: customExtensionStageSetting-id
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.accessPackage'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/catalog':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get catalog from identityGovernance
+      description: Catalog of the access package containing this policy. Read-only.
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy_GetCatalog
+      parameters:
+        - name: accessPackageAssignmentPolicy-id
           in: path
-          description: The unique identifier of customExtensionStageSetting
+          description: The unique identifier of accessPackageAssignmentPolicy
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: customExtensionStageSetting
+          x-ms-docs-key-type: accessPackageAssignmentPolicy
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/customExtensionStageSettings':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get customExtensionStageSettings from identityGovernance
+      description: The collection of stages when to execute one or more custom access package workflow extensions. Supports $expand.
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy_ListCustomExtensionStageSetting
+      parameters:
+        - name: accessPackageAssignmentPolicy-id
+          in: path
+          description: The unique identifier of accessPackageAssignmentPolicy
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageAssignmentPolicy
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.customExtensionStageSettingCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Create new navigation property to customExtensionStageSettings for identityGovernance
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy_CreateCustomExtensionStageSetting
+      parameters:
+        - name: accessPackageAssignmentPolicy-id
+          in: path
+          description: The unique identifier of accessPackageAssignmentPolicy
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageAssignmentPolicy
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/customExtensionStageSettings/{customExtensionStageSetting-id}':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get customExtensionStageSettings from identityGovernance
+      description: The collection of stages when to execute one or more custom access package workflow extensions. Supports $expand.
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy_GetCustomExtensionStageSetting
+      parameters:
+        - name: accessPackageAssignmentPolicy-id
+          in: path
+          description: The unique identifier of accessPackageAssignmentPolicy
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageAssignmentPolicy
+        - name: customExtensionStageSetting-id
+          in: path
+          description: The unique identifier of customExtensionStageSetting
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: customExtensionStageSetting
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Update the navigation property customExtensionStageSettings in identityGovernance
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy_UpdateCustomExtensionStageSetting
+      parameters:
+        - name: accessPackageAssignmentPolicy-id
+          in: path
+          description: The unique identifier of accessPackageAssignmentPolicy
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageAssignmentPolicy
+        - name: customExtensionStageSetting-id
+          in: path
+          description: The unique identifier of customExtensionStageSetting
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: customExtensionStageSetting
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.customExtensionStageSetting'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Delete navigation property customExtensionStageSettings for identityGovernance
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy_DeleteCustomExtensionStageSetting
+      parameters:
+        - name: accessPackageAssignmentPolicy-id
+          in: path
+          description: The unique identifier of accessPackageAssignmentPolicy
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageAssignmentPolicy
+        - name: customExtensionStageSetting-id
+          in: path
+          description: The unique identifier of customExtensionStageSetting
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: customExtensionStageSetting
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/assignmentPolicies/{accessPackageAssignmentPolicy-id}/customExtensionStageSettings/{customExtensionStageSetting-id}/customExtension':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get customExtension from identityGovernance
+      description: Indicates the custom workflow extension that will be executed at this stage. Nullable. Supports $expand.
+      operationId: identityGovernance.entitlementManagement.assignmentPolicy.customExtensionStageSetting_GetCustomExtension
+      parameters:
+        - name: accessPackageAssignmentPolicy-id
+          in: path
+          description: The unique identifier of accessPackageAssignmentPolicy
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageAssignmentPolicy
+        - name: customExtensionStageSetting-id
+          in: path
+          description: The unique identifier of customExtensionStageSetting
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: customExtensionStageSetting
         - name: $select
           in: query
           description: Select properties to be returned
@@ -14262,16 +14576,13 @@ paths:
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
-  /identityGovernance/entitlementManagement/catalogs:
+  /identityGovernance/entitlementManagement/availableAccessPackages:
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: List catalogs
-      description: Retrieve a list of accessPackageCatalog objects.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/entitlementmanagement-list-catalogs?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_ListCatalog
+      summary: Get availableAccessPackages from identityGovernance
+      description: Access packages available for end users to browse and request.
+      operationId: identityGovernance.entitlementManagement_ListAvailableAccessPackage
       parameters:
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
@@ -14310,7 +14621,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.accessPackageCatalogCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.availableAccessPackageCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -14320,18 +14631,14 @@ paths:
     post:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Create accessPackageCatalog
-      description: Create a new accessPackageCatalog object.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/entitlementmanagement-post-catalogs?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_CreateCatalog
+      summary: Create new navigation property to availableAccessPackages for identityGovernance
+      operationId: identityGovernance.entitlementManagement_CreateAvailableAccessPackage
       requestBody:
         description: New navigation property
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
+              $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
         required: true
       responses:
         2XX:
@@ -14339,29 +14646,26 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
+                $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}':
+  '/identityGovernance/entitlementManagement/availableAccessPackages/{availableAccessPackage-id}':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get accessPackageCatalog
-      description: Retrieve the properties and relationships of an accessPackageCatalog object.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-get?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_GetCatalog
+      summary: Get availableAccessPackages from identityGovernance
+      description: Access packages available for end users to browse and request.
+      operationId: identityGovernance.entitlementManagement_GetAvailableAccessPackage
       parameters:
-        - name: accessPackageCatalog-id
+        - name: availableAccessPackage-id
           in: path
-          description: The unique identifier of accessPackageCatalog
+          description: The unique identifier of availableAccessPackage
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageCatalog
+          x-ms-docs-key-type: availableAccessPackage
         - name: $select
           in: query
           description: Select properties to be returned
@@ -14388,34 +14692,30 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
+                $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Update accessPackageCatalog
-      description: 'Update an existing accessPackageCatalog object to change one or more of its properties, such as the display name or description.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-update?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_UpdateCatalog
+      summary: Update the navigation property availableAccessPackages in identityGovernance
+      operationId: identityGovernance.entitlementManagement_UpdateAvailableAccessPackage
       parameters:
-        - name: accessPackageCatalog-id
+        - name: availableAccessPackage-id
           in: path
-          description: The unique identifier of accessPackageCatalog
+          description: The unique identifier of availableAccessPackage
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageCatalog
+          x-ms-docs-key-type: availableAccessPackage
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
+              $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
         required: true
       responses:
         2XX:
@@ -14423,28 +14723,24 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
+                $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Delete accessPackageCatalog
-      description: Delete an accessPackageCatalog.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-delete?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement_DeleteCatalog
+      summary: Delete navigation property availableAccessPackages for identityGovernance
+      operationId: identityGovernance.entitlementManagement_DeleteAvailableAccessPackage
       parameters:
-        - name: accessPackageCatalog-id
+        - name: availableAccessPackage-id
           in: path
-          description: The unique identifier of accessPackageCatalog
+          description: The unique identifier of availableAccessPackage
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageCatalog
+          x-ms-docs-key-type: availableAccessPackage
         - name: If-Match
           in: header
           description: ETag
@@ -14457,22 +14753,25 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/accessPackages':
+  '/identityGovernance/entitlementManagement/availableAccessPackages/{availableAccessPackage-id}/resourceRoleScopes':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get accessPackages from identityGovernance
-      description: The access packages in this catalog. Read-only. Nullable.
-      operationId: identityGovernance.entitlementManagement.catalog_ListAccessPackage
+      summary: List resourceRoleScopes
+      description: Get a list of the accessPackageResourceRoleScope objects associated with an availableAccessPackage.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/availableaccesspackage-list-resourcerolescopes?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.availableAccessPackage_ListResourceRoleScope
       parameters:
-        - name: accessPackageCatalog-id
+        - name: availableAccessPackage-id
           in: path
-          description: The unique identifier of accessPackageCatalog
+          description: The unique identifier of availableAccessPackage
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageCatalog
+          x-ms-docs-key-type: availableAccessPackage
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
         - $ref: '#/components/parameters/search'
@@ -14510,37 +14809,37 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.accessPackageCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.accessPackageResourceRoleScopeCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/accessPackages/{accessPackage-id}':
+  '/identityGovernance/entitlementManagement/availableAccessPackages/{availableAccessPackage-id}/resourceRoleScopes/{accessPackageResourceRoleScope-id}':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get accessPackages from identityGovernance
-      description: The access packages in this catalog. Read-only. Nullable.
-      operationId: identityGovernance.entitlementManagement.catalog_GetAccessPackage
+      summary: Get resourceRoleScopes from identityGovernance
+      description: The resource role scopes associated with this available access package.
+      operationId: identityGovernance.entitlementManagement.availableAccessPackage_GetResourceRoleScope
       parameters:
-        - name: accessPackageCatalog-id
+        - name: availableAccessPackage-id
           in: path
-          description: The unique identifier of accessPackageCatalog
+          description: The unique identifier of availableAccessPackage
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageCatalog
-        - name: accessPackage-id
+          x-ms-docs-key-type: availableAccessPackage
+        - name: accessPackageResourceRoleScope-id
           in: path
-          description: The unique identifier of accessPackage
+          description: The unique identifier of accessPackageResourceRoleScope
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackage
+          x-ms-docs-key-type: accessPackageResourceRoleScope
         - name: $select
           in: query
           description: Select properties to be returned
@@ -14567,25 +14866,25 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.accessPackage'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageResourceRoleScope'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/accessPackages/$count':
+  '/identityGovernance/entitlementManagement/availableAccessPackages/{availableAccessPackage-id}/resourceRoleScopes/$count':
     get:
       tags:
         - identityGovernance.entitlementManagement
       summary: Get the number of the resource
-      operationId: identityGovernance.entitlementManagement.catalog.accessPackage_GetCount
+      operationId: identityGovernance.entitlementManagement.availableAccessPackage.resourceRoleScope_GetCount
       parameters:
-        - name: accessPackageCatalog-id
+        - name: availableAccessPackage-id
           in: path
-          description: The unique identifier of accessPackageCatalog
+          description: The unique identifier of availableAccessPackage
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: accessPackageCatalog
+          x-ms-docs-key-type: availableAccessPackage
         - $ref: '#/components/parameters/search'
         - $ref: '#/components/parameters/filter'
       responses:
@@ -14593,25 +14892,31 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions':
+  /identityGovernance/entitlementManagement/availableAccessPackages/$count:
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: List accessPackageCustomWorkflowExtensions
-      description: Get a list of the accessPackageAssignmentRequestWorkflowExtension and accessPackageAssignmentWorkflowExtension objects and their properties. The resulting list includes all the customAccessPackageWorkflowExtension objects for the catalog that the caller has access to read. Each object includes an @odata.type property that indicates whether the object is an  accessPackageAssignmentRequestWorkflowExtension or an accessPackageAssignmentWorkflowExtension.
+      summary: Get the number of the resource
+      operationId: identityGovernance.entitlementManagement.availableAccessPackage_GetCount
+      parameters:
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  /identityGovernance/entitlementManagement/catalogs:
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: List catalogs
+      description: Retrieve a list of accessPackageCatalog objects.
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-list-accesspackagecustomworkflowextensions?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement.catalog_ListCustomWorkflowExtension
+        url: https://learn.microsoft.com/graph/api/entitlementmanagement-list-catalogs?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_ListCatalog
       parameters:
-        - name: accessPackageCatalog-id
-          in: path
-          description: The unique identifier of accessPackageCatalog
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: accessPackageCatalog
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
         - $ref: '#/components/parameters/search'
@@ -14649,7 +14954,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.customCalloutExtensionCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.accessPackageCatalogCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -14659,27 +14964,18 @@ paths:
     post:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Create accessPackageCustomWorkflowExtension
-      description: Create a new accessPackageAssignmentRequestWorkflowExtension or accessPackageAssignmentWorkflowExtension object and add it to an existing accessPackageCatalog object. You must explicitly provide an @odata.type property that indicates whether the object is an  accessPackageAssignmentRequestWorkflowExtension or an accessPackageAssignmentWorkflowExtension.
+      summary: Create accessPackageCatalog
+      description: Create a new accessPackageCatalog object.
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-post-accesspackagecustomworkflowextensions?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement.catalog_CreateCustomWorkflowExtension
-      parameters:
-        - name: accessPackageCatalog-id
-          in: path
-          description: The unique identifier of accessPackageCatalog
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: accessPackageCatalog
+        url: https://learn.microsoft.com/graph/api/entitlementmanagement-post-catalogs?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_CreateCatalog
       requestBody:
         description: New navigation property
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+              $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
         required: true
       responses:
         2XX:
@@ -14687,20 +14983,20 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}':
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get accessPackageAssignmentRequestWorkflowExtension
-      description: Read the properties and relationships of an accessPackageAssignmentRequestWorkflowExtension object.
+      summary: Get accessPackageCatalog
+      description: Retrieve the properties and relationships of an accessPackageCatalog object.
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackageassignmentrequestworkflowextension-get?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement.catalog_GetCustomWorkflowExtension
+        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-get?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_GetCatalog
       parameters:
         - name: accessPackageCatalog-id
           in: path
@@ -14710,14 +15006,6 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageCatalog
-        - name: customCalloutExtension-id
-          in: path
-          description: The unique identifier of customCalloutExtension
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: customCalloutExtension
         - name: $select
           in: query
           description: Select properties to be returned
@@ -14744,19 +15032,19 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Update accessPackageAssignmentRequestWorkflowExtension
-      description: Update the properties of an accessPackageAssignmentRequestWorkflowExtension object.
+      summary: Update accessPackageCatalog
+      description: 'Update an existing accessPackageCatalog object to change one or more of its properties, such as the display name or description.'
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackageassignmentrequestworkflowextension-update?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement.catalog_UpdateCustomWorkflowExtension
+        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-update?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_UpdateCatalog
       parameters:
         - name: accessPackageCatalog-id
           in: path
@@ -14766,20 +15054,12 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageCatalog
-        - name: customCalloutExtension-id
-          in: path
-          description: The unique identifier of customCalloutExtension
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: customCalloutExtension
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+              $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
         required: true
       responses:
         2XX:
@@ -14787,19 +15067,19 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+                $ref: '#/components/schemas/microsoft.graph.accessPackageCatalog'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Delete accessPackageAssignmentRequestWorkflowExtension
-      description: 'Delete an accessPackageAssignmentRequestWorkflowExtension object. The custom workflow extension must first be removed from any associated policies before it can be deleted. Follow these steps to remove the custom workflow extension from any associated policies:'
+      summary: Delete accessPackageCatalog
+      description: Delete an accessPackageCatalog.
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackageassignmentrequestworkflowextension-delete?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement.catalog_DeleteCustomWorkflowExtension
+        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-delete?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement_DeleteCatalog
       parameters:
         - name: accessPackageCatalog-id
           in: path
@@ -14809,14 +15089,6 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageCatalog
-        - name: customCalloutExtension-id
-          in: path
-          description: The unique identifier of customCalloutExtension
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: customCalloutExtension
         - name: If-Match
           in: header
           description: ETag
@@ -14829,12 +15101,13 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/$count':
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/accessPackages':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get the number of the resource
-      operationId: identityGovernance.entitlementManagement.catalog.customWorkflowExtension_GetCount
+      summary: Get accessPackages from identityGovernance
+      description: The access packages in this catalog. Read-only. Nullable.
+      operationId: identityGovernance.entitlementManagement.catalog_ListAccessPackage
       parameters:
         - name: accessPackageCatalog-id
           in: path
@@ -14844,23 +15117,57 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageCatalog
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
         - $ref: '#/components/parameters/search'
         - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
       responses:
         2XX:
-          $ref: '#/components/responses/ODataCountResponse'
+          $ref: '#/components/responses/microsoft.graph.accessPackageCollectionResponse'
         default:
           $ref: '#/components/responses/error'
-  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/resourceRoles':
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/accessPackages/{accessPackage-id}':
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: List resourceRoles
-      description: 'Retrieve a list of accessPackageResourceRole objects of an accessPackageResource in an accessPackageCatalog. The resource should have been added to the catalog by creating an accessPackageResourceRequest. This list of roles can then be used by the caller to select a role, which is needed when subsequently creating an accessPackageResourceRoleScope.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-list-resourceroles?view=graph-rest-1.0
-      operationId: identityGovernance.entitlementManagement.catalog_ListResourceRole
+      summary: Get accessPackages from identityGovernance
+      description: The access packages in this catalog. Read-only. Nullable.
+      operationId: identityGovernance.entitlementManagement.catalog_GetAccessPackage
       parameters:
         - name: accessPackageCatalog-id
           in: path
@@ -14870,21 +15177,358 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: accessPackageCatalog
-        - $ref: '#/components/parameters/top'
-        - $ref: '#/components/parameters/skip'
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
-        - $ref: '#/components/parameters/count'
-        - name: $orderby
-          in: query
-          description: Order items by property values
-          style: form
-          explode: false
+        - name: accessPackage-id
+          in: path
+          description: The unique identifier of accessPackage
+          required: true
+          style: simple
           schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
+            type: string
+          x-ms-docs-key-type: accessPackage
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.accessPackage'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/accessPackages/$count':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get the number of the resource
+      operationId: identityGovernance.entitlementManagement.catalog.accessPackage_GetCount
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: List accessPackageCustomWorkflowExtensions
+      description: List the accessPackageAssignmentRequestWorkflowExtension and accessPackageAssignmentWorkflowExtension objects in the accessPackageCustomWorkflowExtensions relationship of an accessPackageCatalog. The resulting list includes all the customAccessPackageWorkflowExtension objects for the catalog that the caller has access to read. Each object includes an @odata.type property that indicates whether the object is an accessPackageAssignmentRequestWorkflowExtension or an accessPackageAssignmentWorkflowExtension.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-list-accesspackagecustomworkflowextensions?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.catalog_ListCustomWorkflowExtension
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.customCalloutExtensionCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Create accessPackageCustomWorkflowExtension
+      description: Create a new accessPackageAssignmentRequestWorkflowExtension or accessPackageAssignmentWorkflowExtension object in the accessPackageCustomWorkflowExtensions relationship of an accessPackageCatalog. You must explicitly provide an @odata.type property that indicates whether the object is an accessPackageAssignmentRequestWorkflowExtension or an accessPackageAssignmentWorkflowExtension.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-post-accesspackagecustomworkflowextensions?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.catalog_CreateCustomWorkflowExtension
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get accessPackageAssignmentRequestWorkflowExtension
+      description: Read the properties and relationships of an accessPackageAssignmentRequestWorkflowExtension object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackageassignmentrequestworkflowextension-get?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.catalog_GetCustomWorkflowExtension
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+        - name: customCalloutExtension-id
+          in: path
+          description: The unique identifier of customCalloutExtension
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: customCalloutExtension
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Update accessPackageAssignmentRequestWorkflowExtension
+      description: Update the properties of an accessPackageAssignmentRequestWorkflowExtension object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackageassignmentrequestworkflowextension-update?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.catalog_UpdateCustomWorkflowExtension
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+        - name: customCalloutExtension-id
+          in: path
+          description: The unique identifier of customCalloutExtension
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: customCalloutExtension
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.customCalloutExtension'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Delete accessPackageAssignmentRequestWorkflowExtension
+      description: 'Delete an accessPackageAssignmentRequestWorkflowExtension object. The custom workflow extension must first be removed from any associated policies before it can be deleted. Follow these steps to remove the custom workflow extension from any associated policies:'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackageassignmentrequestworkflowextension-delete?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.catalog_DeleteCustomWorkflowExtension
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+        - name: customCalloutExtension-id
+          in: path
+          description: The unique identifier of customCalloutExtension
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: customCalloutExtension
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/$count':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get the number of the resource
+      operationId: identityGovernance.entitlementManagement.catalog.customWorkflowExtension_GetCount
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}/resourceRoles':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: List resourceRoles
+      description: 'Retrieve a list of accessPackageResourceRole objects of an accessPackageResource in an accessPackageCatalog. The resource should have been added to the catalog by creating an accessPackageResourceRequest. This list of roles can then be used by the caller to select a role, which is needed when subsequently creating an accessPackageResourceRoleScope.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackagecatalog-list-resourceroles?view=graph-rest-1.0
+      operationId: identityGovernance.entitlementManagement.catalog_ListResourceRole
+      parameters:
+        - name: accessPackageCatalog-id
+          in: path
+          description: The unique identifier of accessPackageCatalog
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: accessPackageCatalog
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
         - name: $select
           in: query
           description: Select properties to be returned
@@ -20994,7 +21638,7 @@ paths:
       tags:
         - identityGovernance.entitlementManagement
       summary: Remove externalSponsors
-      description: Remove a user or a group from the connected organization's external sponsors. The external sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
+      description: Remove a user or a group from the externalSponsors relationship of a connectedOrganization. External sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/connectedorganization-delete-externalsponsors?view=graph-rest-1.0
@@ -21093,7 +21737,7 @@ paths:
       tags:
         - identityGovernance.entitlementManagement
       summary: Add externalSponsors
-      description: Add a user or a group to the connected organization's external sponsors. The external sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
+      description: Add a user or a group to the externalSponsors relationship of a connectedOrganization. External sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/connectedorganization-post-externalsponsors?view=graph-rest-1.0
@@ -21119,7 +21763,7 @@ paths:
       tags:
         - identityGovernance.entitlementManagement
       summary: Remove externalSponsors
-      description: Remove a user or a group from the connected organization's external sponsors. The external sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
+      description: Remove a user or a group from the externalSponsors relationship of a connectedOrganization. External sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/connectedorganization-delete-externalsponsors?view=graph-rest-1.0
@@ -21217,7 +21861,7 @@ paths:
       tags:
         - identityGovernance.entitlementManagement
       summary: Remove internalSponsors
-      description: Remove a user or a group from the connected organization's internal sponsors. The internal sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
+      description: Remove a user or a group from the internalSponsors relationship of a connectedOrganization. Internal sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/connectedorganization-delete-internalsponsors?view=graph-rest-1.0
@@ -21316,7 +21960,7 @@ paths:
       tags:
         - identityGovernance.entitlementManagement
       summary: Add internalSponsors
-      description: Add a user or a group to the connected organization's internal sponsors. The internal sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
+      description: Add a user or a group to the internalSponsors relationship of a connectedOrganization. Internal sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/connectedorganization-post-internalsponsors?view=graph-rest-1.0
@@ -21342,7 +21986,7 @@ paths:
       tags:
         - identityGovernance.entitlementManagement
       summary: Remove internalSponsors
-      description: Remove a user or a group from the connected organization's internal sponsors. The internal sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
+      description: Remove a user or a group from the internalSponsors relationship of a connectedOrganization. Internal sponsors are a set of users who can approve requests on behalf of other users from that connected organization.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/connectedorganization-delete-internalsponsors?view=graph-rest-1.0
@@ -21390,6 +22034,197 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
+  /identityGovernance/entitlementManagement/controlConfigurations:
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get controlConfigurations from identityGovernance
+      description: Configuration settings that control the lifecycle and access policies of entitlement management within a tenant.
+      operationId: identityGovernance.entitlementManagement_ListControlConfiguration
+      parameters:
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.controlConfigurationCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Create new navigation property to controlConfigurations for identityGovernance
+      operationId: identityGovernance.entitlementManagement_CreateControlConfiguration
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.controlConfiguration'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.controlConfiguration'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/entitlementManagement/controlConfigurations/{controlConfiguration-id}':
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get controlConfigurations from identityGovernance
+      description: Configuration settings that control the lifecycle and access policies of entitlement management within a tenant.
+      operationId: identityGovernance.entitlementManagement_GetControlConfiguration
+      parameters:
+        - name: controlConfiguration-id
+          in: path
+          description: The unique identifier of controlConfiguration
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: controlConfiguration
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.controlConfiguration'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    put:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Update the navigation property controlConfigurations in identityGovernance
+      operationId: identityGovernance.entitlementManagement_SetControlConfiguration
+      parameters:
+        - name: controlConfiguration-id
+          in: path
+          description: The unique identifier of controlConfiguration
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: controlConfiguration
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.controlConfiguration'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.controlConfiguration'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Delete navigation property controlConfigurations for identityGovernance
+      operationId: identityGovernance.entitlementManagement_DeleteControlConfiguration
+      parameters:
+        - name: controlConfiguration-id
+          in: path
+          description: The unique identifier of controlConfiguration
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: controlConfiguration
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  /identityGovernance/entitlementManagement/controlConfigurations/$count:
+    get:
+      tags:
+        - identityGovernance.entitlementManagement
+      summary: Get the number of the resource
+      operationId: identityGovernance.entitlementManagement.controlConfiguration_GetCount
+      parameters:
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
   /identityGovernance/entitlementManagement/resourceEnvironments:
     get:
       tags:
@@ -37913,7 +38748,11 @@ paths:
     get:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Get subjects from identityGovernance
+      summary: Get accessPackageSubject
+      description: Get the properties of an external directory user represented by an existing accessPackageSubject object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackagesubject-get?view=graph-rest-1.0
       operationId: identityGovernance.entitlementManagement_ListSubject
       parameters:
         - $ref: '#/components/parameters/top'
@@ -38030,7 +38869,11 @@ paths:
     patch:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Update the navigation property subjects in identityGovernance
+      summary: Update accessPackageSubject
+      description: Update an external directory user represented by an existing accessPackageSubject object to change the subject lifecycle.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackagesubject-update?view=graph-rest-1.0
       operationId: identityGovernance.entitlementManagement_UpdateSubject
       parameters:
         - name: accessPackageSubject-id
@@ -38178,7 +39021,11 @@ paths:
     patch:
       tags:
         - identityGovernance.entitlementManagement
-      summary: Update the navigation property subjects in identityGovernance
+      summary: Update accessPackageSubject
+      description: Update an external directory user represented by an existing accessPackageSubject object to change the subject lifecycle.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/accesspackagesubject-update?view=graph-rest-1.0
       operationId: identityGovernance.entitlementManagement.subject_UpdateGraphBPreObjectId
       parameters:
         - name: objectId
@@ -38997,7 +39844,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: List deletedItems (deleted lifecycle workflows)
-      description: Get a list of the deleted workflow objects and their properties.
+      description: Get a list of deleted workflow objects and their properties from the deletedItemContainer.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-lifecycleworkflowscontainer-list-deleteditems?view=graph-rest-1.0
@@ -39774,18 +40621,447 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.serviceProvisioningErrorCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.serviceProvisioningErrorCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/lastModifiedBy/serviceProvisioningErrors/$count':
+    get:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Get the number of the resource
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow.lastModifiedBy.ServiceProvisioningError_GetCount
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.activate':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action activate
+      description: 'Run a workflow object on-demand. You can run any workflow on-demand, including scheduled workflows. Workflows created from the ''Real-time employee termination'' template are run on-demand only. When you run a workflow on demand, the tasks are executed regardless of whether the user state matches the scope and trigger execution conditions.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-activate?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_activate
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                subjects:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.user'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.activateWithScope':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action activateWithScope
+      description: 'Run a workflow object on-demand with a specific scope. You can run any workflow on-demand, including scheduled workflows. Workflows created from the ''Real-time employee termination'' template are run on-demand only. When you run a workflow on demand, the tasks are executed regardless of whether the user state matches the scope and trigger execution conditions.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-activatewithscope?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_activateGraphWPreScope
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                scope:
+                  $ref: '#/components/schemas/microsoft.graph.identityGovernance.activationScope'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.cancelProcessing':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action cancelProcessing
+      description: Cancel one or more workflow runs that are currently in queued or inProgress status. Currently limited to canceling one run per request.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-cancelprocessing?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_cancelProcessing
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                scope:
+                  $ref: '#/components/schemas/microsoft.graph.identityGovernance.cancelScope'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.clearQuarantine':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action clearQuarantine
+      description: 'Release a quarantined workflow so that it resumes processing. A workflow is automatically quarantined when a run exceeds the threshold conditions defined in its quarantineConfiguration. After an administrator reviews the cause of the quarantine, calling this action clears the quarantine state and allows the workflow to run again.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-clearquarantine?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_clearQuarantine
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.createNewVersion':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action createNewVersion
+      description: Create a new version of the workflow object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-createnewversion?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_createNewVersion
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                workflow:
+                  $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.previewTaskFailures':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action previewTaskFailures
+      description: 'Validate the tasks configured in a workflow to check for configuration errors. This action identifies any tasks that would fail during execution, allowing you to fix issues before running the workflow. Returns an empty collection if no task failures are detected.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-previewtaskfailures?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_previewTaskFailure
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.identityGovernance.previewFailedTask'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.previewWorkflow':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action previewWorkflow
+      description: 'Run a workflow in preview mode for selected directory objects without affecting production users. This action triggers workflow processing in preview mode, and results can be retrieved by using the List userProcessingResults operation with $filter=workflowExecutionType eq ''previewMode''.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-previewworkflow?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_previewWorkflow
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                subjects:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.directoryObject'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.restore':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action restore
+      description: Restore a deleted workflow object. You can only restore a workflow that was deleted within the last 30 days before Microsoft Entra ID automatically permanently deletes it.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-restore?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_restore
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/previewScope':
+    get:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Get previewScope from identityGovernance
+      description: The preview scope for the workflow.
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_ListPreviewScope
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.directoryObjectCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/previewScope/{directoryObject-id}':
+    get:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Get previewScope from identityGovernance
+      description: The preview scope for the workflow.
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_GetPreviewScope
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+        - name: directoryObject-id
+          in: path
+          description: The unique identifier of directoryObject
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: directoryObject
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.directoryObject'
         default:
           $ref: '#/components/responses/error'
-      x-ms-pageable:
-        nextLinkName: '@odata.nextLink'
-        operationName: listMore
-  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/lastModifiedBy/serviceProvisioningErrors/$count':
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/previewScope/$count':
     get:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Get the number of the resource
-      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow.lastModifiedBy.ServiceProvisioningError_GetCount
+      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow.previewScope_GetCount
       parameters:
         - name: workflow-id
           in: path
@@ -39802,152 +41078,6 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.activate':
-    post:
-      tags:
-        - identityGovernance.lifecycleWorkflowsContainer
-      summary: Invoke action activate
-      description: 'Run a workflow object on-demand. You can run any workflow on-demand, including scheduled workflows. Workflows created from the ''Real-time employee termination'' template are run on-demand only. When you run a workflow on demand, the tasks are executed regardless of whether the user state matches the scope and trigger execution conditions.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-activate?view=graph-rest-1.0
-      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_activate
-      parameters:
-        - name: workflow-id
-          in: path
-          description: The unique identifier of workflow
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: workflow
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                subjects:
-                  type: array
-                  items:
-                    $ref: '#/components/schemas/microsoft.graph.user'
-              additionalProperties:
-                type: object
-        required: true
-      responses:
-        2XX:
-          description: Success
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.activateWithScope':
-    post:
-      tags:
-        - identityGovernance.lifecycleWorkflowsContainer
-      summary: Invoke action activateWithScope
-      description: 'Run a workflow object on-demand with a specific scope. You can run any workflow on-demand, including scheduled workflows. Workflows created from the ''Real-time employee termination'' template are run on-demand only. When you run a workflow on demand, the tasks are executed regardless of whether the user state matches the scope and trigger execution conditions.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-activatewithscope?view=graph-rest-1.0
-      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_activateGraphWPreScope
-      parameters:
-        - name: workflow-id
-          in: path
-          description: The unique identifier of workflow
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: workflow
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                scope:
-                  $ref: '#/components/schemas/microsoft.graph.identityGovernance.activationScope'
-              additionalProperties:
-                type: object
-        required: true
-      responses:
-        2XX:
-          description: Success
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.createNewVersion':
-    post:
-      tags:
-        - identityGovernance.lifecycleWorkflowsContainer
-      summary: Invoke action createNewVersion
-      description: Create a new version of the workflow object.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-createnewversion?view=graph-rest-1.0
-      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_createNewVersion
-      parameters:
-        - name: workflow-id
-          in: path
-          description: The unique identifier of workflow
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: workflow
-      requestBody:
-        description: Action parameters
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                workflow:
-                  $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
-              additionalProperties:
-                type: object
-        required: true
-      responses:
-        2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
-  '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/microsoft.graph.identityGovernance.restore':
-    post:
-      tags:
-        - identityGovernance.lifecycleWorkflowsContainer
-      summary: Invoke action restore
-      description: Restore a workflow that has been deleted. You can only restore a workflow that was deleted within the last 30 days before Microsoft Entra ID automatically permanently deletes it.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-restore?view=graph-rest-1.0
-      operationId: identityGovernance.lifecycleWorkflow.deletedItem.workflow_restore
-      parameters:
-        - name: workflow-id
-          in: path
-          description: The unique identifier of workflow
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: workflow
-      responses:
-        2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: action
   '/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflow-id}/runs':
     get:
       tags:
@@ -40357,7 +41487,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -41532,7 +42662,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -42527,7 +43657,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -43373,7 +44503,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -44474,7 +45604,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -46197,7 +47327,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -46865,7 +47995,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke function topTasksProcessedSummary
-      description: 'Provide a summary of the most processed tasks, known as top tasks, for a specified time period in a tenant. The task definition is provided, along with numerical counts of total, successful, and failed runs. For information about workflows processed, see insights: topWorkflowsProcessedSummary.'
+      description: 'Provide a summary from the insights resource of the most processed task objects, known as top tasks, for a specified time period in a tenant. The task definition is provided, along with numerical counts of total, successful, and failed runs. For information about workflows processed, see insights: topWorkflowsProcessedSummary.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-insights-toptasksprocessedsummary?view=graph-rest-1.0
@@ -46922,7 +48052,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke function topWorkflowsProcessedSummary
-      description: 'Provide a summary of the workflows processed the most, known as top workflows, for a specified period in a tenant. Workflow basic details are given, along with run information. For information about tasks processed, see insights: topTasksProcessedSummary.'
+      description: 'Provide a summary from the insights resource of the workflow objects processed the most, known as top workflows, for a specified period in a tenant. Workflow basic details are given, along with run information. For information about tasks processed, see insights: topTasksProcessedSummary.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-insights-topworkflowsprocessedsummary?view=graph-rest-1.0
@@ -46979,7 +48109,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke function workflowsProcessedByCategory
-      description: 'Provide a summary of workflows processed, by category, in a tenant. This allows you to quickly get category information, by numerical value, bypassing other information found in the WorkflowsProcessedSummary call.'
+      description: 'Provide a summary from the insights resource of workflow objects processed by category in a tenant. This allows you to quickly get category information, by numerical value, without retrieving the other information included in the workflowsProcessedSummary call.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-insights-workflowsprocessedbycategory?view=graph-rest-1.0
@@ -47018,7 +48148,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke function workflowsProcessedSummary
-      description: 'Provide a summary of all workflows processed within a tenant for a specified period. Because the amount of results for listed workflows as returned by the List workflows does not tell you which workflows were processed from the list of created workflows, this summary gives you a quick overview of processed status based on counts.'
+      description: 'Provide a summary from the insights resource of workflow objects processed within a tenant for a specified period. Because the list returned by List workflows doesn''t indicate which workflows were processed, this summary gives you a quick overview based on counts.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-insights-workflowsprocessedsummary?view=graph-rest-1.0
@@ -47242,7 +48372,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: List workflows
-      description: Get a list of workflow resources that are associated with lifecycle workflows.
+      description: Get a list of workflow resources that are associated with Lifecycle Workflows.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-lifecycleworkflowscontainer-list-workflows?view=graph-rest-1.0
@@ -47406,7 +48536,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Delete workflow
-      description: 'Delete a workflow object and its associated tasks, taskProcessingResults and versions. You can restore a deleted workflow and its associated objects within 30 days of deletion.'
+      description: 'Delete a workflow object and its associated tasks, taskProcessingResults and versions. The deleted workflow is sent to the deleted workflows container. You can restore a deleted workflow and its associated objects within 30 days of deletion.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-delete?view=graph-rest-1.0
@@ -48184,6 +49314,72 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/microsoft.graph.identityGovernance.cancelProcessing':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action cancelProcessing
+      description: Cancel one or more workflow runs that are currently in queued or inProgress status. Currently limited to canceling one run per request.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-cancelprocessing?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.workflow_cancelProcessing
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                scope:
+                  $ref: '#/components/schemas/microsoft.graph.identityGovernance.cancelScope'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/microsoft.graph.identityGovernance.clearQuarantine':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action clearQuarantine
+      description: 'Release a quarantined workflow so that it resumes processing. A workflow is automatically quarantined when a run exceeds the threshold conditions defined in its quarantineConfiguration. After an administrator reviews the cause of the quarantine, calling this action clears the quarantine state and allows the workflow to run again.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-clearquarantine?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.workflow_clearQuarantine
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflow'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
   '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/microsoft.graph.identityGovernance.createNewVersion':
     post:
       tags:
@@ -48225,12 +49421,93 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/microsoft.graph.identityGovernance.previewTaskFailures':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action previewTaskFailures
+      description: 'Validate the tasks configured in a workflow to check for configuration errors. This action identifies any tasks that would fail during execution, allowing you to fix issues before running the workflow. Returns an empty collection if no task failures are detected.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-previewtaskfailures?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.workflow_previewTaskFailure
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.identityGovernance.previewFailedTask'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/microsoft.graph.identityGovernance.previewWorkflow':
+    post:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Invoke action previewWorkflow
+      description: 'Run a workflow in preview mode for selected directory objects without affecting production users. This action triggers workflow processing in preview mode, and results can be retrieved by using the List userProcessingResults operation with $filter=workflowExecutionType eq ''previewMode''.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-previewworkflow?view=graph-rest-1.0
+      operationId: identityGovernance.lifecycleWorkflow.workflow_previewWorkflow
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                subjects:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.directoryObject'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
   '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/microsoft.graph.identityGovernance.restore':
     post:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action restore
-      description: Restore a workflow that has been deleted. You can only restore a workflow that was deleted within the last 30 days before Microsoft Entra ID automatically permanently deletes it.
+      description: Restore a deleted workflow object. You can only restore a workflow that was deleted within the last 30 days before Microsoft Entra ID automatically permanently deletes it.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-restore?view=graph-rest-1.0
@@ -48254,12 +49531,148 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: action
+  '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/previewScope':
+    get:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Get previewScope from identityGovernance
+      description: The preview scope for the workflow.
+      operationId: identityGovernance.lifecycleWorkflow.workflow_ListPreviewScope
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.directoryObjectCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/previewScope/{directoryObject-id}':
+    get:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Get previewScope from identityGovernance
+      description: The preview scope for the workflow.
+      operationId: identityGovernance.lifecycleWorkflow.workflow_GetPreviewScope
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+        - name: directoryObject-id
+          in: path
+          description: The unique identifier of directoryObject
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: directoryObject
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.directoryObject'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/previewScope/$count':
+    get:
+      tags:
+        - identityGovernance.lifecycleWorkflowsContainer
+      summary: Get the number of the resource
+      operationId: identityGovernance.lifecycleWorkflow.workflow.previewScope_GetCount
+      parameters:
+        - name: workflow-id
+          in: path
+          description: The unique identifier of workflow
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: workflow
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
   '/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs':
     get:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: List runs
-      description: Get a list of the run objects and their properties for a lifecycle workflow.
+      description: Get a list of run objects and their properties for a workflow.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-list-runs?view=graph-rest-1.0
@@ -48672,7 +50085,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -49176,7 +50589,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Get userProcessingResult
-      description: Get the user processing result of a user processing result of a run.
+      description: Get a userProcessingResult for a run.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-userprocessingresult-get?view=graph-rest-1.0
@@ -49856,7 +51269,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -50456,7 +51869,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke function summary
-      description: 'Get a summary of runs for a specified time period. Because the amount of runs returned by the List API call can be overwhelming, this summary allows the administrator to get a quick overview based on counts.'
+      description: 'Get a runSummary for run objects over a specified time period. Because the number of runs returned by the list API call can be overwhelming, this summary allows administrators to get a quick overview based on counts.'
       operationId: identityGovernance.lifecycleWorkflow.workflow.run_summary
       parameters:
         - name: workflow-id
@@ -50858,7 +52271,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -51313,7 +52726,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke function summary
-      description: 'Get a taskReportSummary object. This API provides a summary of task processing results for a specified time period. Because the volume of task processing results and task reports returned by the List API calls can be overwhelming, this summary allows the administrator to get a quick overview based on counts.'
+      description: 'Get a taskReportSummary for a taskReport. This API provides a summary of task processing results for a specified time period. Because the volume of task processing results and task reports returned by the List API calls can be overwhelming, this summary allows the administrator to get a quick overview based on counts.'
       operationId: identityGovernance.lifecycleWorkflow.workflow.taskReport_summary
       parameters:
         - name: workflow-id
@@ -51357,7 +52770,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: List tasks (in Lifecycle Workflows)
-      description: Retrieve the details of the built-in tasks in Lifecycle Workflows.
+      description: Retrieve the details of the built-in task objects in a workflow.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-workflow-list-task?view=graph-rest-1.0
@@ -51711,7 +53124,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -52818,7 +54231,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -54553,7 +55966,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -55491,7 +56904,7 @@ paths:
       tags:
         - identityGovernance.lifecycleWorkflowsContainer
       summary: Invoke action resume
-      description: 'Resume a task processing result that''s inProgress. In the default case an Azure Logic Apps system-assigned managed identity calls this API. For more information, see: Lifecycle Workflows extensibility approach.'
+      description: 'Resume a taskProcessingResult that''s inProgress. In the default case, an Azure Logic Apps system-assigned managed identity calls this API. For more information, see Lifecycle Workflows extensibility approach.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/identitygovernance-taskprocessingresult-resume?view=graph-rest-1.0
@@ -71095,6 +72508,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.accessPackage'
               description: Access packages define the collection of resource roles and the policies for which subjects can request or be assigned access to those resources.
               x-ms-navigationProperty: true
+            accessPackageSuggestions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
+              description: Suggested access packages for end users based on various criteria such as related people insights and assignment history.
+              x-ms-navigationProperty: true
             assignmentPolicies:
               type: array
               items:
@@ -71113,6 +72532,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.accessPackageAssignment'
               description: The assignment of an access package to a subject for a period of time.
               x-ms-navigationProperty: true
+            availableAccessPackages:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
+              description: Access packages available for end users to browse and request.
+              x-ms-navigationProperty: true
             catalogs:
               type: array
               items:
@@ -71125,6 +72550,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.connectedOrganization'
               description: References to a directory or domain of another organization whose users can request access.
               x-ms-navigationProperty: true
+            controlConfigurations:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.controlConfiguration'
+              description: Configuration settings that control the lifecycle and access policies of entitlement management within a tenant.
+              x-ms-navigationProperty: true
             resourceEnvironments:
               type: array
               items:
@@ -71500,8 +72931,10 @@ components:
               nullable: true
             originSystem:
               type: string
-              description: 'The type of the resource in the origin system, such as SharePointOnline, AadApplication, or AadGroup.'
+              description: 'The type of the resource in the origin system, such as SharePointOnline, AadApplication, AzureResources, or AadGroup.'
               nullable: true
+            type:
+              $ref: '#/components/schemas/microsoft.graph.roleType'
             resource:
               $ref: '#/components/schemas/microsoft.graph.accessPackageResource'
           additionalProperties:
@@ -71629,11 +73062,11 @@ components:
               nullable: true
             originId:
               type: string
-              description: The unique identifier for the scope in the resource as defined in the origin system.
+              description: 'The unique identifier of the resource in the origin system. If a Microsoft Entra group, originId is the identifier of the group. Supports $filter (eq).'
               nullable: true
             originSystem:
               type: string
-              description: The origin system for the scope.
+              description: 'The type of the resource in the origin system, such as SharePointOnline, AadApplication, AadGroup, AzureResources, or CustomDataProvidedResource. Supports $filter (eq).'
               nullable: true
             resource:
               $ref: '#/components/schemas/microsoft.graph.accessPackageResource'
@@ -71645,6 +73078,53 @@ components:
         - allowedRequestor
         - unknownFutureValue
       type: string
+    microsoft.graph.accessPackageSuggestion:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: accessPackageSuggestion
+          type: object
+          properties:
+            reasons:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestionReason'
+              description: A collection of reasons why this access package is being suggested to the user.
+            accessPackage:
+              $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
+          additionalProperties:
+            type: object
+    microsoft.graph.availableAccessPackage:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: availableAccessPackage
+          type: object
+          properties:
+            description:
+              type: string
+              description: The description of the access package.
+              nullable: true
+            displayName:
+              type: string
+              description: The display name of the access package.
+              nullable: true
+            resourceRoleScopes:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.accessPackageResourceRoleScope'
+              description: The resource role scopes associated with this available access package.
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
+    microsoft.graph.accessPackageSuggestionFilterByCurrentUserOptions:
+      title: accessPackageSuggestionFilterByCurrentUserOptions
+      enum:
+        - none
+        - relatedPeopleAssignments
+        - assignmentHistory
+        - unknownFutureValue
+      type: string
+      x-ms-enum-flags:
+        isFlags: true
     microsoft.graph.accessPackageAssignmentRequest:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -71833,6 +73313,37 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.controlConfiguration:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: controlConfiguration
+          type: object
+          properties:
+            createdBy:
+              type: string
+              description: The userPrincipalName of the user or identity that created the control configuration.
+              nullable: true
+            createdDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              description: The date and time the control configuration was created.
+              format: date-time
+              nullable: true
+            isEnabled:
+              type: boolean
+              description: Determines whether or not the control configuration is enabled.
+            modifiedBy:
+              type: string
+              description: The userPrincipalName of the user or identity that modified the control configuration.
+              nullable: true
+            modifiedDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              description: The date and time the control configuration was modified.
+              format: date-time
+              nullable: true
+          additionalProperties:
+            type: object
     microsoft.graph.accessPackageResourceRequest:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -71947,7 +73458,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -71974,7 +73485,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -72121,7 +73632,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -72143,7 +73654,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -72176,7 +73687,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -72274,7 +73785,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -72531,7 +74042,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.mailboxSettings:
       title: mailboxSettings
       type: object
@@ -72599,6 +74109,10 @@ components:
               description: 'The date time when the workflow is expected to run next based on the schedule interval, if there are any users matching the execution conditions. Supports $filter(lt,gt) and $orderby.'
               format: date-time
               nullable: true
+            quarantineDetails:
+              $ref: '#/components/schemas/microsoft.graph.identityGovernance.quarantineDetails'
+            settings:
+              $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflowSetting'
             version:
               maximum: 2147483647
               minimum: -2147483648
@@ -72612,6 +74126,12 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.identityGovernance.userProcessingResult'
               description: The list of users that meet the workflowExecutionConditions of a workflow.
               x-ms-navigationProperty: true
+            previewScope:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.directoryObject'
+              description: The preview scope for the workflow.
+              x-ms-navigationProperty: true
             runs:
               type: array
               items:
@@ -72724,6 +74244,29 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.identityGovernance.cancelScope:
+      title: cancelScope
+      type: object
+      additionalProperties:
+        type: object
+    microsoft.graph.identityGovernance.previewFailedTask:
+      title: previewFailedTask
+      type: object
+      properties:
+        definitionId:
+          type: string
+          description: The identifier of the task definition of the task that failed during the preview operation of a workflow.
+        failureReason:
+          type: string
+          description: The reason why the task failed in the preview operation of a workflow.
+        name:
+          type: string
+          description: The name of the task that failed within the preview operation of a workflow.
+        taskId:
+          type: string
+          description: The identifier of the task that failed during the preview operation of a workflow.
+      additionalProperties:
+        type: object
     microsoft.graph.identityGovernance.run:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -73116,6 +74659,8 @@ components:
         - title: workflowVersion
           type: object
           properties:
+            settings:
+              $ref: '#/components/schemas/microsoft.graph.identityGovernance.workflowSetting'
             versionNumber:
               maximum: 2147483647
               minimum: -2147483648
@@ -73363,6 +74908,8 @@ components:
           properties:
             emailSettings:
               $ref: '#/components/schemas/microsoft.graph.emailSettings'
+            quarantineConfiguration:
+              $ref: '#/components/schemas/microsoft.graph.identityGovernance.quarantineConfiguration'
             workflowScheduleIntervalInHours:
               maximum: 2147483647
               minimum: -2147483648
@@ -73521,6 +75068,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -73529,7 +75078,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -73592,6 +75141,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -73626,6 +75179,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -73703,11 +75258,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -73854,7 +75423,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.assignmentScheduleInstanceFilterByCurrentUserOptions:
       title: assignmentScheduleInstanceFilterByCurrentUserOptions
       enum:
@@ -75048,6 +76616,15 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.roleType:
+      title: roleType
+      enum:
+        - active
+        - eligible
+        - application
+        - delegated
+        - unknownFutureValue
+      type: string
     microsoft.graph.accessPackageResourceAttribute:
       title: accessPackageResourceAttribute
       type: object
@@ -75078,6 +76655,11 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.accessPackageSuggestionReason:
+      title: accessPackageSuggestionReason
+      type: object
+      additionalProperties:
+        type: object
     microsoft.graph.accessPackageAnswer:
       title: accessPackageAnswer
       type: object
@@ -77457,7 +79039,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -77893,6 +79474,32 @@ components:
           x-ms-navigationProperty: true
       additionalProperties:
         type: object
+    microsoft.graph.identityGovernance.quarantineDetails:
+      title: quarantineDetails
+      type: object
+      properties:
+        quarantinedDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: The date and time when the workflow was quarantined.
+          format: date-time
+          nullable: true
+        quarantineReason:
+          type: string
+          description: The reason the workflow was quarantined.
+          nullable: true
+        quarantineType:
+          $ref: '#/components/schemas/microsoft.graph.identityGovernance.quarantineType'
+      additionalProperties:
+        type: object
+    microsoft.graph.identityGovernance.workflowSetting:
+      title: workflowSetting
+      type: object
+      properties:
+        quarantineConfiguration:
+          $ref: '#/components/schemas/microsoft.graph.identityGovernance.quarantineConfiguration'
+      additionalProperties:
+        type: object
     microsoft.graph.identityGovernance.lifecycleWorkflowProcessingStatus:
       title: lifecycleWorkflowProcessingStatus
       enum:
@@ -77903,6 +79510,8 @@ components:
         - canceled
         - failed
         - unknownFutureValue
+        - canceling
+        - quarantined
       type: string
     microsoft.graph.identityGovernance.workflowExecutionType:
       title: workflowExecutionType
@@ -77911,6 +79520,7 @@ components:
         - onDemand
         - unknownFutureValue
         - activatedWithScope
+        - preview
       type: string
     microsoft.graph.identityGovernance.customTaskExtensionOperationStatus:
       title: customTaskExtensionOperationStatus
@@ -77979,6 +79589,19 @@ components:
           description: Specifies if the organization’s banner logo should be included in email notifications. The banner logo will replace the Microsoft logo at the top of the email notification. If true the banner logo will be taken from the tenant’s branding settings. This value can only be set to true if the organizationalBranding bannerLogo property is set.
       additionalProperties:
         type: object
+    microsoft.graph.identityGovernance.quarantineConfiguration:
+      title: quarantineConfiguration
+      type: object
+      properties:
+        conditions:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.identityGovernance.quarantineCondition'
+          description: The set of threshold conditions evaluated for the workflow. Each condition is either a countBasedQuarantineCondition or a percentageBasedQuarantineCondition.
+        matchMode:
+          $ref: '#/components/schemas/microsoft.graph.identityGovernance.matchMode'
+      additionalProperties:
+        type: object
     microsoft.graph.identityGovernance.workflowExecutionConditions:
       title: workflowExecutionConditions
       type: object
@@ -78025,6 +79648,15 @@ components:
         - group
         - unknownFutureValue
       type: string
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -78742,6 +80374,19 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.accessPackageSuggestionCollectionResponse:
+      title: Collection of accessPackageSuggestion
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestion'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.accessPackageAssignmentRequestCollectionResponse:
       title: Collection of accessPackageAssignmentRequest
       type: object
@@ -78768,6 +80413,19 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.availableAccessPackageCollectionResponse:
+      title: Collection of availableAccessPackage
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.availableAccessPackage'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.accessPackageCatalogCollectionResponse:
       title: Collection of accessPackageCatalog
       type: object
@@ -78833,6 +80491,19 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.controlConfigurationCollectionResponse:
+      title: Collection of controlConfiguration
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.controlConfiguration'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.accessPackageResourceEnvironmentCollectionResponse:
       title: Collection of accessPackageResourceEnvironment
       type: object
@@ -79270,6 +80941,8 @@ components:
       title: accessPackageApprovalStage
       type: object
       properties:
+        approverInformationVisibility:
+          $ref: '#/components/schemas/microsoft.graph.approverInformationVisibility'
         durationBeforeAutomaticDenial:
           pattern: '^-?P([0-9]+D)?(T([0-9]+H)?([0-9]+M)?([0-9]+([.][0-9]+)?S)?)?$'
           type: string
@@ -79286,7 +80959,7 @@ components:
           type: array
           items:
             $ref: '#/components/schemas/microsoft.graph.subjectSet'
-          description: 'If escalation is enabled and the primary approvers do not respond before the escalation time, the escalationApprovers are the users who will be asked to approve requests.'
+          description: 'If escalation is enabled and the primary approvers do not respond before the escalation time, the escalationApprovers are the users who are asked to approve requests.'
         fallbackEscalationApprovers:
           type: array
           items:
@@ -79309,7 +80982,7 @@ components:
           type: array
           items:
             $ref: '#/components/schemas/microsoft.graph.subjectSet'
-          description: 'The subjects, typically users, who will be asked to approve requests. A collection of singleUser, groupMembers, requestorManager, internalSponsors, externalSponsors, or targetUserSponsors.'
+          description: 'The subjects, typically users, who are asked to approve requests. A collection of singleUser, groupMembers, requestorManager, internalSponsors, externalSponsors, or targetUserSponsors.'
       additionalProperties:
         type: object
     microsoft.graph.accessReviewExpirationBehavior:
@@ -79377,6 +81050,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -80229,7 +81903,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -80245,13 +81919,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -80703,6 +82377,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -81314,7 +82993,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -81483,7 +83162,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -83438,6 +85117,15 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.identityGovernance.quarantineType:
+      title: quarantineType
+      enum:
+        - notQuarantined
+        - countBasedThresholdExceeded
+        - percentageBasedThresholdExceeded
+        - multipleConditionsExceeded
+        - unknownFutureValue
+      type: string
     microsoft.graph.identityGovernance.valueType:
       title: valueType
       enum:
@@ -83447,6 +85135,18 @@ components:
         - bool
         - unknownFutureValue
       type: string
+    microsoft.graph.identityGovernance.quarantineCondition:
+      title: quarantineCondition
+      type: object
+      additionalProperties:
+        type: object
+    microsoft.graph.identityGovernance.matchMode:
+      title: matchMode
+      enum:
+        - any
+        - all
+        - unknownFutureValue
+      type: string
     microsoft.graph.settingValue:
       title: settingValue
       type: object
@@ -83623,6 +85323,14 @@ components:
           $ref: '#/components/schemas/microsoft.graph.recurrenceRangeType'
       additionalProperties:
         type: object
+    microsoft.graph.approverInformationVisibility:
+      title: approverInformationVisibility
+      enum:
+        - default
+        - notVisible
+        - visible
+        - unknownFutureValue
+      type: string
     microsoft.graph.printerBase:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -84979,6 +86687,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -92581,6 +94294,12 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.accessPackageResourceScopeCollectionResponse'
+    microsoft.graph.accessPackageSuggestionCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.accessPackageSuggestionCollectionResponse'
     microsoft.graph.accessPackageAssignmentRequestCollectionResponse:
       description: Retrieved collection
       content:
@@ -92593,6 +94312,12 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.accessPackageAssignmentCollectionResponse'
+    microsoft.graph.availableAccessPackageCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.availableAccessPackageCollectionResponse'
     microsoft.graph.accessPackageCatalogCollectionResponse:
       description: Retrieved collection
       content:
@@ -92623,6 +94348,12 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.directoryObjectCollectionResponse'
+    microsoft.graph.controlConfigurationCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.controlConfigurationCollectionResponse'
     microsoft.graph.accessPackageResourceEnvironmentCollectionResponse:
       description: Retrieved collection
       content:
diff --git a/openApiDocs/v1.0/Identity.SignIns.yml b/openApiDocs/v1.0/Identity.SignIns.yml
index bf0d6b2a5d..1a71e901bc 100644
--- a/openApiDocs/v1.0/Identity.SignIns.yml
+++ b/openApiDocs/v1.0/Identity.SignIns.yml
@@ -5703,7 +5703,7 @@ paths:
       tags:
         - identity.conditionalAccessRoot
       summary: Invoke function usage
-      description: 'Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
+      description: 'Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that don''t require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-usage?view=graph-rest-1.0
@@ -10564,7 +10564,7 @@ paths:
       tags:
         - informationProtection.bitlocker
       summary: List recoveryKeys
-      description: 'Get a list of the bitlockerRecoveryKey objects and their properties.  This operation does not return the key property. For information about how to read the key property, see Get bitlockerRecoveryKey. You can use this API to programmatically iterate through the list of recovery keys in the tenant and identify devices with BitLocker enabled. For more information, see the sample PowerShell code in BitLocker recovery process.'
+      description: 'Get a list of the bitlockerRecoveryKey objects and their properties.  This operation doesn''t return the key property. For information about how to read the key property, see Get bitlockerRecoveryKey. You can use this API to programmatically iterate through the list of recovery keys in the tenant and identify devices with BitLocker enabled. For more information, see the sample PowerShell code in BitLocker recovery process.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/bitlocker-list-recoverykeys?view=graph-rest-1.0
@@ -13669,7 +13669,7 @@ paths:
       tags:
         - policies.authenticationStrengthPolicy
       summary: Invoke function usage
-      description: 'Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
+      description: 'Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that don''t require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-usage?view=graph-rest-1.0
@@ -15707,6 +15707,83 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
+  /policies/federatedTokenValidationPolicy:
+    get:
+      tags:
+        - policies.federatedTokenValidationPolicy
+      summary: Get federatedTokenValidationPolicy from policies
+      operationId: policy_GetFederatedTokenValidationPolicy
+      parameters:
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.federatedTokenValidationPolicy'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - policies.federatedTokenValidationPolicy
+      summary: Update the navigation property federatedTokenValidationPolicy in policies
+      operationId: policy_UpdateFederatedTokenValidationPolicy
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.federatedTokenValidationPolicy'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.federatedTokenValidationPolicy'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - policies.federatedTokenValidationPolicy
+      summary: Delete navigation property federatedTokenValidationPolicy for policies
+      operationId: policy_DeleteFederatedTokenValidationPolicy
+      parameters:
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
   /policies/homeRealmDiscoveryPolicies:
     get:
       tags:
@@ -22361,7 +22438,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.'
+              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.'
               format: date-time
               nullable: true
             description:
@@ -22378,7 +22455,7 @@ components:
             modifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.'
+              description: 'The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.'
               format: date-time
               nullable: true
             sessionControls:
@@ -23100,7 +23177,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -23127,7 +23204,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -23274,7 +23351,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -23296,7 +23373,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -23329,7 +23406,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -23427,7 +23504,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -23684,7 +23761,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.mailboxSettings:
       title: mailboxSettings
       type: object
@@ -23826,6 +23902,8 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.featureRolloutPolicy'
               description: The feature rollout policy associated with a directory object.
               x-ms-navigationProperty: true
+            federatedTokenValidationPolicy:
+              $ref: '#/components/schemas/microsoft.graph.federatedTokenValidationPolicy'
             homeRealmDiscoveryPolicies:
               type: array
               items:
@@ -24276,6 +24354,16 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.federatedTokenValidationPolicy:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.directoryObject'
+        - title: federatedTokenValidationPolicy
+          type: object
+          properties:
+            validatingDomains:
+              $ref: '#/components/schemas/microsoft.graph.validatingDomains'
+          additionalProperties:
+            type: object
     microsoft.graph.homeRealmDiscoveryPolicy:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.stsPolicy'
@@ -28150,7 +28238,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -28882,6 +28969,14 @@ components:
         - certificateBasedAuthentication
         - multiFactorAuthentication
       type: string
+    microsoft.graph.validatingDomains:
+      title: validatingDomains
+      type: object
+      properties:
+        rootDomains:
+          $ref: '#/components/schemas/microsoft.graph.rootDomains'
+      additionalProperties:
+        type: object
     microsoft.graph.emailDetails:
       title: emailDetails
       type: object
@@ -30461,6 +30556,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -31086,7 +31182,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -31102,13 +31198,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -31560,6 +31656,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -32171,7 +32272,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -32261,6 +32362,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -32269,7 +32372,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -32332,6 +32435,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -32366,6 +32473,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -32443,11 +32552,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -32594,7 +32717,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAsyncOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -32680,7 +32802,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -34755,6 +34877,17 @@ components:
           $ref: '#/components/schemas/microsoft.graph.deviceRegistrationMembership'
       additionalProperties:
         type: object
+    microsoft.graph.rootDomains:
+      title: rootDomains
+      enum:
+        - none
+        - all
+        - allFederated
+        - allManaged
+        - enumerated
+        - allManagedAndEnumeratedFederated
+        - unknownFutureValue
+      type: string
     microsoft.graph.notifyMembers:
       title: notifyMembers
       enum:
@@ -36193,6 +36326,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -37154,6 +37292,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
diff --git a/openApiDocs/v1.0/Reports.yml b/openApiDocs/v1.0/Reports.yml
index 0096ee704f..81b2b9cc2b 100644
--- a/openApiDocs/v1.0/Reports.yml
+++ b/openApiDocs/v1.0/Reports.yml
@@ -155,7 +155,7 @@ paths:
       tags:
         - auditLogs.directoryAudit
       summary: List directoryAudits
-      description: 'Get the list of audit logs generated by Microsoft Entra ID. This includes audit logs generated by various services within Microsoft Entra ID, including user, app, device and group Management, privileged identity management (PIM), access reviews, terms of use, identity protection, password management (self-service and admin password resets), and self- service group management, and so on.'
+      description: 'Get a list of directoryAudit objects representing the audit logs generated by Microsoft Entra ID. This includes audit logs generated by various services within Microsoft Entra ID, including user, app, device and group Management, privileged identity management (PIM), access reviews, terms of use, identity protection, password management (self-service and admin password resets), and self- service group management, and so on.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/directoryaudit-list?view=graph-rest-1.0
@@ -232,7 +232,7 @@ paths:
       tags:
         - auditLogs.directoryAudit
       summary: Get directoryAudit
-      description: 'Get a specific Microsoft Entra audit log item. This includes an audit log item generated by various services within Microsoft Entra ID like user, application, device and group management, privileged identity management (PIM), access reviews, terms of use, identity protection, password management (self-service and admin password resets), self-service group management, and so on.'
+      description: 'Get a specific directoryAudit item. This includes an audit log item generated by various services within Microsoft Entra ID like user, application, device and group management, privileged identity management (PIM), access reviews, terms of use, identity protection, password management (self-service and admin password resets), self-service group management, and so on.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/directoryaudit-get?view=graph-rest-1.0
@@ -352,7 +352,7 @@ paths:
       tags:
         - auditLogs.provisioningObjectSummary
       summary: List provisioningObjectSummary
-      description: 'Get all provisioning events that occurred in your tenant, such as the deletion of a group in a target application or the creation of a user when provisioning user accounts from your HR system. '
+      description: 'Get all provisioningObjectSummary events that occurred in your tenant, such as the deletion of a group in a target application or the creation of a user when provisioning user accounts from your HR system. '
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/provisioningobjectsummary-list?view=graph-rest-1.0
diff --git a/openApiDocs/v1.0/SchemaExtensions.yml b/openApiDocs/v1.0/SchemaExtensions.yml
index b62150dac7..b19e4499b9 100644
--- a/openApiDocs/v1.0/SchemaExtensions.yml
+++ b/openApiDocs/v1.0/SchemaExtensions.yml
@@ -174,7 +174,7 @@ paths:
       tags:
         - schemaExtensions.schemaExtension
       summary: Delete schemaExtension
-      description: 'Delete the definition of a schema extension. Only the app that created the schema extension (owner app) can delete the schema extension definition, and only when the extension is in the InDevelopment state. Deleting a schema extension definition does not affect accessing custom data that has been added to resource instances based on that definition.'
+      description: 'Delete the definition of a schema extension. Only the app that created the schema extension (owner app) can delete the schema extension definition, and only when the extension is in the InDevelopment state. Deleting a schema extension definition doesn''t affect accessing custom data that has been added to resource instances based on that definition.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/schemaextension-delete?view=graph-rest-1.0
diff --git a/openApiDocs/v1.0/Search.yml b/openApiDocs/v1.0/Search.yml
index 590a7ae2d0..874ec28bef 100644
--- a/openApiDocs/v1.0/Search.yml
+++ b/openApiDocs/v1.0/Search.yml
@@ -3745,6 +3745,7 @@ components:
         - personLanguages
         - personPublications
         - personPatents
+        - personWorkPositions
       type: string
     microsoft.graph.externalConnectors.propertyType:
       title: propertyType
@@ -3917,6 +3918,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.externalConnectors.propertyRule:
       title: propertyRule
       type: object
diff --git a/openApiDocs/v1.0/Security.yml b/openApiDocs/v1.0/Security.yml
index 40b59efea7..7cf9404656 100644
--- a/openApiDocs/v1.0/Security.yml
+++ b/openApiDocs/v1.0/Security.yml
@@ -427,6 +427,10 @@ paths:
       tags:
         - security.alert
       summary: Invoke action moveAlerts
+      description: Move one or more alert resources to a new or existing incident.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-alert-movealerts?view=graph-rest-1.0
       operationId: security.alerts_v2_moveAlert
       requestBody:
         description: Action parameters
@@ -2685,7 +2689,7 @@ paths:
       tags:
         - security.attackSimulationRoot
       summary: Update simulation
-      description: Update an attack simulation campaign for a tenant.
+      description: Update an attack simulation campaign for a tenant. You can only update simulations that are in draft status.
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/simulation-update?view=graph-rest-1.0
@@ -3338,12 +3342,12 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-  /security/cases:
+  /security/auditLog:
     get:
       tags:
-        - security.casesRoot
-      summary: Get cases from security
-      operationId: security_GetCase
+        - security.auditCoreRoot
+      summary: Get auditLog from security
+      operationId: security_GetAuditLog
       parameters:
         - name: $select
           in: query
@@ -3371,21 +3375,21 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
+                $ref: '#/components/schemas/microsoft.graph.security.auditCoreRoot'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
-        - security.casesRoot
-      summary: Update the navigation property cases in security
-      operationId: security_UpdateCase
+        - security.auditCoreRoot
+      summary: Update the navigation property auditLog in security
+      operationId: security_UpdateAuditLog
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
+              $ref: '#/components/schemas/microsoft.graph.security.auditCoreRoot'
         required: true
       responses:
         2XX:
@@ -3393,15 +3397,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
+                $ref: '#/components/schemas/microsoft.graph.security.auditCoreRoot'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
-        - security.casesRoot
-      summary: Delete navigation property cases for security
-      operationId: security_DeleteCase
+        - security.auditCoreRoot
+      summary: Delete navigation property auditLog for security
+      operationId: security_DeleteAuditLog
       parameters:
         - name: If-Match
           in: header
@@ -3415,16 +3419,16 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  /security/cases/ediscoveryCases:
+  /security/auditLog/queries:
     get:
       tags:
-        - security.casesRoot
-      summary: List ediscoveryCases
-      description: Get a list of the ediscoveryCase objects and their properties.
+        - security.auditCoreRoot
+      summary: List auditLogQueries
+      description: Get a list of auditLogQuery objects and their properties.
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-casesroot-list-ediscoverycases?view=graph-rest-1.0
-      operationId: security.case_ListEdiscoveryCase
+        url: https://learn.microsoft.com/graph/api/security-auditcoreroot-list-auditlogqueries?view=graph-rest-1.0
+      operationId: security.auditLog_ListQuery
       parameters:
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
@@ -3463,7 +3467,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.security.ediscoveryCaseCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.security.auditLogQueryCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -3472,19 +3476,19 @@ paths:
       x-ms-docs-operation-type: operation
     post:
       tags:
-        - security.casesRoot
-      summary: Create ediscoveryCase
-      description: Create a new ediscoveryCase object.
+        - security.auditCoreRoot
+      summary: Create auditLogQuery
+      description: Create a new auditLogQuery object.
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-casesroot-post-ediscoverycases?view=graph-rest-1.0
-      operationId: security.case_CreateEdiscoveryCase
+        url: https://learn.microsoft.com/graph/api/security-auditcoreroot-post-auditlogqueries?view=graph-rest-1.0
+      operationId: security.auditLog_CreateQuery
       requestBody:
         description: New navigation property
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+              $ref: '#/components/schemas/microsoft.graph.security.auditLogQuery'
         required: true
       responses:
         2XX:
@@ -3492,29 +3496,29 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+                $ref: '#/components/schemas/microsoft.graph.security.auditLogQuery'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/security/cases/ediscoveryCases/{ediscoveryCase-id}':
+  '/security/auditLog/queries/{auditLogQuery-id}':
     get:
       tags:
-        - security.casesRoot
-      summary: Get ediscoveryCase
-      description: Read the properties and relationships of an ediscoveryCase object.
+        - security.auditCoreRoot
+      summary: Get auditLogQuery
+      description: Read the properties and relationships of an auditLogQuery object.
       externalDocs:
         description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-get?view=graph-rest-1.0
-      operationId: security.case_GetEdiscoveryCase
+        url: https://learn.microsoft.com/graph/api/security-auditlogquery-get?view=graph-rest-1.0
+      operationId: security.auditLog_GetQuery
       parameters:
-        - name: ediscoveryCase-id
+        - name: auditLogQuery-id
           in: path
-          description: The unique identifier of ediscoveryCase
+          description: The unique identifier of auditLogQuery
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: ediscoveryCase
+          x-ms-docs-key-type: auditLogQuery
         - name: $select
           in: query
           description: Select properties to be returned
@@ -3541,63 +3545,24 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    patch:
-      tags:
-        - security.casesRoot
-      summary: Update ediscoveryCase
-      description: Update the properties of an ediscoveryCase object.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-update?view=graph-rest-1.0
-      operationId: security.case_UpdateEdiscoveryCase
-      parameters:
-        - name: ediscoveryCase-id
-          in: path
-          description: The unique identifier of ediscoveryCase
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: ediscoveryCase
-      requestBody:
-        description: New navigation property values
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
-        required: true
-      responses:
-        2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+                $ref: '#/components/schemas/microsoft.graph.security.auditLogQuery'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
-        - security.casesRoot
-      summary: Delete ediscoveryCase
-      description: Delete an ediscoveryCase object.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-casesroot-delete-ediscoverycases?view=graph-rest-1.0
-      operationId: security.case_DeleteEdiscoveryCase
+        - security.auditCoreRoot
+      summary: Delete navigation property queries for security
+      operationId: security.auditLog_DeleteQuery
       parameters:
-        - name: ediscoveryCase-id
+        - name: auditLogQuery-id
           in: path
-          description: The unique identifier of ediscoveryCase
+          description: The unique identifier of auditLogQuery
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: ediscoveryCase
+          x-ms-docs-key-type: auditLogQuery
         - name: If-Match
           in: header
           description: ETag
@@ -3610,25 +3575,22 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/caseMembers':
+  '/security/auditLog/queries/{auditLogQuery-id}/records':
     get:
       tags:
-        - security.casesRoot
-      summary: List ediscoveryCaseMember objects
-      description: Get a list of ediscoveryCaseMember objects for an ediscoveryCase.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-ediscoverycasemember-list?view=graph-rest-1.0
-      operationId: security.case.ediscoveryCase_ListCaseMember
+        - security.auditCoreRoot
+      summary: Get records from security
+      description: An individual audit log record.
+      operationId: security.auditLog.query_ListRecord
       parameters:
-        - name: ediscoveryCase-id
+        - name: auditLogQuery-id
           in: path
-          description: The unique identifier of ediscoveryCase
+          description: The unique identifier of auditLogQuery
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: ediscoveryCase
+          x-ms-docs-key-type: auditLogQuery
         - $ref: '#/components/parameters/top'
         - $ref: '#/components/parameters/skip'
         - $ref: '#/components/parameters/search'
@@ -3666,72 +3628,37 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.security.ediscoveryCaseMemberCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.security.auditLogRecordCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
       x-ms-docs-operation-type: operation
-    post:
-      tags:
-        - security.casesRoot
-      summary: Add ediscoveryCaseMember
-      description: 'Add an ediscoveryCaseMember to an ediscoveryCase. The ediscoveryCaseMember can be one of two types: a user or a role group.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-ediscoverycasemember-post?view=graph-rest-1.0
-      operationId: security.case.ediscoveryCase_CreateCaseMember
-      parameters:
-        - name: ediscoveryCase-id
-          in: path
-          description: The unique identifier of ediscoveryCase
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: ediscoveryCase
-      requestBody:
-        description: New navigation property
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
-        required: true
-      responses:
-        2XX:
-          description: Created navigation property.
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/caseMembers/{ediscoveryCaseMember-id}':
+  '/security/auditLog/queries/{auditLogQuery-id}/records/{auditLogRecord-id}':
     get:
       tags:
-        - security.casesRoot
-      summary: Get caseMembers from security
-      description: Represents members of an eDiscovery case.
-      operationId: security.case.ediscoveryCase_GetCaseMember
+        - security.auditCoreRoot
+      summary: Get records from security
+      description: An individual audit log record.
+      operationId: security.auditLog.query_GetRecord
       parameters:
-        - name: ediscoveryCase-id
+        - name: auditLogQuery-id
           in: path
-          description: The unique identifier of ediscoveryCase
+          description: The unique identifier of auditLogQuery
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: ediscoveryCase
-        - name: ediscoveryCaseMember-id
+          x-ms-docs-key-type: auditLogQuery
+        - name: auditLogRecord-id
           in: path
-          description: The unique identifier of ediscoveryCaseMember
+          description: The unique identifier of auditLogRecord
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: ediscoveryCaseMember
+          x-ms-docs-key-type: auditLogRecord
         - name: $select
           in: query
           description: Select properties to be returned
@@ -3758,102 +3685,39 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
+                $ref: '#/components/schemas/microsoft.graph.security.auditLogRecord'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-    patch:
-      tags:
-        - security.casesRoot
-      summary: Update the navigation property caseMembers in security
-      operationId: security.case.ediscoveryCase_UpdateCaseMember
-      parameters:
-        - name: ediscoveryCase-id
-          in: path
-          description: The unique identifier of ediscoveryCase
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: ediscoveryCase
-        - name: ediscoveryCaseMember-id
-          in: path
-          description: The unique identifier of ediscoveryCaseMember
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: ediscoveryCaseMember
-      requestBody:
-        description: New navigation property values
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
-        required: true
-      responses:
-        2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
-        default:
-          $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    delete:
+  '/security/auditLog/queries/{auditLogQuery-id}/records/$count':
+    get:
       tags:
-        - security.casesRoot
-      summary: Remove ediscoveryCaseMember
-      description: Remove an ediscoveryCaseMember from an ediscoveryCase.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-ediscoverycasemember-delete?view=graph-rest-1.0
-      operationId: security.case.ediscoveryCase_DeleteCaseMember
+        - security.auditCoreRoot
+      summary: Get the number of the resource
+      operationId: security.auditLog.query.record_GetCount
       parameters:
-        - name: ediscoveryCase-id
+        - name: auditLogQuery-id
           in: path
-          description: The unique identifier of ediscoveryCase
+          description: The unique identifier of auditLogQuery
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: ediscoveryCase
-        - name: ediscoveryCaseMember-id
-          in: path
-          description: The unique identifier of ediscoveryCaseMember
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: ediscoveryCaseMember
-        - name: If-Match
-          in: header
-          description: ETag
-          style: simple
-          schema:
-            type: string
+          x-ms-docs-key-type: auditLogQuery
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
       responses:
         2XX:
-          description: Success
+          $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/caseMembers/$count':
+  /security/auditLog/queries/$count:
     get:
       tags:
-        - security.casesRoot
+        - security.auditCoreRoot
       summary: Get the number of the resource
-      operationId: security.case.ediscoveryCase.caseMember_GetCount
+      operationId: security.auditLog.query_GetCount
       parameters:
-        - name: ediscoveryCase-id
-          in: path
-          description: The unique identifier of ediscoveryCase
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: ediscoveryCase
         - $ref: '#/components/parameters/search'
         - $ref: '#/components/parameters/filter'
       responses:
@@ -3861,40 +3725,563 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians':
+  /security/cases:
     get:
       tags:
         - security.casesRoot
-      summary: List ediscoveryCustodian
-      description: Get a list of the custodian objects and their properties.
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-list-custodians?view=graph-rest-1.0
-      operationId: security.case.ediscoveryCase_ListCustodian
+      summary: Get cases from security
+      operationId: security_GetCase
       parameters:
-        - name: ediscoveryCase-id
-          in: path
-          description: The unique identifier of ediscoveryCase
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: ediscoveryCase
-        - $ref: '#/components/parameters/top'
-        - $ref: '#/components/parameters/skip'
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
-        - $ref: '#/components/parameters/count'
-        - name: $orderby
-          in: query
-          description: Order items by property values
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - security.casesRoot
+      summary: Update the navigation property cases in security
+      operationId: security_UpdateCase
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - security.casesRoot
+      summary: Delete navigation property cases for security
+      operationId: security_DeleteCase
+      parameters:
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  /security/cases/ediscoveryCases:
+    get:
+      tags:
+        - security.casesRoot
+      summary: List ediscoveryCases
+      description: Get a list of the ediscoveryCase objects and their properties.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-casesroot-list-ediscoverycases?view=graph-rest-1.0
+      operationId: security.case_ListEdiscoveryCase
+      parameters:
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.security.ediscoveryCaseCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - security.casesRoot
+      summary: Create ediscoveryCase
+      description: Create a new ediscoveryCase object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-casesroot-post-ediscoverycases?view=graph-rest-1.0
+      operationId: security.case_CreateEdiscoveryCase
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/security/cases/ediscoveryCases/{ediscoveryCase-id}':
+    get:
+      tags:
+        - security.casesRoot
+      summary: Get ediscoveryCase
+      description: Read the properties and relationships of an ediscoveryCase object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-get?view=graph-rest-1.0
+      operationId: security.case_GetEdiscoveryCase
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - security.casesRoot
+      summary: Update ediscoveryCase
+      description: Update the properties of an ediscoveryCase object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-update?view=graph-rest-1.0
+      operationId: security.case_UpdateEdiscoveryCase
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - security.casesRoot
+      summary: Delete ediscoveryCase
+      description: Delete an ediscoveryCase object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-casesroot-delete-ediscoverycases?view=graph-rest-1.0
+      operationId: security.case_DeleteEdiscoveryCase
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/caseMembers':
+    get:
+      tags:
+        - security.casesRoot
+      summary: List ediscoveryCaseMember objects
+      description: Get a list of ediscoveryCaseMember objects for an ediscoveryCase.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycasemember-list?view=graph-rest-1.0
+      operationId: security.case.ediscoveryCase_ListCaseMember
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.security.ediscoveryCaseMemberCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - security.casesRoot
+      summary: Add ediscoveryCaseMember
+      description: 'Add an ediscoveryCaseMember to an ediscoveryCase. The ediscoveryCaseMember can be one of two types: a user or a role group.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycasemember-post?view=graph-rest-1.0
+      operationId: security.case.ediscoveryCase_CreateCaseMember
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/caseMembers/{ediscoveryCaseMember-id}':
+    get:
+      tags:
+        - security.casesRoot
+      summary: Get caseMembers from security
+      description: Represents members of an eDiscovery case.
+      operationId: security.case.ediscoveryCase_GetCaseMember
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - name: ediscoveryCaseMember-id
+          in: path
+          description: The unique identifier of ediscoveryCaseMember
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCaseMember
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - security.casesRoot
+      summary: Update the navigation property caseMembers in security
+      operationId: security.case.ediscoveryCase_UpdateCaseMember
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - name: ediscoveryCaseMember-id
+          in: path
+          description: The unique identifier of ediscoveryCaseMember
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCaseMember
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCaseMember'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - security.casesRoot
+      summary: Remove ediscoveryCaseMember
+      description: Remove an ediscoveryCaseMember from an ediscoveryCase.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycasemember-delete?view=graph-rest-1.0
+      operationId: security.case.ediscoveryCase_DeleteCaseMember
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - name: ediscoveryCaseMember-id
+          in: path
+          description: The unique identifier of ediscoveryCaseMember
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCaseMember
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/caseMembers/$count':
+    get:
+      tags:
+        - security.casesRoot
+      summary: Get the number of the resource
+      operationId: security.case.ediscoveryCase.caseMember_GetCount
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians':
+    get:
+      tags:
+        - security.casesRoot
+      summary: List ediscoveryCustodian
+      description: Get a list of the custodian objects and their properties.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-list-custodians?view=graph-rest-1.0
+      operationId: security.case.ediscoveryCase_ListCustodian
+      parameters:
+        - name: ediscoveryCase-id
+          in: path
+          description: The unique identifier of ediscoveryCase
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: ediscoveryCase
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
         - name: $select
           in: query
           description: Select properties to be returned
@@ -5472,6 +5859,9 @@ paths:
       tags:
         - security.casesRoot
       summary: Invoke action applyHold
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-applyhold?view=graph-rest-1.0
       operationId: security.case.ediscoveryCase.custodian_applyHold
       parameters:
         - name: ediscoveryCase-id
@@ -5508,6 +5898,9 @@ paths:
       tags:
         - security.casesRoot
       summary: Invoke action removeHold
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-removehold?view=graph-rest-1.0
       operationId: security.case.ediscoveryCase.custodian_removeHold
       parameters:
         - name: ediscoveryCase-id
@@ -6151,6 +6544,9 @@ paths:
       tags:
         - security.casesRoot
       summary: Invoke action applyHold
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverynoncustodialdatasource-applyhold?view=graph-rest-1.0
       operationId: security.case.ediscoveryCase.noncustodialDataSource_applyHold
       parameters:
         - name: ediscoveryCase-id
@@ -6187,6 +6583,9 @@ paths:
       tags:
         - security.casesRoot
       summary: Invoke action removeHold
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoverynoncustodialdatasource-removehold?view=graph-rest-1.0
       operationId: security.case.ediscoveryCase.noncustodialDataSource_removeHold
       parameters:
         - name: ediscoveryCase-id
@@ -9053,6 +9452,9 @@ paths:
         - security.casesRoot
       summary: Invoke function asHierarchy
       description: List eDiscovery review tags with the tag hierarchy shown.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-ediscoveryreviewtag-ashierarchy?view=graph-rest-1.0
       operationId: security.case.ediscoveryCase.tag_asHierarchy
       parameters:
         - name: ediscoveryCase-id
@@ -9136,6 +9538,324 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
+  /security/collaboration:
+    get:
+      tags:
+        - security.collaborationRoot
+      summary: Get collaboration from security
+      operationId: security_GetCollaboration
+      parameters:
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.collaborationRoot'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - security.collaborationRoot
+      summary: Update the navigation property collaboration in security
+      operationId: security_UpdateCollaboration
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.collaborationRoot'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.collaborationRoot'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - security.collaborationRoot
+      summary: Delete navigation property collaboration for security
+      operationId: security_DeleteCollaboration
+      parameters:
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  /security/collaboration/analyzedEmails:
+    get:
+      tags:
+        - security.collaborationRoot
+      summary: List analyzedEmails
+      description: 'Get a list of analyzedEmail objects and their properties. This API allows Security Operations teams to have direct access to hunt (query) for threats, IOCs, attack vectors, and evidences for a tenant. It is a powerful, near real-time tool to help Security Operations teams investigate and respond to threats. It consists of email metadata, verdict information, related underlying entities (attachments/URL), filters, and more.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-collaborationroot-list-analyzedemails?view=graph-rest-1.0
+      operationId: security.collaboration_ListAnalyzedEmail
+      parameters:
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.security.analyzedEmailCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - security.collaborationRoot
+      summary: Create new navigation property to analyzedEmails for security
+      operationId: security.collaboration_CreateAnalyzedEmail
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/security/collaboration/analyzedEmails/{analyzedEmail-id}':
+    get:
+      tags:
+        - security.collaborationRoot
+      summary: Get analyzedEmail
+      description: Read the properties and relationships of an analyzedEmail object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-analyzedemail-get?view=graph-rest-1.0
+      operationId: security.collaboration_GetAnalyzedEmail
+      parameters:
+        - name: analyzedEmail-id
+          in: path
+          description: The unique identifier of analyzedEmail
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: analyzedEmail
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - security.collaborationRoot
+      summary: Update the navigation property analyzedEmails in security
+      operationId: security.collaboration_UpdateAnalyzedEmail
+      parameters:
+        - name: analyzedEmail-id
+          in: path
+          description: The unique identifier of analyzedEmail
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: analyzedEmail
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - security.collaborationRoot
+      summary: Delete navigation property analyzedEmails for security
+      operationId: security.collaboration_DeleteAnalyzedEmail
+      parameters:
+        - name: analyzedEmail-id
+          in: path
+          description: The unique identifier of analyzedEmail
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: analyzedEmail
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  /security/collaboration/analyzedEmails/$count:
+    get:
+      tags:
+        - security.collaborationRoot
+      summary: Get the number of the resource
+      operationId: security.collaboration.analyzedEmail_GetCount
+      parameters:
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  /security/collaboration/analyzedEmails/microsoft.graph.security.remediate:
+    post:
+      tags:
+        - security.collaborationRoot
+      summary: Invoke action remediate
+      description: 'Remove a potential threat from end users'' mailboxes. Remediation means to take prescribed action against a threat. This API can trigger email purge actions like move to junk, move to deleted items, soft delete, hard delete, or move to Inbox. This API enables scenarios and use cases such as SOAR integration, playbooks, and automations. For more information read email remediation, trigger action and track actions. If there is false positives admins can take move to inbox action.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-analyzedemail-remediate?view=graph-rest-1.0
+      operationId: security.collaboration.analyzedEmail_remediate
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                displayName:
+                  type: string
+                  nullable: true
+                description:
+                  type: string
+                  nullable: true
+                severity:
+                  $ref: '#/components/schemas/microsoft.graph.security.remediationSeverity'
+                action:
+                  $ref: '#/components/schemas/microsoft.graph.security.remediationAction'
+                remediateSendersCopy:
+                  type: boolean
+                  default: false
+                  nullable: true
+                analyzedEmails:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
   /security/dataSecurityAndGovernance:
     get:
       tags:
@@ -10923,6 +11643,9 @@ paths:
         - security.identityContainer
       summary: Invoke action activate
       description: Activate Microsoft Defender for Identity sensors.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-sensorcandidate-activate?view=graph-rest-1.0
       operationId: security.identity.sensorCandidate_activate
       requestBody:
         description: Action parameters
@@ -11292,6 +12015,9 @@ paths:
         - security.identityContainer
       summary: Invoke function getDeploymentAccessKey
       description: Get the deployment access key for Microsoft Defender for Identity that is required to install sensors associated with the workspace.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-sensor-getdeploymentaccesskey?view=graph-rest-1.0
       operationId: security.identity.sensor_getDeploymentAccessKey
       responses:
         2XX:
@@ -11309,6 +12035,9 @@ paths:
         - security.identityContainer
       summary: Invoke function getDeploymentPackageUri
       description: Get the sensor deployment package URL and version. You can use this URL to download the installer to install the sensor on a server.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-sensor-getdeploymentpackageuri?view=graph-rest-1.0
       operationId: security.identity.sensor_getDeploymentPackageUri
       responses:
         2XX:
@@ -11326,6 +12055,9 @@ paths:
         - security.identityContainer
       summary: Invoke action regenerateDeploymentAccessKey
       description: Generate a new deployment access key that can be used to install a sensor associated with the workspace.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-sensor-regeneratedeploymentaccesskey?view=graph-rest-1.0
       operationId: security.identity.sensor_regenerateDeploymentAccessKey
       responses:
         2XX:
@@ -11921,6 +12653,10 @@ paths:
       tags:
         - security.incident
       summary: Invoke action mergeIncidents
+      description: Merge multiple incident resources into a single incident.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-incident-mergeincidents?view=graph-rest-1.0
       operationId: security.incident_mergeIncident
       requestBody:
         description: Action parameters
@@ -13389,8 +14125,11 @@ paths:
     get:
       tags:
         - security.labelsRoot
-      summary: Get retentionLabels from security
-      description: 'Represents how customers can manage their data, whether and for how long to retain or delete it.'
+      summary: Get retentionLabel
+      description: Read the properties and relationships of a retentionLabel object.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/security-retentionlabel-get?view=graph-rest-1.0
       operationId: security.label_GetRetentionLabel
       parameters:
         - name: retentionLabel-id
@@ -23233,8 +23972,12 @@ components:
               x-ms-navigationProperty: true
             attackSimulation:
               $ref: '#/components/schemas/microsoft.graph.attackSimulationRoot'
+            auditLog:
+              $ref: '#/components/schemas/microsoft.graph.security.auditCoreRoot'
             cases:
               $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
+            collaboration:
+              $ref: '#/components/schemas/microsoft.graph.security.collaborationRoot'
             dataSecurityAndGovernance:
               $ref: '#/components/schemas/microsoft.graph.tenantDataSecurityAndGovernance'
             identities:
@@ -23270,6 +24013,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.security.triggerTypesRoot'
           additionalProperties:
             type: object
+          description: Security singleton providing access to audit log resources.
     microsoft.graph.alert:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -23657,6 +24401,7 @@ components:
       properties:
         targetIncidentId:
           type: string
+          description: The ID of the target incident after the operation completes.
       additionalProperties:
         type: object
     microsoft.graph.attackSimulationRoot:
@@ -24276,6 +25021,152 @@ components:
               description: Content locale for the training detail.
           additionalProperties:
             type: object
+    microsoft.graph.security.auditCoreRoot:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: auditCoreRoot
+          type: object
+          properties:
+            queries:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.auditLogQuery'
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
+          description: Root entity for the audit log API.
+    microsoft.graph.security.auditLogQuery:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: auditLogQuery
+          type: object
+          properties:
+            administrativeUnitIdFilters:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: The administrative units tagged to an audit log record.
+            displayName:
+              type: string
+              description: The display name of the saved audit log query.
+              nullable: true
+            filterEndDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              description: The end date of the date range in the query.
+              format: date-time
+              nullable: true
+            filterStartDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              description: The start date of the date range in the query.
+              format: date-time
+              nullable: true
+            ipAddressFilters:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: The IP address of the device that was used when the activity was logged.
+            keywordFilter:
+              type: string
+              description: Free text field to search non-indexed properties of the audit log.
+              nullable: true
+            objectIdFilters:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: 'For SharePoint and OneDrive for Business activity, the full path name of the file or folder accessed by the user. For Exchange admin audit logging, the name of the object that was modified by the cmdlet.'
+            operationFilters:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: 'The name of the user or admin activity. For a description of the most common operations/activities, see Search the audit log in the Office 365 Protection Center.'
+            recordTypeFilters:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.auditLogRecordType'
+              description: 'The type of operation indicated by the record. For the list of member values, see auditLogRecordType.'
+            serviceFilters:
+              type: array
+              items:
+                type: string
+                nullable: true
+            status:
+              $ref: '#/components/schemas/microsoft.graph.security.auditLogQueryStatus'
+            userPrincipalNameFilters:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: 'The UPN (user principal name) of the user who performed the action (specified in the operation property) that resulted in the record being logged; for example, myname@mydomain_name.'
+            records:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.auditLogRecord'
+              description: An individual audit log record.
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
+          description: Represents a query against the unified audit log.
+    microsoft.graph.security.auditLogRecord:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: auditLogRecord
+          type: object
+          properties:
+            administrativeUnits:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: The administrative units tagged to an audit log record.
+            auditData:
+              $ref: '#/components/schemas/microsoft.graph.security.auditData'
+            auditLogRecordType:
+              $ref: '#/components/schemas/microsoft.graph.security.auditLogRecordType'
+            clientIp:
+              type: string
+              description: The IP address of the device used when the activity was logged. The IP address is displayed in either an IPv4 or IPv6 address format.
+              nullable: true
+            createdDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              description: The date and time in UTC when the user performed the activity.
+              format: date-time
+              nullable: true
+            objectId:
+              type: string
+              description: 'For Exchange admin audit logging, the name of the object modified by the cmdlet. For SharePoint activity, the full URL path name of the file or folder accessed by a user. For Microsoft Entra activity, the name of the user account that was modified.'
+              nullable: true
+            operation:
+              type: string
+              description: The name of the user or admin activity.
+              nullable: true
+            organizationId:
+              type: string
+              description: The GUID for your organization.
+              nullable: true
+            service:
+              type: string
+              description: The Microsoft 365 service where the activity occurred.
+              nullable: true
+            userId:
+              type: string
+              description: 'The user who performed the action (specified in the Operation property) that resulted in the record being logged. Audit records for activity performed by system accounts (such as SHAREPOINT/system or NT AUTHORITY/SYSTEM) are also included in the audit log. Another common value for the UserId property is app@sharepoint. It indicates that the ''user'' who performed the activity was an application with the necessary permissions in SharePoint to perform organization-wide actions (such as searching a SharePoint site or OneDrive account) on behalf of a user, admin, or service.'
+              nullable: true
+            userPrincipalName:
+              type: string
+              description: UPN of the user who performed the action.
+              nullable: true
+            userType:
+              $ref: '#/components/schemas/microsoft.graph.security.auditLogUserType'
+          additionalProperties:
+            type: object
+          description: Represents an individual audit log record.
     microsoft.graph.security.casesRoot:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -24541,6 +25432,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -24549,7 +25442,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -24612,6 +25505,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -24646,6 +25543,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -24723,11 +25622,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -24874,7 +25787,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.security.userSource:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.security.dataSource'
@@ -25019,6 +25931,7 @@ components:
         - messageConversationExpansion
         - locationsWithoutHits
         - allItemsInFolder
+        - cloudNativeHtmlConversion
       type: string
       x-ms-enum-flags:
         isFlags: true
@@ -25255,6 +26168,203 @@ components:
               $ref: '#/components/schemas/microsoft.graph.security.topicModelingSettings'
           additionalProperties:
             type: object
+    microsoft.graph.security.collaborationRoot:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: collaborationRoot
+          type: object
+          properties:
+            analyzedEmails:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+              description: Contains metadata for analyzed emails.
+              x-ms-navigationProperty: true
+          additionalProperties:
+            type: object
+    microsoft.graph.security.analyzedEmail:
+      allOf:
+        - $ref: '#/components/schemas/microsoft.graph.entity'
+        - title: analyzedEmail
+          type: object
+          properties:
+            alertIds:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: A collection of values that contain the IDs of any alerts associated with the email.
+            attachments:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailAttachment'
+              description: A collection of the attachments in the email.
+            authenticationDetails:
+              $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailAuthenticationDetail'
+            bulkComplaintLevel:
+              type: string
+              description: The bulk complaint level of the email. A higher level is more likely to be spam.
+              nullable: true
+            clientType:
+              type: string
+              description: 'Shows the type of client that sent the message (for example, REST).'
+              nullable: true
+            contexts:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: Provides context of the email.
+            detectionMethods:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: The methods of detection used.
+            directionality:
+              $ref: '#/components/schemas/microsoft.graph.security.antispamDirectionality'
+            distributionList:
+              type: string
+              description: The distribution list details to which the email was sent.
+              nullable: true
+            dlpRules:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailDlpRuleInfo'
+              description: Data loss prevention rules configured in purview.
+            emailClusterId:
+              type: string
+              description: The identifier for the group of similar emails clustered based on heuristic analysis of their content.
+              nullable: true
+            exchangeTransportRules:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailExchangeTransportRuleInfo'
+              description: The name of the Exchange transport rules (ETRs) associated with the email.
+            forwardingDetail:
+              type: string
+              description: Email smtp forwarding details.
+              nullable: true
+            inboundConnectorFormattedName:
+              type: string
+              description: Custom instructions name that defines organizational mail flow and how the email was routed.
+              nullable: true
+            internetMessageId:
+              type: string
+              description: A public-facing identifier for the email that is sent. The message ID is in the format specified by RFC2822.
+              nullable: true
+            language:
+              type: string
+              description: The detected language of the email content.
+              nullable: true
+            latestDelivery:
+              $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailDeliveryDetail'
+            loggedDateTime:
+              pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+              type: string
+              description: Date-time when the email record was logged.
+              format: date-time
+              nullable: true
+            networkMessageId:
+              type: string
+              description: An internal identifier for the email generated by Microsoft 365.
+              nullable: true
+            originalDelivery:
+              $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailDeliveryDetail'
+            overrideSources:
+              type: array
+              items:
+                type: string
+                nullable: true
+              description: An aggregated list of all overrides with source on email.
+            phishConfidenceLevel:
+              type: string
+              description: The phish confidence level associated with the email
+              nullable: true
+            policy:
+              type: string
+              description: The action policy that took effect.
+              nullable: true
+            policyAction:
+              type: string
+              description: The action taken on the email based on the configured policy.
+              nullable: true
+            policyType:
+              type: string
+              description: Type of policy configured that defines the delivery action on email.
+              nullable: true
+            primaryOverrideSource:
+              type: string
+              description: 'Shows the organization or user setting that altered the intended delivery location of the message (allowed instead of blocked, or blocked instead of allowed).'
+              nullable: true
+            recipientDetail:
+              $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailRecipientDetail'
+            recipientEmailAddress:
+              type: string
+              description: Contains the email address of the recipient.
+              nullable: true
+            returnPath:
+              type: string
+              description: A field that indicates where and how bounced emails are processed.
+              nullable: true
+            senderDetail:
+              $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailSenderDetail'
+            sizeInBytes:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: Size of the email in bytes.
+              format: int32
+              nullable: true
+            spamConfidenceLevel:
+              type: string
+              description: Spam confidence of the email.
+              nullable: true
+            subject:
+              type: string
+              description: Subject of the email.
+              nullable: true
+            threatDetectionDetails:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.threatDetectionDetail'
+              description: Information about threats detected in the email.
+            threatTypes:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.threatType'
+              description: 'Indicates the threat types. The possible values are: unknown, spam, malware, phish, none, unknownFutureValue.'
+            timelineEvents:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.timelineEvent'
+              description: Delivery and post-delivery events that happened to the email.
+            urls:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailUrl'
+              description: A collection of the URLs in the email.
+          additionalProperties:
+            type: object
+    microsoft.graph.security.remediationSeverity:
+      title: remediationSeverity
+      enum:
+        - low
+        - medium
+        - high
+        - unknownFutureValue
+      type: string
+    microsoft.graph.security.remediationAction:
+      title: remediationAction
+      enum:
+        - moveToJunk
+        - moveToInbox
+        - hardDelete
+        - softDelete
+        - moveToDeletedItems
+        - unknownFutureValue
+        - moveToQuarantine
+      type: string
     microsoft.graph.tenantDataSecurityAndGovernance:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.dataSecurityAndGovernance'
@@ -26390,7 +27500,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -26417,7 +27527,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -26564,7 +27674,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -26586,7 +27696,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -26619,7 +27729,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -26717,7 +27827,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -26974,7 +28084,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.mailboxSettings:
       title: mailboxSettings
       type: object
@@ -28700,6 +29809,7 @@ components:
         - microsoftSentinel
         - microsoftInsiderRiskManagement
         - microsoftThreatIntelligence
+        - microsoftSecurityForAI
       type: string
     microsoft.graph.security.alertSeverity:
       title: alertSeverity
@@ -29055,6 +30165,520 @@ components:
         - phishing
         - unknownFutureValue
       type: string
+    microsoft.graph.security.auditLogRecordType:
+      title: auditLogRecordType
+      enum:
+        - ExchangeAdmin
+        - ExchangeItem
+        - ExchangeItemGroup
+        - SharePoint
+        - SyntheticProbe
+        - SharePointFileOperation
+        - OneDrive
+        - AzureActiveDirectory
+        - AzureActiveDirectoryAccountLogon
+        - DataCenterSecurityCmdlet
+        - ComplianceDLPSharePoint
+        - Sway
+        - ComplianceDLPExchange
+        - SharePointSharingOperation
+        - AzureActiveDirectoryStsLogon
+        - SkypeForBusinessPSTNUsage
+        - SkypeForBusinessUsersBlocked
+        - SecurityComplianceCenterEOPCmdlet
+        - ExchangeAggregatedOperation
+        - PowerBIAudit
+        - CRM
+        - Yammer
+        - SkypeForBusinessCmdlets
+        - Discovery
+        - MicrosoftTeams
+        - ThreatIntelligence
+        - MailSubmission
+        - MicrosoftFlow
+        - AeD
+        - MicrosoftStream
+        - ComplianceDLPSharePointClassification
+        - ThreatFinder
+        - Project
+        - SharePointListOperation
+        - SharePointCommentOperation
+        - DataGovernance
+        - Kaizala
+        - SecurityComplianceAlerts
+        - ThreatIntelligenceUrl
+        - SecurityComplianceInsights
+        - MIPLabel
+        - WorkplaceAnalytics
+        - PowerAppsApp
+        - PowerAppsPlan
+        - ThreatIntelligenceAtpContent
+        - LabelContentExplorer
+        - TeamsHealthcare
+        - ExchangeItemAggregated
+        - HygieneEvent
+        - DataInsightsRestApiAudit
+        - InformationBarrierPolicyApplication
+        - SharePointListItemOperation
+        - SharePointContentTypeOperation
+        - SharePointFieldOperation
+        - MicrosoftTeamsAdmin
+        - HRSignal
+        - MicrosoftTeamsDevice
+        - MicrosoftTeamsAnalytics
+        - InformationWorkerProtection
+        - Campaign
+        - DLPEndpoint
+        - AirInvestigation
+        - Quarantine
+        - MicrosoftForms
+        - ApplicationAudit
+        - ComplianceSupervisionExchange
+        - CustomerKeyServiceEncryption
+        - OfficeNative
+        - MipAutoLabelSharePointItem
+        - MipAutoLabelSharePointPolicyLocation
+        - MicrosoftTeamsShifts
+        - SecureScore
+        - MipAutoLabelExchangeItem
+        - CortanaBriefing
+        - Search
+        - WDATPAlerts
+        - PowerPlatformAdminDlp
+        - PowerPlatformAdminEnvironment
+        - MDATPAudit
+        - SensitivityLabelPolicyMatch
+        - SensitivityLabelAction
+        - SensitivityLabeledFileAction
+        - AttackSim
+        - AirManualInvestigation
+        - SecurityComplianceRBAC
+        - UserTraining
+        - AirAdminActionInvestigation
+        - MSTIC
+        - PhysicalBadgingSignal
+        - TeamsEasyApprovals
+        - AipDiscover
+        - AipSensitivityLabelAction
+        - AipProtectionAction
+        - AipFileDeleted
+        - AipHeartBeat
+        - MCASAlerts
+        - OnPremisesFileShareScannerDlp
+        - OnPremisesSharePointScannerDlp
+        - ExchangeSearch
+        - SharePointSearch
+        - PrivacyDataMinimization
+        - LabelAnalyticsAggregate
+        - MyAnalyticsSettings
+        - SecurityComplianceUserChange
+        - ComplianceDLPExchangeClassification
+        - ComplianceDLPEndpoint
+        - MipExactDataMatch
+        - MSDEResponseActions
+        - MSDEGeneralSettings
+        - MSDEIndicatorsSettings
+        - MS365DCustomDetection
+        - MSDERolesSettings
+        - MAPGAlerts
+        - MAPGPolicy
+        - MAPGRemediation
+        - PrivacyRemediationAction
+        - PrivacyDigestEmail
+        - MipAutoLabelSimulationProgress
+        - MipAutoLabelSimulationCompletion
+        - MipAutoLabelProgressFeedback
+        - DlpSensitiveInformationType
+        - MipAutoLabelSimulationStatistics
+        - LargeContentMetadata
+        - Microsoft365Group
+        - CDPMlInferencingResult
+        - FilteringMailMetadata
+        - CDPClassificationMailItem
+        - CDPClassificationDocument
+        - OfficeScriptsRunAction
+        - FilteringPostMailDeliveryAction
+        - CDPUnifiedFeedback
+        - TenantAllowBlockList
+        - ConsumptionResource
+        - HealthcareSignal
+        - DlpImportResult
+        - CDPCompliancePolicyExecution
+        - MultiStageDisposition
+        - PrivacyDataMatch
+        - FilteringDocMetadata
+        - FilteringEmailFeatures
+        - PowerBIDlp
+        - FilteringUrlInfo
+        - FilteringAttachmentInfo
+        - CoreReportingSettings
+        - ComplianceConnector
+        - PowerPlatformLockboxResourceAccessRequest
+        - PowerPlatformLockboxResourceCommand
+        - CDPPredictiveCodingLabel
+        - CDPCompliancePolicyUserFeedback
+        - WebpageActivityEndpoint
+        - OMEPortal
+        - CMImprovementActionChange
+        - FilteringUrlClick
+        - MipLabelAnalyticsAuditRecord
+        - FilteringEntityEvent
+        - FilteringRuleHits
+        - FilteringMailSubmission
+        - LabelExplorer
+        - MicrosoftManagedServicePlatform
+        - PowerPlatformServiceActivity
+        - ScorePlatformGenericAuditRecord
+        - FilteringTimeTravelDocMetadata
+        - Alert
+        - AlertStatus
+        - AlertIncident
+        - IncidentStatus
+        - Case
+        - CaseInvestigation
+        - RecordsManagement
+        - PrivacyRemediation
+        - DataShareOperation
+        - CdpDlpSensitive
+        - EHRConnector
+        - FilteringMailGradingResult
+        - PublicFolder
+        - PrivacyTenantAuditHistoryRecord
+        - AipScannerDiscoverEvent
+        - EduDataLakeDownloadOperation
+        - M365ComplianceConnector
+        - MicrosoftGraphDataConnectOperation
+        - MicrosoftPurview
+        - FilteringEmailContentFeatures
+        - PowerPagesSite
+        - PowerAppsResource
+        - PlannerPlan
+        - PlannerCopyPlan
+        - PlannerTask
+        - PlannerRoster
+        - PlannerPlanList
+        - PlannerTaskList
+        - PlannerTenantSettings
+        - ProjectForTheWebProject
+        - ProjectForTheWebTask
+        - ProjectForTheWebRoadmap
+        - ProjectForTheWebRoadmapItem
+        - ProjectForTheWebProjectSettings
+        - ProjectForTheWebRoadmapSettings
+        - QuarantineMetadata
+        - MicrosoftTodoAudit
+        - TimeTravelFilteringDocMetadata
+        - TeamsQuarantineMetadata
+        - SharePointAppPermissionOperation
+        - MicrosoftTeamsSensitivityLabelAction
+        - FilteringTeamsMetadata
+        - FilteringTeamsUrlInfo
+        - FilteringTeamsPostDeliveryAction
+        - MDCAssessments
+        - MDCRegulatoryComplianceStandards
+        - MDCRegulatoryComplianceControls
+        - MDCRegulatoryComplianceAssessments
+        - MDCSecurityConnectors
+        - MDADataSecuritySignal
+        - VivaGoals
+        - FilteringRuntimeInfo
+        - AttackSimAdmin
+        - MicrosoftGraphDataConnectConsent
+        - FilteringAtpDetonationInfo
+        - PrivacyPortal
+        - ManagedTenants
+        - UnifiedSimulationMatchedItem
+        - UnifiedSimulationSummary
+        - UpdateQuarantineMetadata
+        - MS365DSuppressionRule
+        - PurviewDataMapOperation
+        - FilteringUrlPostClickAction
+        - IrmUserDefinedDetectionSignal
+        - TeamsUpdates
+        - PlannerRosterSensitivityLabel
+        - MS365DIncident
+        - FilteringDelistingMetadata
+        - ComplianceDLPSharePointClassificationExtended
+        - MicrosoftDefenderForIdentityAudit
+        - SupervisoryReviewDayXInsight
+        - DefenderExpertsforXDRAdmin
+        - CDPEdgeBlockedMessage
+        - HostedRpa
+        - CdpContentExplorerAggregateRecord
+        - CDPHygieneAttachmentInfo
+        - CDPHygieneSummary
+        - CDPPostMailDeliveryAction
+        - CDPEmailFeatures
+        - CDPHygieneUrlInfo
+        - CDPUrlClick
+        - CDPPackageManagerHygieneEvent
+        - FilteringDocScan
+        - TimeTravelFilteringDocScan
+        - MAPGOnboard
+        - VfamCreatePolicy
+        - VfamUpdatePolicy
+        - VfamDeletePolicy
+        - M365DAAD
+        - CdpColdCrawlStatus
+        - PowerPlatformAdministratorActivity
+        - Windows365CustomerLockbox
+        - CdpResourceScopeChangeEvent
+        - ComplianceCCExchangeExecutionResult
+        - CdpOcrCostEstimatorRecord
+        - CopilotInteraction
+        - CdpOcrBillingRecord
+        - ComplianceDLPApplications
+        - UAMOperation
+        - VivaLearning
+        - VivaLearningAdmin
+        - PurviewPolicyOperation
+        - PurviewMetadataPolicyOperation
+        - PeopleAdminSettings
+        - CdpComplianceDLPExchangeClassification
+        - CdpComplianceDLPSharePointClassification
+        - FilteringBulkSenderInsightData
+        - FilteringBulkThresholdInsightData
+        - PrivacyOpenAccess
+        - OWAAuth
+        - ComplianceDLPApplicationsClassification
+        - SharePointESignature
+        - Dynamics365BusinessCentral
+        - MeshWorlds
+        - VivaPulseResponse
+        - VivaPulseOrganizer
+        - VivaPulseAdmin
+        - VivaPulseReport
+        - AIAppInteraction
+        - ComplianceDLMExchange
+        - ComplianceDLMSharePoint
+        - ProjectForTheWebAssignedToMeSettings
+        - CPSOperation
+        - ComplianceDLPExchangeDiscovery
+        - PurviewMCRecommendation
+        - ComplianceDLPEndpointDiscovery
+        - InsiderRiskScopedUserInsights
+        - MicrosoftTeamsRetentionLabelAction
+        - AadRiskDetection
+        - AuditSearch
+        - AuditRetentionPolicy
+        - AuditConfig
+        - Microsoft365BackupBackupPolicy
+        - Microsoft365BackupRestoreTask
+        - Microsoft365BackupRestoreItem
+        - Microsoft365BackupBackupItem
+        - URBACAssignment
+        - URBACRole
+        - URBACEnableState
+        - IRMSecurityAlert
+        - PurviewInsiderRiskCases
+        - PurviewInsiderRiskAlerts
+        - InsiderRiskScopedUsers
+        - CdpConsumptionResource
+        - CreateCopilotPlugin
+        - UpdateCopilotPlugin
+        - DeleteCopilotPlugin
+        - EnableCopilotPlugin
+        - DisableCopilotPlugin
+        - CreateCopilotWorkspace
+        - UpdateCopilotWorkspace
+        - DeleteCopilotWorkspace
+        - EnableCopilotWorkspace
+        - DisableCopilotWorkspace
+        - CreateCopilotPromptBook
+        - UpdateCopilotPromptBook
+        - DeleteCopilotPromptBook
+        - EnableCopilotPromptBook
+        - DisableCopilotPromptBook
+        - UpdateCopilotSettings
+        - P4AIAssessmentRecord
+        - P4AIAssessmentLocationResultRecord
+        - ConnectedAIAppInteraction
+        - PrivaPrivacyConsentOperation
+        - PrivaPrivacyAssessmentOperation
+        - DataCatalogAccessRequests
+        - ComplianceSettingsChange
+        - DataSecurityInvestigation
+        - TeamCopilotInteraction
+        - IRMActivityAuditTrail
+        - SharePointContentSecurityPolicy
+        - CloudUpdateProfileConfig
+        - CloudUpdateTenantConfig
+        - CloudUpdateDeviceConfig
+        - DefenderPreviewFeatures
+        - DeviceDiscoverySettingsExclusion
+        - DeviceDiscoverySettingsAuthenticatedScans
+        - CriticalAssetManagementClassification
+        - DeviceDiscoverySettings
+        - USXWorkspaceOnboarding
+        - VivaGlintAdvancedConfiguration
+        - VivaGlintPulseProgram
+        - VivaGlintPulseProgramRespondentRate
+        - VivaGlintQuestion
+        - VivaGlintRole
+        - VivaGlintRubicon
+        - VivaGlintSupportAccess
+        - VivaGlintSystem
+        - VivaGlintUser
+        - VivaGlintUserGroup
+        - VivaGlintFeedbackProgram
+        - FabricAudit
+        - TrainableClassifier
+        - WebContentFiltering
+        - NoisyAlertPolicy
+        - OnDemandSharePointClassification
+        - AIInteractionsExport
+        - Microsoft365CopilotScheduledPrompt
+        - PlacesDirectory
+        - MDAAudit
+        - OpticalCharacterRecognition
+        - M365SearchSections
+        - OfficeClientRestrictedModeAction
+        - CrossTenantAccessPolicy
+        - OutlookCopilotAutomation
+        - VivaEngageNetworkAssociation
+        - AppAdminActivity
+        - AppSettingsAdminActivity
+        - UniversalPrintPrintJob
+        - SentinelNotebookOnLake
+        - SentinelJob
+        - SentinelGraph
+        - SentinelKQLOnLake
+        - SentinelPackage
+        - VivaAmplifyOutlookSensitivityLabel
+        - CopilotActions
+        - AIInteractionsSubscription
+        - AIInteractionsChangeNotification
+        - FilteringMailMetadataExtended
+        - SentinelLakeOnboarding
+        - SentinelLakeDataOnboarding
+        - OfficeRestrictedModeAction
+        - CopilotForSecurityTrigger
+        - CopilotAgentManagement
+        - P4AIAssessmentFabricScannerRecord
+        - PlannerGoal
+        - PlannerGoalList
+        - ThreatIntelligenceObject
+        - ThreatIntelligenceExport
+        - SubmissionAgenticGradingResult
+        - AgentAdminActivity
+        - DeployFeatureActivity
+        - AgentSettingsAdminActivity
+        - OrganizationalDataInM365
+        - PlannerChatMessage
+        - PlannerChatMessageList
+        - SentinelAITool
+        - M365ODSPAssetMetadata
+        - AIExecuteTool
+        - AIInvokeAgent
+        - AIInferenceCall
+        - CdpClassifierHealthRecord
+        - SensitiveInfoRemediationAgentData
+        - ComplianceDLPEnforcement
+        - A365AIExecuteTool
+        - A365AIInvokeAgent
+        - A365AIInferenceCall
+        - VivaEngageSegment
+        - RTIOperationsAgent
+        - ContentStoreMetadata
+        - CCRAIPolicyViolation
+        - PlannerPlanSensitivityLabel
+        - MosAgentInfoRecord
+        - A365AIRunSummary
+        - UnifiedCatalogConceptAction
+        - DefenderCaseManagement
+        - CopilotForSecurityLogging
+        - VivaEngageEvents
+        - CallActivityEvent
+        - SonarDetonationContentMetadata
+        - UniversalPrintManagement
+        - YammerUserHiding
+        - Microsoft365BackupGranularBrowseTask
+        - PurviewPostureAgent
+        - MSDECustomCollection
+        - SCPUsageEvent
+        - SCPConfigurationEvent
+        - MDCConfigurationEvent
+        - MDCUsageEvent
+        - A365SpanOutputs
+        - PowerPlatformTenantIsolation
+        - CDPDLMAIInteractionInsights
+        - P4AIAssessmentCategoryRecord
+        - SentinelLakeEncryption
+        - AZFWNetworkRule
+        - AZFWDnsQuery
+        - AZFWApplicationRuleAggregation
+        - TeamsEvalDataHubDataAccess
+        - TeamsEvalDataHubPermissionChange
+        - TeamsEvalDataHubAdminOperation
+        - VivaGlintOrganizationalData
+        - AlertSubmission
+        - AlertSubmissionResultDetail
+        - ComplianceSitGradingSharePoint
+        - CompliancePolicyGradingSharePoint
+        - AzureAISearchAudit
+        - P4AIRiskScoreRecord
+        - DragonCopilotAdmin
+        - AISpanOutputs
+        - EopSubmissionFeedEntity
+        - SonarFileDetonationEntity
+        - SonarSubmissionEntity
+        - SonarUrlDetonationEntity
+        - SubmissionEntity
+        - SonarDetonationEntity
+        - MicrosoftTeamsUserConcern
+        - VivaGlintAgenticCampaign
+        - MSPVectorSearchContentMetadata
+        - FabricPolicy
+        - SecurityCopilotAgentIdentityManagement
+        - CopilotSessionSharing
+        - DragonCopilotAccess
+        - DragonCopilotClinicalData
+        - DragonCopilotSession
+        - MosAgentInfoRecordV2
+        - SecurityDevelopmentLifecycleAILog
+        - MDASH
+        - DefenderSecurityForAIConfiguration
+        - SparkCoreCustomLivePool
+        - unknownFutureValue
+      type: string
+      description: Specifies the type of audit log record.
+    microsoft.graph.security.auditLogQueryStatus:
+      title: auditLogQueryStatus
+      enum:
+        - notStarted
+        - running
+        - succeeded
+        - failed
+        - cancelled
+        - unknownFutureValue
+      type: string
+      description: Status of an audit log query.
+    microsoft.graph.security.auditData:
+      title: auditData
+      type: object
+      properties:
+        dynamicProperties:
+          $ref: '#/components/schemas/microsoft.graph.security.auditRecordTypeDictionary'
+      additionalProperties:
+        type: object
+      description: Abstract base type for audit event data.
+    microsoft.graph.security.auditLogUserType:
+      title: auditLogUserType
+      enum:
+        - Regular
+        - Reserved
+        - Admin
+        - DcAdmin
+        - System
+        - Application
+        - ServicePrincipal
+        - CustomPolicy
+        - SystemPolicy
+        - PartnerTechnician
+        - Guest
+        - unknownFutureValue
+      type: string
+      description: Type of user associated with an audit log record.
     microsoft.graph.security.case:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -29553,6 +31177,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -29746,6 +31375,15 @@ components:
               nullable: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -29788,6 +31426,72 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.onPremisesExtensionAttributes:
+      title: onPremisesExtensionAttributes
+      type: object
+      properties:
+        extensionAttribute1:
+          type: string
+          description: First customizable extension attribute.
+          nullable: true
+        extensionAttribute10:
+          type: string
+          description: Tenth customizable extension attribute.
+          nullable: true
+        extensionAttribute11:
+          type: string
+          description: Eleventh customizable extension attribute.
+          nullable: true
+        extensionAttribute12:
+          type: string
+          description: Twelfth customizable extension attribute.
+          nullable: true
+        extensionAttribute13:
+          type: string
+          description: Thirteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute14:
+          type: string
+          description: Fourteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute15:
+          type: string
+          description: Fifteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute2:
+          type: string
+          description: Second customizable extension attribute.
+          nullable: true
+        extensionAttribute3:
+          type: string
+          description: Third customizable extension attribute.
+          nullable: true
+        extensionAttribute4:
+          type: string
+          description: Fourth customizable extension attribute.
+          nullable: true
+        extensionAttribute5:
+          type: string
+          description: Fifth customizable extension attribute.
+          nullable: true
+        extensionAttribute6:
+          type: string
+          description: Sixth customizable extension attribute.
+          nullable: true
+        extensionAttribute7:
+          type: string
+          description: Seventh customizable extension attribute.
+          nullable: true
+        extensionAttribute8:
+          type: string
+          description: Eighth customizable extension attribute.
+          nullable: true
+        extensionAttribute9:
+          type: string
+          description: Ninth customizable extension attribute.
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.onPremisesProvisioningError:
       title: onPremisesProvisioningError
       type: object
@@ -30619,6 +32323,264 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.security.analyzedEmailAttachment:
+      title: analyzedEmailAttachment
+      type: object
+      properties:
+        detonationDetails:
+          $ref: '#/components/schemas/microsoft.graph.security.detonationDetails'
+        fileExtension:
+          type: string
+          description: Extension of the file.
+          nullable: true
+        fileName:
+          type: string
+          description: The name of the attachment in the email.
+          nullable: true
+        fileSize:
+          maximum: 2147483647
+          minimum: -2147483648
+          type: number
+          description: Size of the file.
+          format: int32
+          nullable: true
+        fileType:
+          type: string
+          description: The type of the attachment in the email.
+          nullable: true
+        malwareFamily:
+          type: string
+          description: The threat name associated with the threat type.
+          nullable: true
+        sha256:
+          type: string
+          description: The SHA256 file hash of the attachment.
+          nullable: true
+        tenantAllowBlockListDetailInfo:
+          type: string
+          description: Details of entries in tenant allow/block list configured by tenant.
+          nullable: true
+        threatType:
+          $ref: '#/components/schemas/microsoft.graph.security.threatType'
+      additionalProperties:
+        type: object
+    microsoft.graph.security.analyzedEmailAuthenticationDetail:
+      title: analyzedEmailAuthenticationDetail
+      type: object
+      properties:
+        compositeAuthentication:
+          type: string
+          description: 'A value used by Microsoft 365 to combine email authentication such as SPF, DKIM, and DMARC, to determine whether the message is authentic.'
+          nullable: true
+        dkim:
+          type: string
+          description: DomainKeys identified mail (DKIM). Indicates whether it was pass/fail/soft fail.
+          nullable: true
+        dmarc:
+          type: string
+          description: Domain-based Message Authentication. Indicates whether it was pass/fail/soft fail.
+          nullable: true
+        senderPolicyFramework:
+          type: string
+          description: Sender Policy Framework (SPF). Indicates whether it was pass/fail/soft fail.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.antispamDirectionality:
+      title: antispamDirectionality
+      enum:
+        - unknown
+        - inbound
+        - outbound
+        - intraOrg
+        - unknownFutureValue
+      type: string
+    microsoft.graph.security.analyzedEmailDlpRuleInfo:
+      title: analyzedEmailDlpRuleInfo
+      type: object
+      properties:
+        name:
+          type: string
+          description: Name of the the data loss prevention rule.
+          nullable: true
+        ruleId:
+          type: string
+          description: Unique identifier of the data loss prevention rule.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.analyzedEmailExchangeTransportRuleInfo:
+      title: analyzedEmailExchangeTransportRuleInfo
+      type: object
+      properties:
+        name:
+          type: string
+          description: Name of the Exchange transport rules (ETRs) that are part of the email.
+          nullable: true
+        ruleId:
+          type: string
+          description: The ETR rule ID.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.analyzedEmailDeliveryDetail:
+      title: analyzedEmailDeliveryDetail
+      type: object
+      properties:
+        action:
+          $ref: '#/components/schemas/microsoft.graph.security.deliveryAction'
+        latestThreats:
+          type: string
+          description: Latest known threat on the email.
+          nullable: true
+        location:
+          $ref: '#/components/schemas/microsoft.graph.security.deliveryLocation'
+        originalThreats:
+          type: string
+          description: Threats identified at the time of delivery.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.analyzedEmailRecipientDetail:
+      title: analyzedEmailRecipientDetail
+      type: object
+      properties:
+        ccRecipients:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: Recipient address in the cc field.
+        domainName:
+          type: string
+          description: Domain name of the recipient.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.analyzedEmailSenderDetail:
+      title: analyzedEmailSenderDetail
+      type: object
+      properties:
+        displayName:
+          type: string
+          description: Display name of sender from address.
+          nullable: true
+        domainCreationDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: Date and time of creation of the sender domain.
+          format: date-time
+          nullable: true
+        domainName:
+          type: string
+          description: Registered name of the domain.
+          nullable: true
+        domainOwner:
+          type: string
+          description: Owner of the domain.
+          nullable: true
+        fromAddress:
+          type: string
+          description: 'The sender email address in the mail From header, also known as the envelope sender or the P1 sender.'
+          nullable: true
+        ipv4:
+          type: string
+          description: The IPv4 address of the last detected mail server that relayed the message.
+          nullable: true
+        location:
+          type: string
+          description: Location of the domain.
+          nullable: true
+        mailFromAddress:
+          type: string
+          description: 'The sender email address in the From header, which is visible to email recipients on their email clients. Also known as P2 sender.'
+          nullable: true
+        mailFromDomainName:
+          type: string
+          description: Domain name of sender mail from address.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.threatDetectionDetail:
+      title: threatDetectionDetail
+      type: object
+      properties:
+        confidenceLevel:
+          type: string
+          description: Indicates the confidence level in the threat detection.
+          nullable: true
+        priorityAccountProtection:
+          type: string
+          description: Indicates if the account has priority protection enabled.
+          nullable: true
+        threats:
+          type: string
+          description: Lists the detected threats.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.threatType:
+      title: threatType
+      enum:
+        - unknown
+        - spam
+        - malware
+        - phish
+        - none
+        - unknownFutureValue
+      type: string
+    microsoft.graph.security.timelineEvent:
+      title: timelineEvent
+      type: object
+      properties:
+        eventDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: The date and time when the event occurred.
+          format: date-time
+          nullable: true
+        eventDetails:
+          type: string
+          description: Additional details or context about the event.
+          nullable: true
+        eventResult:
+          type: string
+          description: 'The outcome or result of the event, such as delivery location or action taken.'
+          nullable: true
+        eventSource:
+          $ref: '#/components/schemas/microsoft.graph.security.eventSource'
+        eventThreats:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: Collection of threats identified or associated with this event.
+        eventType:
+          $ref: '#/components/schemas/microsoft.graph.security.timelineEventType'
+      additionalProperties:
+        type: object
+    microsoft.graph.security.analyzedEmailUrl:
+      title: analyzedEmailUrl
+      type: object
+      properties:
+        detectionMethod:
+          type: string
+          description: The method used to detect threats in the URL.
+          nullable: true
+        detonationDetails:
+          $ref: '#/components/schemas/microsoft.graph.security.detonationDetails'
+        tenantAllowBlockListDetailInfo:
+          type: string
+          description: Details of entries in tenant allow/block list configured by tenant.
+          nullable: true
+        threatType:
+          $ref: '#/components/schemas/microsoft.graph.security.threatType'
+        url:
+          type: string
+          description: 'The URL that is found in the email. This is full URL string, including query parameters.'
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.dataSecurityAndGovernance:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -31366,72 +33328,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.onPremisesExtensionAttributes:
-      title: onPremisesExtensionAttributes
-      type: object
-      properties:
-        extensionAttribute1:
-          type: string
-          description: First customizable extension attribute.
-          nullable: true
-        extensionAttribute10:
-          type: string
-          description: Tenth customizable extension attribute.
-          nullable: true
-        extensionAttribute11:
-          type: string
-          description: Eleventh customizable extension attribute.
-          nullable: true
-        extensionAttribute12:
-          type: string
-          description: Twelfth customizable extension attribute.
-          nullable: true
-        extensionAttribute13:
-          type: string
-          description: Thirteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute14:
-          type: string
-          description: Fourteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute15:
-          type: string
-          description: Fifteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute2:
-          type: string
-          description: Second customizable extension attribute.
-          nullable: true
-        extensionAttribute3:
-          type: string
-          description: Third customizable extension attribute.
-          nullable: true
-        extensionAttribute4:
-          type: string
-          description: Fourth customizable extension attribute.
-          nullable: true
-        extensionAttribute5:
-          type: string
-          description: Fifth customizable extension attribute.
-          nullable: true
-        extensionAttribute6:
-          type: string
-          description: Sixth customizable extension attribute.
-          nullable: true
-        extensionAttribute7:
-          type: string
-          description: Seventh customizable extension attribute.
-          nullable: true
-        extensionAttribute8:
-          type: string
-          description: Eighth customizable extension attribute.
-          nullable: true
-        extensionAttribute9:
-          type: string
-          description: Ninth customizable extension attribute.
-          nullable: true
-      additionalProperties:
-        type: object
     microsoft.graph.passwordProfile:
       title: passwordProfile
       type: object
@@ -32889,7 +34785,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -33372,7 +35267,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -33579,7 +35474,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -34252,6 +36147,32 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.security.auditLogQueryCollectionResponse:
+      title: Collection of auditLogQuery
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.security.auditLogQuery'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.auditLogRecordCollectionResponse:
+      title: Collection of auditLogRecord
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.security.auditLogRecord'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.security.ediscoveryCaseCollectionResponse:
       title: Collection of ediscoveryCase
       type: object
@@ -34434,6 +36355,19 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.security.analyzedEmailCollectionResponse:
+      title: Collection of analyzedEmail
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.security.analyzedEmail'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.sensitivityLabelCollectionResponse:
       title: Collection of sensitivityLabel
       type: object
@@ -35301,6 +37235,12 @@ components:
         - custom
         - unknownFutureValue
       type: string
+    microsoft.graph.security.auditRecordTypeDictionary:
+      title: auditRecordTypeDictionary
+      type: object
+      additionalProperties:
+        type: object
+      description: A dictionary of name-value pairs for dynamic audit event properties.
     microsoft.graph.security.caseStatus:
       title: caseStatus
       enum:
@@ -35992,6 +37932,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -36842,6 +38787,107 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.security.detonationDetails:
+      title: detonationDetails
+      type: object
+      properties:
+        analysisDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: The time of detonation.
+          format: date-time
+          nullable: true
+        compromiseIndicators:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.security.compromiseIndicator'
+          description: Represents indicators and its associated verdict that suggests whether an email is compromised.
+        detonationBehaviourDetails:
+          $ref: '#/components/schemas/microsoft.graph.security.detonationBehaviourDetails'
+        detonationBehaviourDetailsV2:
+          type: string
+          description: 'Shows the exact events that took place during detonation, and problematic or benign observations that contain URLs, IPs, domains, and files that were found during detonation in a JSON format.'
+          nullable: true
+        detonationChain:
+          $ref: '#/components/schemas/microsoft.graph.security.detonationChain'
+        detonationObservables:
+          $ref: '#/components/schemas/microsoft.graph.security.detonationObservables'
+        detonationScreenshotUri:
+          type: string
+          description: 'Show any screenshots that were captured during detonation. No screenshots are captured if the URL opens into a link that directly downloads a file. However, you see the downloaded file in the detonation chain.'
+          nullable: true
+        detonationVerdict:
+          type: string
+          description: The verdict of the detonation.
+          nullable: true
+        detonationVerdictReason:
+          type: string
+          description: The reason for the verdict of the detonation.
+          nullable: true
+        entityMetadata:
+          type: string
+          description: Additional metadata about the entity in JSON format.
+          nullable: true
+        mitreTechniques:
+          type: string
+          description: 'The attack techniques, as aligned with the MITRE ATT&CK framework.'
+          nullable: true
+        staticAnalysis:
+          type: string
+          description: The results of static analysis performed on the file or URL.
+          nullable: true
+        submissionSource:
+          type: string
+          description: The source of the submission.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.deliveryAction:
+      title: deliveryAction
+      enum:
+        - unknown
+        - deliveredToJunk
+        - delivered
+        - blocked
+        - replaced
+        - unknownFutureValue
+      type: string
+    microsoft.graph.security.deliveryLocation:
+      title: deliveryLocation
+      enum:
+        - unknown
+        - inbox_folder
+        - junkFolder
+        - deletedFolder
+        - quarantine
+        - onprem_external
+        - failed
+        - dropped
+        - others
+        - unknownFutureValue
+      type: string
+    microsoft.graph.security.eventSource:
+      title: eventSource
+      enum:
+        - system
+        - admin
+        - user
+        - unknownFutureValue
+      type: string
+    microsoft.graph.security.timelineEventType:
+      title: timelineEventType
+      enum:
+        - originalDelivery
+        - systemTimeTravel
+        - dynamicDelivery
+        - userUrlClick
+        - reprocessed
+        - zap
+        - quarantineRelease
+        - air
+        - unknown
+        - unknownFutureValue
+      type: string
     microsoft.graph.activityMetadata:
       title: activityMetadata
       type: object
@@ -37061,6 +39107,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -37547,7 +39594,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -37563,13 +39610,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -41362,6 +43409,101 @@ components:
               $ref: '#/components/schemas/microsoft.graph.plannerUserIds'
           additionalProperties:
             type: object
+    microsoft.graph.security.compromiseIndicator:
+      title: compromiseIndicator
+      type: object
+      properties:
+        value:
+          type: string
+          description: Indicator.
+          nullable: true
+        verdict:
+          $ref: '#/components/schemas/microsoft.graph.security.verdictCategory'
+      additionalProperties:
+        type: object
+    microsoft.graph.security.detonationBehaviourDetails:
+      title: detonationBehaviourDetails
+      type: object
+      properties:
+        actionStatus:
+          type: string
+          description: 'The status of the action performed during detonation (e.g., ''Successful'', ''Failed'', ''Blocked'').'
+          nullable: true
+        behaviourCapability:
+          type: string
+          description: Categorizes the capability or type of behavior observed.
+          nullable: true
+        behaviourGroup:
+          type: string
+          description: Groups related behaviors together for classification purposes.
+          nullable: true
+        details:
+          type: string
+          description: More contextual information about the observed behavior or action.
+          nullable: true
+        eventDateTime:
+          pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
+          type: string
+          description: The date and time when the behavior or action was observed during detonation.
+          format: date-time
+          nullable: true
+        operation:
+          type: string
+          description: The specific operation or action that was performed.
+          nullable: true
+        processId:
+          type: string
+          description: The unique identifier of the process involved in the behavior.
+          nullable: true
+        processName:
+          type: string
+          description: The name of the process that performed or was involved in the behavior.
+          nullable: true
+        target:
+          type: string
+          description: The target of the operation.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.detonationChain:
+      title: detonationChain
+      type: object
+      properties:
+        childNodes:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.security.detonationChain'
+          description: A list of all child nodes in the chain.
+        value:
+          type: string
+          description: The value of the chain.
+          nullable: true
+      additionalProperties:
+        type: object
+    microsoft.graph.security.detonationObservables:
+      title: detonationObservables
+      type: object
+      properties:
+        contactedIps:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The list of all contacted IPs in the detonation.
+        contactedUrls:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The list of all URLs found in the detonation.
+        droppedfiles:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The list of all dropped files in the detonation.
+      additionalProperties:
+        type: object
     microsoft.graph.userActivityType:
       title: userActivityType
       enum:
@@ -44255,6 +46397,20 @@ components:
       type: object
       additionalProperties:
         type: object
+    microsoft.graph.security.verdictCategory:
+      title: verdictCategory
+      enum:
+        - none
+        - malware
+        - phish
+        - siteUnavailable
+        - spam
+        - decryptionFailed
+        - unsupportedUriScheme
+        - unsupportedFileType
+        - undefined
+        - unknownFutureValue
+      type: string
     microsoft.graph.classifcationErrorBase:
       title: classifcationErrorBase
       type: object
@@ -47849,6 +50005,18 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.trainingLanguageDetailCollectionResponse'
+    microsoft.graph.security.auditLogQueryCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.security.auditLogQueryCollectionResponse'
+    microsoft.graph.security.auditLogRecordCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.security.auditLogRecordCollectionResponse'
     microsoft.graph.security.ediscoveryCaseCollectionResponse:
       description: Retrieved collection
       content:
@@ -47933,6 +50101,12 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.security.ediscoveryReviewTagCollectionResponse'
+    microsoft.graph.security.analyzedEmailCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.security.analyzedEmailCollectionResponse'
     microsoft.graph.sensitivityLabelCollectionResponse:
       description: Retrieved collection
       content:
diff --git a/openApiDocs/v1.0/Sites.yml b/openApiDocs/v1.0/Sites.yml
index 6cbc9e1e43..acc029c0ce 100644
--- a/openApiDocs/v1.0/Sites.yml
+++ b/openApiDocs/v1.0/Sites.yml
@@ -10207,13 +10207,12 @@ paths:
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
-  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions':
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions':
     get:
       tags:
         - groups.site
-      summary: Get versions from groups
-      description: The list of previous versions of the list item.
-      operationId: group.site.list.item_ListVersion
+      summary: Get permissions from groups
+      operationId: group.site.list.item_ListPermission
       parameters:
         - name: group-id
           in: path
@@ -10284,7 +10283,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.listItemVersionCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.permissionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -10294,8 +10293,8 @@ paths:
     post:
       tags:
         - groups.site
-      summary: Create new navigation property to versions for groups
-      operationId: group.site.list.item_CreateVersion
+      summary: Create new navigation property to permissions for groups
+      operationId: group.site.list.item_CreatePermission
       parameters:
         - name: group-id
           in: path
@@ -10334,7 +10333,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+              $ref: '#/components/schemas/microsoft.graph.permission'
         required: true
       responses:
         2XX:
@@ -10342,17 +10341,16 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+                $ref: '#/components/schemas/microsoft.graph.permission'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions/{listItemVersion-id}':
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions/{permission-id}':
     get:
       tags:
         - groups.site
-      summary: Get versions from groups
-      description: The list of previous versions of the list item.
-      operationId: group.site.list.item_GetVersion
+      summary: Get permissions from groups
+      operationId: group.site.list.item_GetPermission
       parameters:
         - name: group-id
           in: path
@@ -10386,14 +10384,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: listItem
-        - name: listItemVersion-id
+        - name: permission-id
           in: path
-          description: The unique identifier of listItemVersion
+          description: The unique identifier of permission
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: listItemVersion
+          x-ms-docs-key-type: permission
         - name: $select
           in: query
           description: Select properties to be returned
@@ -10420,15 +10418,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+                $ref: '#/components/schemas/microsoft.graph.permission'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - groups.site
-      summary: Update the navigation property versions in groups
-      operationId: group.site.list.item_UpdateVersion
+      summary: Update the navigation property permissions in groups
+      operationId: group.site.list.item_UpdatePermission
       parameters:
         - name: group-id
           in: path
@@ -10462,20 +10460,20 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: listItem
-        - name: listItemVersion-id
+        - name: permission-id
           in: path
-          description: The unique identifier of listItemVersion
+          description: The unique identifier of permission
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: listItemVersion
+          x-ms-docs-key-type: permission
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+              $ref: '#/components/schemas/microsoft.graph.permission'
         required: true
       responses:
         2XX:
@@ -10483,15 +10481,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+                $ref: '#/components/schemas/microsoft.graph.permission'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - groups.site
-      summary: Delete navigation property versions for groups
-      operationId: group.site.list.item_DeleteVersion
+      summary: Delete navigation property permissions for groups
+      operationId: group.site.list.item_DeletePermission
       parameters:
         - name: group-id
           in: path
@@ -10525,14 +10523,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: listItem
-        - name: listItemVersion-id
+        - name: permission-id
           in: path
-          description: The unique identifier of listItemVersion
+          description: The unique identifier of permission
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: listItemVersion
+          x-ms-docs-key-type: permission
         - name: If-Match
           in: header
           description: ETag
@@ -10545,13 +10543,16 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions/{listItemVersion-id}/fields':
-    get:
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions/{permission-id}/microsoft.graph.grant':
+    post:
       tags:
         - groups.site
-      summary: Get fields from groups
-      description: A collection of the fields and values for this version of the list item.
-      operationId: group.site.list.item.version_GetField
+      summary: Invoke action grant
+      description: Grant users access to a link represented by a permission.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/permission-grant?view=graph-rest-1.0
+      operationId: group.site.list.item.permission_grant
       parameters:
         - name: group-id
           in: path
@@ -10585,49 +10586,63 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: listItem
-        - name: listItemVersion-id
+        - name: permission-id
           in: path
-          description: The unique identifier of listItemVersion
+          description: The unique identifier of permission
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: listItemVersion
-        - name: $select
-          in: query
-          description: Select properties to be returned
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
-        - name: $expand
-          in: query
-          description: Expand related entities
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
+          x-ms-docs-key-type: permission
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                roles:
+                  type: array
+                  items:
+                    type: string
+                    nullable: true
+                recipients:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.driveRecipient'
+              additionalProperties:
+                type: object
+        required: true
       responses:
         2XX:
-          description: Retrieved navigation property
+          description: Success
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+                title: Collection of permission
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.permission'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    patch:
+      x-ms-docs-operation-type: action
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions/$count':
+    get:
       tags:
         - groups.site
-      summary: Update the navigation property fields in groups
-      operationId: group.site.list.item.version_UpdateField
+      summary: Get the number of the resource
+      operationId: group.site.list.item.permission_GetCount
       parameters:
         - name: group-id
           in: path
@@ -10661,36 +10676,20 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: listItem
-        - name: listItemVersion-id
-          in: path
-          description: The unique identifier of listItemVersion
-          required: true
-          style: simple
-          schema:
-            type: string
-          x-ms-docs-key-type: listItemVersion
-      requestBody:
-        description: New navigation property values
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
-        required: true
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
       responses:
         2XX:
-          description: Success
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+          $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-      x-ms-docs-operation-type: operation
-    delete:
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions':
+    get:
       tags:
         - groups.site
-      summary: Delete navigation property fields for groups
-      operationId: group.site.list.item.version_DeleteField
+      summary: Get versions from groups
+      description: The list of previous versions of the list item.
+      operationId: group.site.list.item_ListVersion
       parameters:
         - name: group-id
           in: path
@@ -10724,36 +10723,513 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: listItem
-        - name: listItemVersion-id
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.listItemVersionCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - groups.site
+      summary: Create new navigation property to versions for groups
+      operationId: group.site.list.item_CreateVersion
+      parameters:
+        - name: group-id
           in: path
-          description: The unique identifier of listItemVersion
+          description: The unique identifier of group
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: listItemVersion
-        - name: If-Match
-          in: header
-          description: ETag
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
           style: simple
           schema:
             type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+        required: true
       responses:
         2XX:
-          description: Success
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.listItemVersion'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions/{listItemVersion-id}/microsoft.graph.restoreVersion':
-    post:
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions/{listItemVersion-id}':
+    get:
       tags:
         - groups.site
-      summary: Invoke action restoreVersion
-      description: 'Restore a previous version of a ListItem to be the current version. This will create a new version with the contents of the previous version, but preserves all existing versions of the item.'
-      externalDocs:
-        description: Find more info here
-        url: https://learn.microsoft.com/graph/api/listitemversion-restore?view=graph-rest-1.0
-      operationId: group.site.list.item.version_restoreVersion
+      summary: Get versions from groups
+      description: The list of previous versions of the list item.
+      operationId: group.site.list.item_GetVersion
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: listItemVersion-id
+          in: path
+          description: The unique identifier of listItemVersion
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItemVersion
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - groups.site
+      summary: Update the navigation property versions in groups
+      operationId: group.site.list.item_UpdateVersion
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: listItemVersion-id
+          in: path
+          description: The unique identifier of listItemVersion
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItemVersion
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.listItemVersion'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - groups.site
+      summary: Delete navigation property versions for groups
+      operationId: group.site.list.item_DeleteVersion
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: listItemVersion-id
+          in: path
+          description: The unique identifier of listItemVersion
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItemVersion
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions/{listItemVersion-id}/fields':
+    get:
+      tags:
+        - groups.site
+      summary: Get fields from groups
+      description: A collection of the fields and values for this version of the list item.
+      operationId: group.site.list.item.version_GetField
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: listItemVersion-id
+          in: path
+          description: The unique identifier of listItemVersion
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItemVersion
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - groups.site
+      summary: Update the navigation property fields in groups
+      operationId: group.site.list.item.version_UpdateField
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: listItemVersion-id
+          in: path
+          description: The unique identifier of listItemVersion
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItemVersion
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - groups.site
+      summary: Delete navigation property fields for groups
+      operationId: group.site.list.item.version_DeleteField
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: listItemVersion-id
+          in: path
+          description: The unique identifier of listItemVersion
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItemVersion
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions/{listItemVersion-id}/microsoft.graph.restoreVersion':
+    post:
+      tags:
+        - groups.site
+      summary: Invoke action restoreVersion
+      description: 'Restore a previous version of a ListItem to be the current version. This will create a new version with the contents of the previous version, but preserves all existing versions of the item.'
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/listitemversion-restore?view=graph-rest-1.0
+      operationId: group.site.list.item.version_restoreVersion
       parameters:
         - name: group-id
           in: path
@@ -11663,6 +12139,426 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/permissions':
+    get:
+      tags:
+        - groups.site
+      summary: Get permissions from groups
+      operationId: group.site.list_ListPermission
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.permissionCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - groups.site
+      summary: Create new navigation property to permissions for groups
+      operationId: group.site.list_CreatePermission
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.permission'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/permissions/{permission-id}':
+    get:
+      tags:
+        - groups.site
+      summary: Get permissions from groups
+      operationId: group.site.list_GetPermission
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - groups.site
+      summary: Update the navigation property permissions in groups
+      operationId: group.site.list_UpdatePermission
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.permission'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - groups.site
+      summary: Delete navigation property permissions for groups
+      operationId: group.site.list_DeletePermission
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/permissions/{permission-id}/microsoft.graph.grant':
+    post:
+      tags:
+        - groups.site
+      summary: Invoke action grant
+      description: Grant users access to a link represented by a permission.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/permission-grant?view=graph-rest-1.0
+      operationId: group.site.list.permission_grant
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                roles:
+                  type: array
+                  items:
+                    type: string
+                    nullable: true
+                recipients:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.driveRecipient'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                title: Collection of permission
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.permission'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/groups/{group-id}/sites/{site-id}/lists/{list-id}/permissions/$count':
+    get:
+      tags:
+        - groups.site
+      summary: Get the number of the resource
+      operationId: group.site.list.permission_GetCount
+      parameters:
+        - name: group-id
+          in: path
+          description: The unique identifier of group
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: group
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
   '/groups/{group-id}/sites/{site-id}/lists/{list-id}/subscriptions':
     get:
       tags:
@@ -74109,6 +75005,426 @@ paths:
       x-ms-pageable:
         nextLinkName: '@odata.nextLink'
         operationName: listMore
+  '/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions':
+    get:
+      tags:
+        - sites.list
+      summary: Get permissions from sites
+      operationId: site.list.item_ListPermission
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.permissionCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - sites.list
+      summary: Create new navigation property to permissions for sites
+      operationId: site.list.item_CreatePermission
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.permission'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions/{permission-id}':
+    get:
+      tags:
+        - sites.list
+      summary: Get permissions from sites
+      operationId: site.list.item_GetPermission
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    patch:
+      tags:
+        - sites.list
+      summary: Update the navigation property permissions in sites
+      operationId: site.list.item_UpdatePermission
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+      requestBody:
+        description: New navigation property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.permission'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+    delete:
+      tags:
+        - sites.list
+      summary: Delete navigation property permissions for sites
+      operationId: site.list.item_DeletePermission
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
+          schema:
+            type: string
+      responses:
+        2XX:
+          description: Success
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions/{permission-id}/microsoft.graph.grant':
+    post:
+      tags:
+        - sites.list
+      summary: Invoke action grant
+      description: Grant users access to a link represented by a permission.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/permission-grant?view=graph-rest-1.0
+      operationId: site.list.item.permission_grant
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                roles:
+                  type: array
+                  items:
+                    type: string
+                    nullable: true
+                recipients:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.driveRecipient'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                title: Collection of permission
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.permission'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/sites/{site-id}/lists/{list-id}/items/{listItem-id}/permissions/$count':
+    get:
+      tags:
+        - sites.list
+      summary: Get the number of the resource
+      operationId: site.list.item.permission_GetCount
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: listItem-id
+          in: path
+          description: The unique identifier of listItem
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: listItem
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
   '/sites/{site-id}/lists/{list-id}/items/{listItem-id}/versions':
     get:
       tags:
@@ -74957,18 +76273,322 @@ paths:
               type: string
       responses:
         2XX:
-          description: Entity result.
+          description: Entity result.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.mailboxSettings'
+        default:
+          $ref: '#/components/responses/error'
+    patch:
+      tags:
+        - sites.list
+      summary: Update property mailboxSettings value.
+      operationId: site.list.lastModifiedGraphBPreUser_UpdateMailboxSetting
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+      requestBody:
+        description: New property values
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.mailboxSettings'
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.mailboxSettings'
+        default:
+          $ref: '#/components/responses/error'
+  '/sites/{site-id}/lists/{list-id}/lastModifiedByUser/serviceProvisioningErrors':
+    get:
+      tags:
+        - sites.list
+      summary: Get serviceProvisioningErrors property value
+      description: 'Errors published by a federated service describing a nontransient, service-specific error regarding the properties or link from a user object.  Supports $filter (eq, not, for isResolved and serviceInstance).'
+      operationId: site.list.lastModifiedGraphBPreUser_ListServiceProvisioningError
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.serviceProvisioningErrorCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/sites/{site-id}/lists/{list-id}/lastModifiedByUser/serviceProvisioningErrors/$count':
+    get:
+      tags:
+        - sites.list
+      summary: Get the number of the resource
+      operationId: site.list.lastModifiedGraphBPreUser.ServiceProvisioningError_GetCount
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+      responses:
+        2XX:
+          $ref: '#/components/responses/ODataCountResponse'
+        default:
+          $ref: '#/components/responses/error'
+  '/sites/{site-id}/lists/{list-id}/operations':
+    get:
+      tags:
+        - sites.list
+      summary: Get operations from sites
+      description: The collection of long-running operations on the list.
+      operationId: site.list_ListOperation
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - $ref: '#/components/parameters/top'
+        - $ref: '#/components/parameters/skip'
+        - $ref: '#/components/parameters/search'
+        - $ref: '#/components/parameters/filter'
+        - $ref: '#/components/parameters/count'
+        - name: $orderby
+          in: query
+          description: Order items by property values
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          $ref: '#/components/responses/microsoft.graph.richLongRunningOperationCollectionResponse'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+      x-ms-docs-operation-type: operation
+    post:
+      tags:
+        - sites.list
+      summary: Create new navigation property to operations for sites
+      operationId: site.list_CreateOperation
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+      requestBody:
+        description: New navigation property
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
+        required: true
+      responses:
+        2XX:
+          description: Created navigation property.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
+  '/sites/{site-id}/lists/{list-id}/operations/{richLongRunningOperation-id}':
+    get:
+      tags:
+        - sites.list
+      summary: Get operations from sites
+      description: The collection of long-running operations on the list.
+      operationId: site.list_GetOperation
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: richLongRunningOperation-id
+          in: path
+          description: The unique identifier of richLongRunningOperation
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: richLongRunningOperation
+        - name: $select
+          in: query
+          description: Select properties to be returned
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+        - name: $expand
+          in: query
+          description: Expand related entities
+          style: form
+          explode: false
+          schema:
+            uniqueItems: true
+            type: array
+            items:
+              type: string
+      responses:
+        2XX:
+          description: Retrieved navigation property
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.mailboxSettings'
+                $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
         default:
           $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: operation
     patch:
       tags:
         - sites.list
-      summary: Update property mailboxSettings value.
-      operationId: site.list.lastModifiedGraphBPreUser_UpdateMailboxSetting
+      summary: Update the navigation property operations in sites
+      operationId: site.list_UpdateOperation
       parameters:
         - name: site-id
           in: path
@@ -74986,12 +76606,20 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: list
+        - name: richLongRunningOperation-id
+          in: path
+          description: The unique identifier of richLongRunningOperation
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: richLongRunningOperation
       requestBody:
-        description: New property values
+        description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.mailboxSettings'
+              $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
         required: true
       responses:
         2XX:
@@ -74999,16 +76627,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.mailboxSettings'
+                $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
         default:
           $ref: '#/components/responses/error'
-  '/sites/{site-id}/lists/{list-id}/lastModifiedByUser/serviceProvisioningErrors':
-    get:
+      x-ms-docs-operation-type: operation
+    delete:
       tags:
         - sites.list
-      summary: Get serviceProvisioningErrors property value
-      description: 'Errors published by a federated service describing a nontransient, service-specific error regarding the properties or link from a user object.  Supports $filter (eq, not, for isResolved and serviceInstance).'
-      operationId: site.list.lastModifiedGraphBPreUser_ListServiceProvisioningError
+      summary: Delete navigation property operations for sites
+      operationId: site.list_DeleteOperation
       parameters:
         - name: site-id
           in: path
@@ -75026,55 +76653,32 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: list
-        - $ref: '#/components/parameters/top'
-        - $ref: '#/components/parameters/skip'
-        - $ref: '#/components/parameters/search'
-        - $ref: '#/components/parameters/filter'
-        - $ref: '#/components/parameters/count'
-        - name: $orderby
-          in: query
-          description: Order items by property values
-          style: form
-          explode: false
-          schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
-        - name: $select
-          in: query
-          description: Select properties to be returned
-          style: form
-          explode: false
+        - name: richLongRunningOperation-id
+          in: path
+          description: The unique identifier of richLongRunningOperation
+          required: true
+          style: simple
           schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
-        - name: $expand
-          in: query
-          description: Expand related entities
-          style: form
-          explode: false
+            type: string
+          x-ms-docs-key-type: richLongRunningOperation
+        - name: If-Match
+          in: header
+          description: ETag
+          style: simple
           schema:
-            uniqueItems: true
-            type: array
-            items:
-              type: string
+            type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.serviceProvisioningErrorCollectionResponse'
+          description: Success
         default:
           $ref: '#/components/responses/error'
-      x-ms-pageable:
-        nextLinkName: '@odata.nextLink'
-        operationName: listMore
-  '/sites/{site-id}/lists/{list-id}/lastModifiedByUser/serviceProvisioningErrors/$count':
+      x-ms-docs-operation-type: operation
+  '/sites/{site-id}/lists/{list-id}/operations/$count':
     get:
       tags:
         - sites.list
       summary: Get the number of the resource
-      operationId: site.list.lastModifiedGraphBPreUser.ServiceProvisioningError_GetCount
+      operationId: site.list.operation_GetCount
       parameters:
         - name: site-id
           in: path
@@ -75099,13 +76703,12 @@ paths:
           $ref: '#/components/responses/ODataCountResponse'
         default:
           $ref: '#/components/responses/error'
-  '/sites/{site-id}/lists/{list-id}/operations':
+  '/sites/{site-id}/lists/{list-id}/permissions':
     get:
       tags:
         - sites.list
-      summary: Get operations from sites
-      description: The collection of long-running operations on the list.
-      operationId: site.list_ListOperation
+      summary: Get permissions from sites
+      operationId: site.list_ListPermission
       parameters:
         - name: site-id
           in: path
@@ -75160,7 +76763,7 @@ paths:
               type: string
       responses:
         2XX:
-          $ref: '#/components/responses/microsoft.graph.richLongRunningOperationCollectionResponse'
+          $ref: '#/components/responses/microsoft.graph.permissionCollectionResponse'
         default:
           $ref: '#/components/responses/error'
       x-ms-pageable:
@@ -75170,8 +76773,8 @@ paths:
     post:
       tags:
         - sites.list
-      summary: Create new navigation property to operations for sites
-      operationId: site.list_CreateOperation
+      summary: Create new navigation property to permissions for sites
+      operationId: site.list_CreatePermission
       parameters:
         - name: site-id
           in: path
@@ -75194,7 +76797,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
+              $ref: '#/components/schemas/microsoft.graph.permission'
         required: true
       responses:
         2XX:
@@ -75202,17 +76805,16 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
+                $ref: '#/components/schemas/microsoft.graph.permission'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/sites/{site-id}/lists/{list-id}/operations/{richLongRunningOperation-id}':
+  '/sites/{site-id}/lists/{list-id}/permissions/{permission-id}':
     get:
       tags:
         - sites.list
-      summary: Get operations from sites
-      description: The collection of long-running operations on the list.
-      operationId: site.list_GetOperation
+      summary: Get permissions from sites
+      operationId: site.list_GetPermission
       parameters:
         - name: site-id
           in: path
@@ -75230,14 +76832,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: list
-        - name: richLongRunningOperation-id
+        - name: permission-id
           in: path
-          description: The unique identifier of richLongRunningOperation
+          description: The unique identifier of permission
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: richLongRunningOperation
+          x-ms-docs-key-type: permission
         - name: $select
           in: query
           description: Select properties to be returned
@@ -75264,15 +76866,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
+                $ref: '#/components/schemas/microsoft.graph.permission'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     patch:
       tags:
         - sites.list
-      summary: Update the navigation property operations in sites
-      operationId: site.list_UpdateOperation
+      summary: Update the navigation property permissions in sites
+      operationId: site.list_UpdatePermission
       parameters:
         - name: site-id
           in: path
@@ -75290,20 +76892,20 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: list
-        - name: richLongRunningOperation-id
+        - name: permission-id
           in: path
-          description: The unique identifier of richLongRunningOperation
+          description: The unique identifier of permission
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: richLongRunningOperation
+          x-ms-docs-key-type: permission
       requestBody:
         description: New navigation property values
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
+              $ref: '#/components/schemas/microsoft.graph.permission'
         required: true
       responses:
         2XX:
@@ -75311,15 +76913,15 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
+                $ref: '#/components/schemas/microsoft.graph.permission'
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
     delete:
       tags:
         - sites.list
-      summary: Delete navigation property operations for sites
-      operationId: site.list_DeleteOperation
+      summary: Delete navigation property permissions for sites
+      operationId: site.list_DeletePermission
       parameters:
         - name: site-id
           in: path
@@ -75337,14 +76939,14 @@ paths:
           schema:
             type: string
           x-ms-docs-key-type: list
-        - name: richLongRunningOperation-id
+        - name: permission-id
           in: path
-          description: The unique identifier of richLongRunningOperation
+          description: The unique identifier of permission
           required: true
           style: simple
           schema:
             type: string
-          x-ms-docs-key-type: richLongRunningOperation
+          x-ms-docs-key-type: permission
         - name: If-Match
           in: header
           description: ETag
@@ -75357,12 +76959,90 @@ paths:
         default:
           $ref: '#/components/responses/error'
       x-ms-docs-operation-type: operation
-  '/sites/{site-id}/lists/{list-id}/operations/$count':
+  '/sites/{site-id}/lists/{list-id}/permissions/{permission-id}/microsoft.graph.grant':
+    post:
+      tags:
+        - sites.list
+      summary: Invoke action grant
+      description: Grant users access to a link represented by a permission.
+      externalDocs:
+        description: Find more info here
+        url: https://learn.microsoft.com/graph/api/permission-grant?view=graph-rest-1.0
+      operationId: site.list.permission_grant
+      parameters:
+        - name: site-id
+          in: path
+          description: The unique identifier of site
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: site
+        - name: list-id
+          in: path
+          description: The unique identifier of list
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: list
+        - name: permission-id
+          in: path
+          description: The unique identifier of permission
+          required: true
+          style: simple
+          schema:
+            type: string
+          x-ms-docs-key-type: permission
+      requestBody:
+        description: Action parameters
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                roles:
+                  type: array
+                  items:
+                    type: string
+                    nullable: true
+                recipients:
+                  type: array
+                  items:
+                    $ref: '#/components/schemas/microsoft.graph.driveRecipient'
+              additionalProperties:
+                type: object
+        required: true
+      responses:
+        2XX:
+          description: Success
+          content:
+            application/json:
+              schema:
+                title: Collection of permission
+                type: object
+                properties:
+                  value:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/microsoft.graph.permission'
+                  '@odata.nextLink':
+                    type: string
+                    nullable: true
+                additionalProperties:
+                  type: object
+        default:
+          $ref: '#/components/responses/error'
+      x-ms-docs-operation-type: action
+      x-ms-pageable:
+        nextLinkName: '@odata.nextLink'
+        operationName: listMore
+  '/sites/{site-id}/lists/{list-id}/permissions/$count':
     get:
       tags:
         - sites.list
       summary: Get the number of the resource
-      operationId: site.list.operation_GetCount
+      operationId: site.list.permission_GetCount
       parameters:
         - name: site-id
           in: path
@@ -116076,7 +117756,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -116103,7 +117783,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -116250,7 +117930,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -116272,7 +117952,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -116305,7 +117985,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -116403,7 +118083,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -116660,7 +118340,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.mailboxSettings:
       title: mailboxSettings
       type: object
@@ -116827,6 +118506,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -116859,6 +118543,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -120990,7 +122679,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -122077,6 +123765,19 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.permissionCollectionResponse:
+      title: Collection of permission
+      type: object
+      properties:
+        value:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.permission'
+        '@odata.nextLink':
+          type: string
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.listItemVersionCollectionResponse:
       title: Collection of listItemVersion
       type: object
@@ -122129,19 +123830,6 @@ components:
           nullable: true
       additionalProperties:
         type: object
-    microsoft.graph.permissionCollectionResponse:
-      title: Collection of permission
-      type: object
-      properties:
-        value:
-          type: array
-          items:
-            $ref: '#/components/schemas/microsoft.graph.permission'
-        '@odata.nextLink':
-          type: string
-          nullable: true
-      additionalProperties:
-        type: object
     microsoft.graph.termStore.storeCollectionResponse:
       title: Collection of store
       type: object
@@ -122763,6 +124451,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -123601,7 +125290,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -123617,13 +125306,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -124052,7 +125741,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -124142,6 +125831,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -124150,7 +125841,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -124213,6 +125904,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -124247,6 +125942,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -124324,11 +126021,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -124475,7 +126186,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAsyncOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -124561,7 +126271,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -127672,6 +129382,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -133519,6 +135238,12 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.documentSetVersionCollectionResponse'
+    microsoft.graph.permissionCollectionResponse:
+      description: Retrieved collection
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/microsoft.graph.permissionCollectionResponse'
     microsoft.graph.listItemVersionCollectionResponse:
       description: Retrieved collection
       content:
@@ -133543,12 +135268,6 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/microsoft.graph.baseSitePageCollectionResponse'
-    microsoft.graph.permissionCollectionResponse:
-      description: Retrieved collection
-      content:
-        application/json:
-          schema:
-            $ref: '#/components/schemas/microsoft.graph.permissionCollectionResponse'
     microsoft.graph.termStore.storeCollectionResponse:
       description: Retrieved collection
       content:
diff --git a/openApiDocs/v1.0/Teams.yml b/openApiDocs/v1.0/Teams.yml
index 7065afd5d8..68ce635f85 100644
--- a/openApiDocs/v1.0/Teams.yml
+++ b/openApiDocs/v1.0/Teams.yml
@@ -26424,7 +26424,7 @@ paths:
       tags:
         - teams.channel
       summary: List allowedMembers
-      description: "Get the list of conversationMembers who can access a shared channel. This method does not return the following conversationMembers from the team:\r\n- Users with Guest role\r\n- Users who are externally authenticated in the tenant"
+      description: "Get the list of conversationMembers who can access a shared channel. This method doesn't return the following conversationMembers from the team:\r\n- Users with Guest role\r\n- Users who are externally authenticated in the tenant"
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/sharedwithchannelteaminfo-list-allowedmembers?view=graph-rest-1.0
@@ -34606,7 +34606,7 @@ paths:
       tags:
         - teams.schedule
       summary: Delete schedulingGroup
-      description: "Mark a schedulingGroup as inactive by setting its isActive property.\r\nThis method does not remove the schedulingGroup from the schedule. Existing shift instances assigned to the scheduling group remain part of the group."
+      description: "Mark a schedulingGroup as inactive by setting its isActive property.\r\nThis method doesn't remove the schedulingGroup from the schedule. Existing shift instances assigned to the scheduling group remain part of the group."
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/schedulinggroup-delete?view=graph-rest-1.0
@@ -69361,7 +69361,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -69377,13 +69377,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -69695,7 +69695,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -69917,6 +69917,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -69925,7 +69927,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -69988,6 +69990,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -70022,6 +70028,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -70099,11 +70107,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -70250,7 +70272,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamVisibilityType:
       title: teamVisibilityType
       enum:
@@ -70377,7 +70398,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -72050,6 +72071,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -72288,6 +72314,15 @@ components:
               $ref: '#/components/schemas/microsoft.graph.team'
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -72330,6 +72365,72 @@ components:
           nullable: true
       additionalProperties:
         type: object
+    microsoft.graph.onPremisesExtensionAttributes:
+      title: onPremisesExtensionAttributes
+      type: object
+      properties:
+        extensionAttribute1:
+          type: string
+          description: First customizable extension attribute.
+          nullable: true
+        extensionAttribute10:
+          type: string
+          description: Tenth customizable extension attribute.
+          nullable: true
+        extensionAttribute11:
+          type: string
+          description: Eleventh customizable extension attribute.
+          nullable: true
+        extensionAttribute12:
+          type: string
+          description: Twelfth customizable extension attribute.
+          nullable: true
+        extensionAttribute13:
+          type: string
+          description: Thirteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute14:
+          type: string
+          description: Fourteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute15:
+          type: string
+          description: Fifteenth customizable extension attribute.
+          nullable: true
+        extensionAttribute2:
+          type: string
+          description: Second customizable extension attribute.
+          nullable: true
+        extensionAttribute3:
+          type: string
+          description: Third customizable extension attribute.
+          nullable: true
+        extensionAttribute4:
+          type: string
+          description: Fourth customizable extension attribute.
+          nullable: true
+        extensionAttribute5:
+          type: string
+          description: Fifth customizable extension attribute.
+          nullable: true
+        extensionAttribute6:
+          type: string
+          description: Sixth customizable extension attribute.
+          nullable: true
+        extensionAttribute7:
+          type: string
+          description: Seventh customizable extension attribute.
+          nullable: true
+        extensionAttribute8:
+          type: string
+          description: Eighth customizable extension attribute.
+          nullable: true
+        extensionAttribute9:
+          type: string
+          description: Ninth customizable extension attribute.
+          nullable: true
+      additionalProperties:
+        type: object
     microsoft.graph.onPremisesProvisioningError:
       title: onPremisesProvisioningError
       type: object
@@ -73974,7 +74075,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -74001,7 +74102,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -74148,7 +74249,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -74170,7 +74271,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -74203,7 +74304,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -74301,7 +74402,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -74558,7 +74659,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.album:
       title: album
       type: object
@@ -75442,6 +75542,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -76278,72 +76383,6 @@ components:
           $ref: '#/components/schemas/microsoft.graph.workingHours'
       additionalProperties:
         type: object
-    microsoft.graph.onPremisesExtensionAttributes:
-      title: onPremisesExtensionAttributes
-      type: object
-      properties:
-        extensionAttribute1:
-          type: string
-          description: First customizable extension attribute.
-          nullable: true
-        extensionAttribute10:
-          type: string
-          description: Tenth customizable extension attribute.
-          nullable: true
-        extensionAttribute11:
-          type: string
-          description: Eleventh customizable extension attribute.
-          nullable: true
-        extensionAttribute12:
-          type: string
-          description: Twelfth customizable extension attribute.
-          nullable: true
-        extensionAttribute13:
-          type: string
-          description: Thirteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute14:
-          type: string
-          description: Fourteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute15:
-          type: string
-          description: Fifteenth customizable extension attribute.
-          nullable: true
-        extensionAttribute2:
-          type: string
-          description: Second customizable extension attribute.
-          nullable: true
-        extensionAttribute3:
-          type: string
-          description: Third customizable extension attribute.
-          nullable: true
-        extensionAttribute4:
-          type: string
-          description: Fourth customizable extension attribute.
-          nullable: true
-        extensionAttribute5:
-          type: string
-          description: Fifth customizable extension attribute.
-          nullable: true
-        extensionAttribute6:
-          type: string
-          description: Sixth customizable extension attribute.
-          nullable: true
-        extensionAttribute7:
-          type: string
-          description: Seventh customizable extension attribute.
-          nullable: true
-        extensionAttribute8:
-          type: string
-          description: Eighth customizable extension attribute.
-          nullable: true
-        extensionAttribute9:
-          type: string
-          description: Ninth customizable extension attribute.
-          nullable: true
-      additionalProperties:
-        type: object
     microsoft.graph.passwordProfile:
       title: passwordProfile
       type: object
@@ -77708,7 +77747,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.outlookUser:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -78057,6 +78095,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.workbookOperationError:
       title: workbookOperationError
       type: object
diff --git a/openApiDocs/v1.0/Users.Actions.yml b/openApiDocs/v1.0/Users.Actions.yml
index 6522807cea..161a667ae1 100644
--- a/openApiDocs/v1.0/Users.Actions.yml
+++ b/openApiDocs/v1.0/Users.Actions.yml
@@ -1003,7 +1003,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -1030,7 +1030,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -1177,7 +1177,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -1199,7 +1199,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -1232,7 +1232,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -1330,7 +1330,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -1587,7 +1587,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.ODataErrors.ODataError:
       required:
         - error
@@ -4066,7 +4065,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -4671,6 +4669,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -5369,7 +5368,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -5385,13 +5384,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -5855,6 +5854,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -6466,7 +6470,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -6556,6 +6560,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -6564,7 +6570,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -6627,6 +6633,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -6661,6 +6671,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -6738,11 +6750,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -6889,7 +6915,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAsyncOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -6975,7 +7000,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -10335,6 +10360,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -11296,6 +11326,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
diff --git a/openApiDocs/v1.0/Users.Functions.yml b/openApiDocs/v1.0/Users.Functions.yml
index b4b78780bd..9360646a6a 100644
--- a/openApiDocs/v1.0/Users.Functions.yml
+++ b/openApiDocs/v1.0/Users.Functions.yml
@@ -322,7 +322,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -349,7 +349,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -496,7 +496,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -518,7 +518,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -551,7 +551,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -649,7 +649,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -906,7 +906,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.directoryObject:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -3269,7 +3268,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.onPremisesSyncBehavior:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -3656,7 +3654,7 @@ components:
           $ref: '#/components/schemas/microsoft.graph.dateTimeTimeZone'
         eventId:
           type: string
-          description: The unique ID of the event. Read only.
+          description: The unique ID of the event. Read-only.
           nullable: true
         eventLocation:
           $ref: '#/components/schemas/microsoft.graph.location'
@@ -3799,6 +3797,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -4668,7 +4667,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -4684,13 +4683,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -5154,6 +5153,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -5765,7 +5769,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -5855,6 +5859,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -5863,7 +5869,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -5926,6 +5932,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -5960,6 +5970,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -6037,11 +6049,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -6188,7 +6214,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.teamsAsyncOperation:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -6274,7 +6299,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -9656,6 +9681,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
@@ -10617,6 +10647,15 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
diff --git a/openApiDocs/v1.0/Users.yml b/openApiDocs/v1.0/Users.yml
index f7e21228d1..6eab7f412e 100644
--- a/openApiDocs/v1.0/Users.yml
+++ b/openApiDocs/v1.0/Users.yml
@@ -149,7 +149,7 @@ paths:
       tags:
         - users.user
       summary: Update user
-      description: Update the properties of a user object.
+      description: 'Update the properties of a user object. To use this API to update an agentUser, specify an @odata.type property with a value of #microsoft.graph.agentUser in the request body.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/user-update?view=graph-rest-1.0
@@ -12524,7 +12524,7 @@ paths:
       tags:
         - users.user
       summary: Update user
-      description: Update the properties of a user object.
+      description: 'Update the properties of a user object. To use this API to update an agentUser, specify an @odata.type property with a value of #microsoft.graph.agentUser in the request body.'
       externalDocs:
         description: Find more info here
         url: https://learn.microsoft.com/graph/api/user-update?view=graph-rest-1.0
@@ -12623,7 +12623,7 @@ components:
               nullable: true
             accountEnabled:
               type: boolean
-              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in).'
+              description: 'true if the account is enabled; otherwise, false. This property is required when a user is created. Requires $select to retrieve. Supports $filter (eq, ne, not, and in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             ageGroup:
               type: string
@@ -12650,7 +12650,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).'
+              description: 'The telephone numbers for the user. NOTE: Although it''s a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             city:
               type: string
               description: 'The city where the user is located. Maximum length is 128 characters. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).'
@@ -12797,7 +12797,7 @@ components:
               nullable: true
             mobilePhone:
               type: string
-              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.'
+              description: 'The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             mySite:
               type: string
@@ -12819,7 +12819,7 @@ components:
               $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesImmutableId:
               type: string
-              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in).'
+              description: 'This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you''re using a federated domain for the user''s userPrincipalName (UPN) property. NOTE: The $ and _ characters can''t be used when specifying this property. Requires $select to retrieve. Supports $filter (eq, ne, not, ge, le, in). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
@@ -12852,7 +12852,7 @@ components:
               type: array
               items:
                 type: string
-              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).'
+              description: 'A list of other email addresses for the user; for example: [''bob@contoso.com'', ''Robert@fabrikam.com'']. Can store up to 250 values, each with a limit of 250 characters. NOTE: This property can''t contain accent characters. Requires $select to retrieve. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0). This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
             passwordPolicies:
               type: string
               description: 'Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Requires $select to retrieve. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).'
@@ -12950,7 +12950,7 @@ components:
               nullable: true
             userPrincipalName:
               type: string
-              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.'
+              description: 'The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user''s email name. The general format is alias@domain, where the domain must be present in the tenant''s collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can''t contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, '' . - _ ! # ^ ~. For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby. This property is subject to sensitive action restrictions; only specific privileged administrator roles can update it.'
               nullable: true
             userType:
               type: string
@@ -13207,7 +13207,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra user account.
     microsoft.graph.directoryObject:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -13796,7 +13795,7 @@ components:
               nullable: true
             roleTemplateId:
               type: string
-              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read only. Supports $filter (eq), $select.'
+              description: 'The id of the directoryRoleTemplate that this role is based on. The property must be specified when activating a directory role in a tenant with a POST operation. After the directory role has been activated, the property is read-only. Supports $filter (eq), $select.'
               nullable: true
             members:
               type: array
@@ -13818,6 +13817,8 @@ components:
         - title: group
           type: object
           properties:
+            accessType:
+              $ref: '#/components/schemas/microsoft.graph.groupAccessType'
             allowExternalSenders:
               type: boolean
               description: 'Indicates if people external to the organization can send messages to the group. The default value is false. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
@@ -13826,7 +13827,7 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.assignedLabel'
-              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Requires $select to retrieve. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.'
+              description: 'The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group or a cloud security group. Requires a Microsoft Entra ID P1 license. Requires $select to retrieve. This property can be specified during group creation or update. However, for cloud security groups, it''s immutable once set. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role. See Key differences from Microsoft 365 group labeling to learn more about managing this property for Microsoft 365 vs. cloud security groups.'
             assignedLicenses:
               type: array
               items:
@@ -13889,6 +13890,10 @@ components:
               type: boolean
               description: 'Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can''t be a dynamic group (that is, groupTypes can''t contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).'
               nullable: true
+            isFavorite:
+              type: boolean
+              description: 'Indicates whether the user marked the group as favorite. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              nullable: true
             isManagementRestricted:
               type: boolean
               description: 'Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Requires $select to retrieve.'
@@ -13923,6 +13928,8 @@ components:
               type: string
               description: 'Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.Returned by default. Read-only.'
               nullable: true
+            onPremisesExtensionAttributes:
+              $ref: '#/components/schemas/microsoft.graph.onPremisesExtensionAttributes'
             onPremisesLastSyncDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
@@ -14000,11 +14007,25 @@ components:
               type: string
               description: The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
               nullable: true
+            unseenConversationsCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of conversations that have had one or more new posts delivered since the signed-in user''s last visit to the group. This property is the same as unseenCount. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
             unseenCount:
               maximum: 2147483647
               minimum: -2147483648
               type: number
-              description: 'Count of conversations that received new posts since the signed-in user last visited the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              description: 'Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
+              format: int32
+              nullable: true
+            unseenMessagesCount:
+              maximum: 2147483647
+              minimum: -2147483648
+              type: number
+              description: 'Count of new posts that have been delivered to the group''s conversations since the signed-in user''s last visit to the group. Requires $select to retrieve. Supported only on the Get group API (GET /groups/{ID}).'
               format: int32
               nullable: true
             visibility:
@@ -14151,7 +14172,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft Entra group.
     microsoft.graph.oAuth2PermissionGrant:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -17450,7 +17470,6 @@ components:
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
-          description: Represents a Microsoft online meeting.
     microsoft.graph.person:
       allOf:
         - $ref: '#/components/schemas/microsoft.graph.entity'
@@ -17999,6 +18018,7 @@ components:
             subject:
               type: string
               description: 'Required. The identifier of the external software workload within the external identity provider. Like the audience value, it has no fixed format; each identity provider uses their own - sometimes a GUID, sometimes a colon delimited identifier, sometimes arbitrary strings. The value here must match the sub claim within the token presented to Microsoft Entra ID. The combination of issuer and subject must be unique within the app. It has a limit of 600 characters. Supports $filter (eq).'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.homeRealmDiscoveryPolicy:
@@ -18338,6 +18358,15 @@ components:
           $ref: '#/components/schemas/microsoft.graph.timeZoneBase'
       additionalProperties:
         type: object
+    microsoft.graph.groupAccessType:
+      title: groupAccessType
+      enum:
+        - none
+        - private
+        - secret
+        - public
+        - unknownFutureValue
+      type: string
     microsoft.graph.assignedLabel:
       title: assignedLabel
       type: object
@@ -19429,6 +19458,7 @@ components:
       type: object
       additionalProperties:
         type: object
+      description: Standard way to represent a Json blob on Graph.
     microsoft.graph.status:
       title: status
       enum:
@@ -20256,7 +20286,7 @@ components:
             deletedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp at which the chat message was deleted, or null if not deleted.'
+              description: 'Read-only. Timestamp at which the chat message was deleted, or null if not deleted.'
               format: date-time
               nullable: true
             etag:
@@ -20272,13 +20302,13 @@ components:
             lastEditedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
+              description: Read-only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
               format: date-time
               nullable: true
             lastModifiedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: 'Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
+              description: 'Read-only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.'
               format: date-time
               nullable: true
             locale:
@@ -20742,6 +20772,11 @@ components:
                 $ref: '#/components/schemas/microsoft.graph.richLongRunningOperation'
               description: The collection of long-running operations on the list.
               x-ms-navigationProperty: true
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             subscriptions:
               type: array
               items:
@@ -21327,7 +21362,7 @@ components:
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: Read only. Timestamp at which the channel was created.
+              description: Read-only. Timestamp at which the channel was created.
               format: date-time
               nullable: true
             description:
@@ -21496,7 +21531,7 @@ components:
               nullable: true
             timeZone:
               type: string
-              description: Indicates the time zone of the schedule team using tz database format. Required.
+              description: 'The time zone of the schedule team as an IANA time zone database (tz database) name; for example, America/Chicago. For the full list of valid values, see List of tz database time zones. Required.'
               nullable: true
             workforceIntegrationIds:
               type: array
@@ -24935,6 +24970,11 @@ components:
               $ref: '#/components/schemas/microsoft.graph.driveItem'
             fields:
               $ref: '#/components/schemas/microsoft.graph.fieldValueSet'
+            permissions:
+              type: array
+              items:
+                $ref: '#/components/schemas/microsoft.graph.permission'
+              x-ms-navigationProperty: true
             versions:
               type: array
               items:
diff --git a/src/Applications/beta/examples/Get-MgBetaServicePrincipalSynchronizationTemplate.md b/src/Applications/beta/examples/Get-MgBetaServicePrincipalSynchronizationTemplate.md
index d05037861a..e69de29bb2 100644
--- a/src/Applications/beta/examples/Get-MgBetaServicePrincipalSynchronizationTemplate.md
+++ b/src/Applications/beta/examples/Get-MgBetaServicePrincipalSynchronizationTemplate.md
@@ -1,11 +0,0 @@
-### Example
-
-```powershell
-
-Import-Module Microsoft.Graph.Beta.Applications
-
-Get-MgBetaServicePrincipalSynchronizationTemplate -ServicePrincipalId $servicePrincipalId
-
-```
-This example shows how to use the Get-MgBetaServicePrincipalSynchronizationTemplate Cmdlet.
-
diff --git a/src/Authentication/Authentication.Core/Interfaces/IAuthContext.cs b/src/Authentication/Authentication.Core/Interfaces/IAuthContext.cs
index 9956c8dcf2..16dd6fd202 100644
--- a/src/Authentication/Authentication.Core/Interfaces/IAuthContext.cs
+++ b/src/Authentication/Authentication.Core/Interfaces/IAuthContext.cs
@@ -45,6 +45,7 @@ public interface IAuthContext
         string Environment { get; set; }
         string AppName { get; set; }
         string Account { get; set; }
+        string LoginHint { get; set; }
         string HomeAccountId { get; set; }
         string CertificateThumbprint { get; set; }
         string CertificateSubjectName { get; set; }
diff --git a/src/Authentication/Authentication.Core/Microsoft.Graph.Authentication.Core.csproj b/src/Authentication/Authentication.Core/Microsoft.Graph.Authentication.Core.csproj
index 9760b5f239..2bd53b18f1 100644
--- a/src/Authentication/Authentication.Core/Microsoft.Graph.Authentication.Core.csproj
+++ b/src/Authentication/Authentication.Core/Microsoft.Graph.Authentication.Core.csproj
@@ -4,7 +4,7 @@
     <LangVersion>9.0</LangVersion>
     <TargetFrameworks>netstandard2.0;net6.0;net472</TargetFrameworks>
     <RootNamespace>Microsoft.Graph.PowerShell.Authentication.Core</RootNamespace>
-    <Version>2.38.0</Version>
+    <Version>2.38.1</Version>
     <!-- Suppress .NET Target Framework Moniker (TFM) Support Build Warnings -->
     <SuppressTfmSupportBuildWarnings>true</SuppressTfmSupportBuildWarnings>
   </PropertyGroup>
diff --git a/src/Authentication/Authentication.Core/Utilities/AuthenticationHelpers.cs b/src/Authentication/Authentication.Core/Utilities/AuthenticationHelpers.cs
index e190172495..6041deb351 100644
--- a/src/Authentication/Authentication.Core/Utilities/AuthenticationHelpers.cs
+++ b/src/Authentication/Authentication.Core/Utilities/AuthenticationHelpers.cs
@@ -15,7 +15,9 @@
 using System.Globalization;
 using System.IO;
 using System.Linq;
+using System.Security.Cryptography;
 using System.Security.Cryptography.X509Certificates;
+using System.Text;
 using System.Threading;
 using System.Threading.Tasks;
 
@@ -120,10 +122,19 @@ private static async Task<InteractiveBrowserCredential> GetInteractiveBrowserCre
             interactiveOptions.TenantId = authContext.TenantId ?? "common";
             interactiveOptions.AuthorityHost = new Uri(GetAuthorityUrl(authContext));
             interactiveOptions.TokenCachePersistenceOptions = GetTokenCachePersistenceOptions(authContext);
+            var loginHint = authContext.LoginHint;
+            if (!string.IsNullOrWhiteSpace(loginHint))
+            {
+                interactiveOptions.LoginHint = loginHint;
+            }
 
-            if (!File.Exists(Constants.AuthRecordPath))
+            // Resolve the persisted authentication record for this account. When a login hint is
+            // supplied a per-account record is used so we never silently reuse a different user's
+            // record and so repeat sign-ins for the same account are picker-free.
+            var authRecord = await ResolveInteractiveAuthRecordAsync(loginHint).ConfigureAwait(false);
+
+            if (authRecord is null)
             {
-                AuthenticationRecord authRecord;
                 var interactiveBrowserCredential = new InteractiveBrowserCredential(interactiveOptions);
                 if (ShouldUseWam(authContext))
                 {
@@ -140,17 +151,99 @@ private static async Task<InteractiveBrowserCredential> GetInteractiveBrowserCre
                         return interactiveBrowserCredential.AuthenticateAsync(new TokenRequestContext(authContext.Scopes), cancellationToken);
                     });
                 }
-                await WriteAuthRecordAsync(authRecord).ConfigureAwait(false);
+                await WriteAuthRecordAsync(authRecord, loginHint).ConfigureAwait(false);
                 authContext.HomeAccountId = TryGetHomeAccountId(authRecord);
                 return interactiveBrowserCredential;
             }
 
-            var interactiveAuthRecord = await ReadAuthRecordAsync().ConfigureAwait(false);
-            interactiveOptions.AuthenticationRecord = interactiveAuthRecord;
-            authContext.HomeAccountId = TryGetHomeAccountId(interactiveAuthRecord);
+            interactiveOptions.AuthenticationRecord = authRecord;
+            authContext.HomeAccountId = TryGetHomeAccountId(authRecord);
             return new InteractiveBrowserCredential(interactiveOptions);
         }
 
+        /// <summary>
+        /// Resolves the persisted <see cref="AuthenticationRecord"/> to use for an interactive sign-in.
+        /// Without a login hint the shared, legacy record is used. With a login hint the per-account
+        /// record is preferred; if it is absent, an existing shared record is migrated only when it
+        /// belongs to the hinted account. A record whose username does not match the supplied hint is
+        /// never returned, so a different user's record is never silently reused.
+        /// </summary>
+        internal static async Task<AuthenticationRecord> ResolveInteractiveAuthRecordAsync(string loginHint)
+        {
+            if (string.IsNullOrWhiteSpace(loginHint))
+            {
+                try
+                {
+                    return await ReadAuthRecordAsync().ConfigureAwait(false);
+                }
+                catch
+                {
+                    return null;
+                }
+            }
+
+            AuthenticationRecord keyedRecord = null;
+            try
+            {
+                keyedRecord = await ReadAuthRecordAsync(loginHint).ConfigureAwait(false);
+            }
+            catch
+            {
+                keyedRecord = null;
+            }
+
+            if (keyedRecord != null)
+                return MatchesLoginHint(keyedRecord, loginHint) ? keyedRecord : null;
+
+            // Migration: a pre-existing shared record for this same account is promoted to a
+            // per-account record so existing users are not forced through the account picker again.
+            AuthenticationRecord legacyRecord = null;
+            try
+            {
+                legacyRecord = await ReadAuthRecordAsync().ConfigureAwait(false);
+            }
+            catch
+            {
+                legacyRecord = null;
+            }
+
+            if (legacyRecord != null && MatchesLoginHint(legacyRecord, loginHint))
+            {
+                await WriteAuthRecordAsync(legacyRecord, loginHint).ConfigureAwait(false);
+                return legacyRecord;
+            }
+
+            return null;
+        }
+
+        /// <summary>
+        /// Determines whether the username on an <see cref="AuthenticationRecord"/> matches the supplied
+        /// login hint (case-insensitive). Reading the username must never throw, so failures yield a
+        /// non-match, which forces a fresh interactive sign-in rather than reusing an unverified record.
+        /// </summary>
+        internal static bool MatchesLoginHint(AuthenticationRecord authRecord, string loginHint)
+        {
+            var username = TryGetUsername(authRecord);
+            return !string.IsNullOrWhiteSpace(username)
+                && string.Equals(username.Trim(), loginHint.Trim(), StringComparison.OrdinalIgnoreCase);
+        }
+
+        /// <summary>
+        /// Safely reads the username from an <see cref="AuthenticationRecord"/>; any error yields
+        /// <c>null</c> so account matching can never fail sign-in.
+        /// </summary>
+        private static string TryGetUsername(AuthenticationRecord authRecord)
+        {
+            try
+            {
+                return authRecord?.Username;
+            }
+            catch
+            {
+                return null;
+            }
+        }
+
         private static async Task<DeviceCodeCredential> GetDeviceCodeCredentialAsync(IAuthContext authContext, CancellationToken cancellationToken = default)
         {
             if (authContext is null)
@@ -443,13 +536,17 @@ public static async Task<IAuthContext> LogoutAsync(bool signOutFromBroker = fals
             var authContext = GraphSession.Instance.AuthContext;
             GraphSession.Instance.InMemoryTokenCache?.ClearCache();
 
+            // The login hint (when supplied at sign-in) keys the per-account auth record for this
+            // session, so cache clearing and record deletion below are scoped to the correct account.
+            var accountKey = authContext?.LoginHint;
+
             // Identify the account that signed in for this session so cache clearing can be scoped to
             // it. Prefer the HomeAccountId captured on the session's auth context (set at sign-in) for
             // correct isolation when multiple identities share the per-user persisted store. Fall back
             // to the persisted auth record, then to clearing all accounts when neither is available.
             var homeAccountId = !string.IsNullOrEmpty(authContext?.HomeAccountId)
                 ? authContext.HomeAccountId
-                : await GetCurrentHomeAccountIdAsync().ConfigureAwait(false);
+                : await GetCurrentHomeAccountIdAsync(accountKey).ConfigureAwait(false);
 
             if (authContext?.ContextScope == ContextScope.CurrentUser)
             {
@@ -484,7 +581,7 @@ await TokenCacheUtilities.ClearPersistedTokenCacheAsync(
 
             GraphSession.Instance.AuthContext = null;
             GraphSession.Instance.GraphHttpClient = null;
-            await DeleteAuthRecordAsync().ConfigureAwait(false);
+            await DeleteAuthRecordAsync(accountKey).ConfigureAwait(false);
             return authContext;
         }
 
@@ -553,11 +650,11 @@ private static async Task ClearBrokerTokenCacheAsync(IAuthContext authContext, s
         /// Reads the HomeAccountId of the account persisted for the current session, if any.
         /// Returns <c>null</c> when no authentication record is available or it cannot be read.
         /// </summary>
-        private static async Task<string> GetCurrentHomeAccountIdAsync()
+        private static async Task<string> GetCurrentHomeAccountIdAsync(string accountKey = null)
         {
             try
             {
-                var authRecord = await ReadAuthRecordAsync().ConfigureAwait(false);
+                var authRecord = await ReadAuthRecordAsync(accountKey).ConfigureAwait(false);
                 return TryGetHomeAccountId(authRecord);
             }
             catch
@@ -601,29 +698,57 @@ private static void LogCacheClearFailure(string summary, Exception ex)
             }
         }
 
-        private static async Task<AuthenticationRecord> ReadAuthRecordAsync()
+        internal static async Task<AuthenticationRecord> ReadAuthRecordAsync(string accountKey = null)
         {
             // Try to create directory if it doesn't exist.
             Directory.CreateDirectory(Constants.GraphDirectoryPath);
-            if (!File.Exists(Constants.AuthRecordPath))
+            var authRecordPath = GetAuthRecordPath(accountKey);
+            if (!File.Exists(authRecordPath))
                 return null;
-            using (FileStream authRecordStream = new FileStream(Constants.AuthRecordPath, FileMode.Open, FileAccess.Read))
+            using (FileStream authRecordStream = new FileStream(authRecordPath, FileMode.Open, FileAccess.Read))
                 return await AuthenticationRecord.DeserializeAsync(authRecordStream).ConfigureAwait(false);
         }
 
-        public static async Task WriteAuthRecordAsync(AuthenticationRecord authRecord)
+        public static async Task WriteAuthRecordAsync(AuthenticationRecord authRecord, string accountKey = null)
         {
             // Try to create directory if it doesn't exist.
             Directory.CreateDirectory(Constants.GraphDirectoryPath);
-            using (FileStream authRecordStream = new FileStream(Constants.AuthRecordPath, FileMode.Create, FileAccess.Write))
+            using (FileStream authRecordStream = new FileStream(GetAuthRecordPath(accountKey), FileMode.Create, FileAccess.Write))
                 await authRecord.SerializeAsync(authRecordStream).ConfigureAwait(false);
         }
 
-        public static Task DeleteAuthRecordAsync()
+        public static Task DeleteAuthRecordAsync(string accountKey = null)
         {
-            if (File.Exists(Constants.AuthRecordPath))
-                File.Delete(Constants.AuthRecordPath);
+            var authRecordPath = GetAuthRecordPath(accountKey);
+            if (File.Exists(authRecordPath))
+                File.Delete(authRecordPath);
             return Task.CompletedTask;
         }
+
+        /// <summary>
+        /// Resolves the on-disk path of the persisted <see cref="AuthenticationRecord"/> for a given
+        /// account. When <paramref name="accountKey"/> is null or empty the shared, legacy record path
+        /// (<see cref="Constants.AuthRecordPath"/>) is returned to preserve backwards compatibility for
+        /// sign-ins without a login hint. Otherwise a per-account file is used so that a hinted sign-in
+        /// reuses only that account's record (avoiding silent reuse of a different user's record and
+        /// enabling picker-free repeat sign-ins). The account key is normalized (trimmed, lower-cased)
+        /// and hashed so the file name is stable, case-insensitive, filesystem-safe, and does not embed
+        /// the user's identifier in clear text.
+        /// </summary>
+        internal static string GetAuthRecordPath(string accountKey)
+        {
+            if (string.IsNullOrWhiteSpace(accountKey))
+                return Constants.AuthRecordPath;
+
+            var normalized = accountKey.Trim().ToLowerInvariant();
+            using (var sha256 = SHA256.Create())
+            {
+                var hashBytes = sha256.ComputeHash(Encoding.UTF8.GetBytes(normalized));
+                var builder = new StringBuilder(hashBytes.Length * 2);
+                foreach (var b in hashBytes)
+                    builder.Append(b.ToString("x2", CultureInfo.InvariantCulture));
+                return Path.Combine(Constants.GraphDirectoryPath, $"mg.authrecord.{builder}.json");
+            }
+        }
     }
 }
\ No newline at end of file
diff --git a/src/Authentication/Authentication.Test/Helpers/AuthenticationHelpersTests.cs b/src/Authentication/Authentication.Test/Helpers/AuthenticationHelpersTests.cs
index a91eef30e3..1cb4b64fbb 100644
--- a/src/Authentication/Authentication.Test/Helpers/AuthenticationHelpersTests.cs
+++ b/src/Authentication/Authentication.Test/Helpers/AuthenticationHelpersTests.cs
@@ -6,6 +6,7 @@
 using Microsoft.Graph.PowerShell.Authentication.Core.Utilities;
 using System;
 using System.Globalization;
+using System.IO;
 using System.Linq;
 using System.Net.Http;
 using System.Runtime.InteropServices;
@@ -119,6 +120,43 @@ public async Task ShouldUseInteractiveProviderWhenDelegatedAsync()
             GraphSession.Reset();
         }
 
+        [Fact]
+        public async Task ShouldCreateInteractiveBrowserCredentialWhenLoginHintIsProvidedAsync()
+        {
+            // Arrange
+            AuthContext delegatedAuthContext = new AuthContext
+            {
+                AuthType = AuthenticationType.Delegated,
+                Scopes = new[] { "User.Read" },
+                ContextScope = ContextScope.Process,
+                TokenCredentialType = TokenCredentialType.InteractiveBrowser,
+                LoginHint = "user@contoso.com"
+            };
+
+            // A per-account record for the hinted user lets the credential be built silently
+            // (no interactive browser / broker call) so the code path is exercised in-process.
+            var record = await BuildAuthRecordAsync("user@contoso.com").ConfigureAwait(false);
+            await AuthenticationHelpers.WriteAuthRecordAsync(record, "user@contoso.com").ConfigureAwait(false);
+            var keyedPath = AuthenticationHelpers.GetAuthRecordPath("user@contoso.com");
+
+            try
+            {
+                // Act
+                TokenCredential tokenCredential = await AuthenticationHelpers.GetTokenCredentialAsync(delegatedAuthContext, default);
+
+                // Assert: supplying a LoginHint must not break interactive credential creation.
+                _ = Assert.IsType<InteractiveBrowserCredential>(tokenCredential);
+                Assert.Equal("user@contoso.com", delegatedAuthContext.LoginHint);
+            }
+            finally
+            {
+                if (File.Exists(keyedPath))
+                    File.Delete(keyedPath);
+                // reset static instance.
+                GraphSession.Reset();
+            }
+        }
+
         [Fact]
         public async Task ShouldUseInteractiveAuthenticationProviderWhenDelegatedContextAndClientIdIsProvidedAsync()
         {
@@ -659,6 +697,102 @@ public override ValueTask<AccessToken> GetTokenAsync(TokenRequestContext request
             }
         }
 
+        [Fact]
+        public void GetAuthRecordPathReturnsLegacyPathWhenNoAccountKey()
+        {
+            Assert.Equal(PowerShell.Authentication.Core.Constants.AuthRecordPath, AuthenticationHelpers.GetAuthRecordPath(null));
+            Assert.Equal(PowerShell.Authentication.Core.Constants.AuthRecordPath, AuthenticationHelpers.GetAuthRecordPath(string.Empty));
+            Assert.Equal(PowerShell.Authentication.Core.Constants.AuthRecordPath, AuthenticationHelpers.GetAuthRecordPath("   "));
+        }
+
+        [Fact]
+        public void GetAuthRecordPathReturnsStablePerAccountPath()
+        {
+            var path = AuthenticationHelpers.GetAuthRecordPath("user@contoso.com");
+
+            Assert.NotEqual(PowerShell.Authentication.Core.Constants.AuthRecordPath, path);
+            Assert.Equal(PowerShell.Authentication.Core.Constants.GraphDirectoryPath, Path.GetDirectoryName(path));
+            var fileName = Path.GetFileName(path);
+            Assert.StartsWith("mg.authrecord.", fileName);
+            Assert.EndsWith(".json", fileName);
+
+            // Casing and surrounding whitespace must resolve to the same file.
+            Assert.Equal(path, AuthenticationHelpers.GetAuthRecordPath("  USER@Contoso.COM "));
+            // Different accounts must resolve to different files.
+            Assert.NotEqual(path, AuthenticationHelpers.GetAuthRecordPath("other@contoso.com"));
+        }
+
+        [Fact]
+        public async Task MatchesLoginHintIsCaseInsensitiveAndRejectsMismatch()
+        {
+            AuthenticationRecord record = await BuildAuthRecordAsync("User@Contoso.com").ConfigureAwait(false);
+
+            Assert.True(AuthenticationHelpers.MatchesLoginHint(record, "user@contoso.com"));
+            Assert.True(AuthenticationHelpers.MatchesLoginHint(record, "  USER@CONTOSO.COM "));
+            Assert.False(AuthenticationHelpers.MatchesLoginHint(record, "different@contoso.com"));
+            Assert.False(AuthenticationHelpers.MatchesLoginHint(null, "user@contoso.com"));
+        }
+
+        [Fact]
+        public async Task ResolveInteractiveAuthRecordDoesNotReuseDifferentUsersRecord()
+        {
+            // A saved record exists (legacy path) for a different user than the login hint.
+            await WriteLegacyAuthRecordAsync("alice@contoso.com").ConfigureAwait(false);
+            var keyedPath = AuthenticationHelpers.GetAuthRecordPath("bob@contoso.com");
+            try
+            {
+                var resolved = await AuthenticationHelpers.ResolveInteractiveAuthRecordAsync("bob@contoso.com").ConfigureAwait(false);
+
+                // Must force a fresh interactive sign-in rather than reuse alice's record.
+                Assert.Null(resolved);
+                Assert.False(File.Exists(keyedPath));
+            }
+            finally
+            {
+                if (File.Exists(keyedPath))
+                    File.Delete(keyedPath);
+            }
+        }
+
+        [Fact]
+        public async Task ResolveInteractiveAuthRecordMigratesMatchingLegacyRecord()
+        {
+            // A legacy shared record exists for the SAME account as the login hint.
+            await WriteLegacyAuthRecordAsync("carol@contoso.com").ConfigureAwait(false);
+            var keyedPath = AuthenticationHelpers.GetAuthRecordPath("carol@contoso.com");
+            try
+            {
+                Assert.False(File.Exists(keyedPath));
+
+                var resolved = await AuthenticationHelpers.ResolveInteractiveAuthRecordAsync("carol@contoso.com").ConfigureAwait(false);
+
+                Assert.NotNull(resolved);
+                Assert.Equal("carol@contoso.com", resolved.Username);
+                // The matching legacy record is promoted to a per-account record for picker-free reuse.
+                Assert.True(File.Exists(keyedPath));
+            }
+            finally
+            {
+                if (File.Exists(keyedPath))
+                    File.Delete(keyedPath);
+            }
+        }
+
+        private static async Task WriteLegacyAuthRecordAsync(string username)
+        {
+            var record = await BuildAuthRecordAsync(username).ConfigureAwait(false);
+            await AuthenticationHelpers.WriteAuthRecordAsync(record).ConfigureAwait(false);
+        }
+
+        private static async Task<AuthenticationRecord> BuildAuthRecordAsync(string username)
+        {
+            var json = $"{{\"username\":\"{username}\",\"authority\":\"login.windows.net\"," +
+                       $"\"homeAccountId\":\"{Guid.NewGuid()}.{Guid.NewGuid()}\"," +
+                       $"\"tenantId\":\"{Guid.NewGuid()}\",\"clientId\":\"{Guid.NewGuid()}\",\"version\":\"1.0\"}}";
+            using (var stream = new MemoryStream(Encoding.UTF8.GetBytes(json)))
+                return await AuthenticationRecord.DeserializeAsync(stream).ConfigureAwait(false);
+        }
+
         public void Dispose() => mockAuthRecord.DeleteCache();
     }
 }
diff --git a/src/Authentication/Authentication.Test/Microsoft.Graph.Authentication.Test.csproj b/src/Authentication/Authentication.Test/Microsoft.Graph.Authentication.Test.csproj
index ccaa28e8fb..e9b9fd1a80 100644
--- a/src/Authentication/Authentication.Test/Microsoft.Graph.Authentication.Test.csproj
+++ b/src/Authentication/Authentication.Test/Microsoft.Graph.Authentication.Test.csproj
@@ -2,16 +2,16 @@
   <PropertyGroup>
     <TargetFrameworks>net8.0;net472</TargetFrameworks>
     <IsPackable>false</IsPackable>
-    <Version>2.35.1</Version>
+    <Version>2.38.1</Version>
   </PropertyGroup>
   <ItemGroup>
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.6.2" />
     <!-- As described in this post https://devblogs.microsoft.com/powershell/depending-on-the-right-powershell-nuget-package-in-your-net-project, reference the SDK for dotnetcore-->
     <PackageReference Include="Microsoft.PowerShell.SDK" Version="7.5.0" PrivateAssets="all" Condition="'$(TargetFramework)' == 'net8.0'" />
     <PackageReference Include="Moq" Version="4.20.70" />
-  <PackageReference Include="System.Net.Http" Version="4.3.4" />
-    <PackageReference Include="xunit" Version="2.4.2" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="2.4.5">
+    <PackageReference Include="System.Net.Http" Version="4.3.4" />
+    <PackageReference Include="xunit" Version="2.9.3" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
diff --git a/src/Authentication/Authentication/Cmdlets/ConnectMgGraph.cs b/src/Authentication/Authentication/Cmdlets/ConnectMgGraph.cs
index 79177129e8..d3c8cd06ef 100644
--- a/src/Authentication/Authentication/Cmdlets/ConnectMgGraph.cs
+++ b/src/Authentication/Authentication/Cmdlets/ConnectMgGraph.cs
@@ -86,6 +86,10 @@ public class ConnectMgGraph : PSCmdlet, IModuleAssemblyInitializer, IModuleAssem
         [Alias("UseDeviceAuthentication", "DeviceCode", "DeviceAuth", "Device")]
         public SwitchParameter UseDeviceCode { get; set; }
 
+        [Parameter(ParameterSetName = Constants.UserParameterSet, Mandatory = false, HelpMessage = HelpMessages.LoginHint)]
+        [ValidateNotNullOrEmpty]
+        public string LoginHint { get; set; }
+
         [Parameter(ParameterSetName = Constants.AppCertificateParameterSet, HelpMessage = HelpMessages.ClientTimeout)]
         [Parameter(ParameterSetName = Constants.AppSecretCredentialParameterSet, HelpMessage = HelpMessages.ClientTimeout)]
         [Parameter(ParameterSetName = Constants.AccessTokenParameterSet, HelpMessage = HelpMessages.ClientTimeout)]
@@ -194,6 +198,8 @@ private async Task ProcessRecordAsync()
                                 // Default to CurrentUser but allow the customer to change this via `-ContextScope`.
                                 authContext.ContextScope = this.IsParameterBound(nameof(ContextScope)) ? ContextScope : ContextScope.CurrentUser;
                             }
+if (this.IsParameterBound(nameof(LoginHint)) && !string.IsNullOrWhiteSpace(LoginHint))
+    authContext.LoginHint = LoginHint;
                             authContext.TokenCredentialType = UseDeviceCode ? TokenCredentialType.DeviceCode : TokenCredentialType.InteractiveBrowser;
                         }
                         break;
diff --git a/src/Authentication/Authentication/Constants.cs b/src/Authentication/Authentication/Constants.cs
index 47924df784..f3d19e3ad0 100644
--- a/src/Authentication/Authentication/Constants.cs
+++ b/src/Authentication/Authentication/Constants.cs
@@ -43,6 +43,7 @@ public static class HelpMessages
             public const string ContextScope = "Determines the scope of authentication context. This accepts `Process` for the current process, or `CurrentUser` for all sessions started by user.";
             public const string Environment = "The name of the national cloud environment to connect to. By default global cloud is used.";
             public const string UseDeviceCode = "Use device code authentication instead of a browser control.";
+            public const string LoginHint = "The login hint (typically a username or email) used to pre-populate the account field during interactive browser authentication.";
             public const string ClientTimeout = "Sets the HTTP client timeout in seconds.";
             public const string NoWelcome = "Hides the welcome message.";
             public const string Identity = "Login using a Managed Identity.";
diff --git a/src/Authentication/Authentication/Microsoft.Graph.Authentication-help.xml b/src/Authentication/Authentication/Microsoft.Graph.Authentication-help.xml
index 3c8bd5db0d..65bedc3ea3 100644
--- a/src/Authentication/Authentication/Microsoft.Graph.Authentication-help.xml
+++ b/src/Authentication/Authentication/Microsoft.Graph.Authentication-help.xml
@@ -419,8 +419,7 @@ Get-MgUserActivityHistoryItem         CrossDeviceExperiences       GET    /users
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
           <maml:name>All</maml:name>
           <maml:description>
-            <maml:para>To return all possible permissions rather than just those that match the SearchString parameter, specify the All parameter. The
-All parameter may also be used with the PermissionType to enumerate all applicaition permissions or all delegated permissions.</maml:para>
+            <maml:para>To return all possible permissions rather than just those that match the SearchString parameter, specify the All parameter. The All parameter may also be used with the PermissionType to enumerate all application permissions or all delegated permissions.</maml:para>
           </maml:description>
           <dev:type>
             <maml:name>SwitchParameter</maml:name>
@@ -431,14 +430,7 @@ All parameter may also be used with the PermissionType to enumerate all applicai
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
           <maml:name>Online</maml:name>
           <maml:description>
-            <maml:para>Specify the Online parameter in addition to SearchString to force Find-MgGraphPermission to update its set of permissions
-by requesting the latest permissions data from Microsoft Graph itself before searching for the permissions specified the
-SearchString parameter. This ensures that Find-MgGraphPermission returns the most accurate search results as new permissions
-are added to Microsoft Graph for new APIs. The command uses the existing access to Microsoft Graph as enabled by a previous
-invocation of the Connect-MgGraph command to issue the request for updated permissions. If your current connection does not
-already have access to read this data from Microsoft Graph or if there is no network connectivity to Microsoft Graph, the command will fail.
-If the command is successful in updating the set of permissions prior to searching for permissions, Find-MgGraphPermission will
-continue to use the updated list for all future invocations of the command even if they do not specify the Online parameter</maml:para>
+            <maml:para>Specify the Online parameter in addition to SearchString to force Find-MgGraphPermission to update its set of permissions by requesting the latest permissions data from Microsoft Graph itself before searching for the permissions specified the SearchString parameter. This ensures that Find-MgGraphPermission returns the most accurate search results as new permissions are added to Microsoft Graph for new APIs. The command uses the existing access to Microsoft Graph as enabled by a previous invocation of the Connect-MgGraph command to issue the request for updated permissions. If your current connection does not already have access to read this data from Microsoft Graph or if there is no network connectivity to Microsoft Graph, the command will fail. If the command is successful in updating the set of permissions prior to searching for permissions, Find-MgGraphPermission will continue to use the updated list for all future invocations of the command even if they do not specify the Online parameter</maml:para>
           </maml:description>
           <dev:type>
             <maml:name>SwitchParameter</maml:name>
@@ -449,9 +441,7 @@ continue to use the updated list for all future invocations of the command even
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
           <maml:name>PermissionType</maml:name>
           <maml:description>
-            <maml:para>Specify the PermissionType to determine whether application permissions, delegated permisisons, or both are returned by
-Find-MgGraphPermission. By default, the value of this parameter is Any, which includes both delegated and application permissions.
-Other valid values for PermissionType are Application and Delegated to return those specify types of permissions.</maml:para>
+            <maml:para>Specify the PermissionType to determine whether application permissions, delegated permisisons, or both are returned by Find-MgGraphPermission. By default, the value of this parameter is Any, which includes both delegated and application permissions. Other valid values for PermissionType are Application and Delegated to return those specify types of permissions.</maml:para>
           </maml:description>
           <command:parameterValue required="true" variableLength="false">String</command:parameterValue>
           <dev:type>
@@ -478,10 +468,7 @@ Other valid values for PermissionType are Application and Delegated to return th
         <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByValue)" position="1" aliases="none">
           <maml:name>SearchString</maml:name>
           <maml:description>
-            <maml:para>The SearchString parameter allows you to specify a string such as 'user' or 'mail' that represents the subject or domain
-of the permission you're searching for. Since permissions usually have names such as 'User.Read' or 'Mail.ReadWrite', the
-command uses the SearchString parameter to return all permissions that contain the value specified for SearchString in the
-name of the permission.</maml:para>
+            <maml:para>The SearchString parameter allows you to specify a string such as 'user' or 'mail' that represents the subject or domain of the permission you're searching for. Since permissions usually have names such as 'User.Read' or 'Mail.ReadWrite', the command uses the SearchString parameter to return all permissions that contain the value specified for SearchString in the name of the permission.</maml:para>
           </maml:description>
           <command:parameterValue required="true" variableLength="false">String</command:parameterValue>
           <dev:type>
@@ -504,14 +491,7 @@ name of the permission.</maml:para>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
           <maml:name>Online</maml:name>
           <maml:description>
-            <maml:para>Specify the Online parameter in addition to SearchString to force Find-MgGraphPermission to update its set of permissions
-by requesting the latest permissions data from Microsoft Graph itself before searching for the permissions specified the
-SearchString parameter. This ensures that Find-MgGraphPermission returns the most accurate search results as new permissions
-are added to Microsoft Graph for new APIs. The command uses the existing access to Microsoft Graph as enabled by a previous
-invocation of the Connect-MgGraph command to issue the request for updated permissions. If your current connection does not
-already have access to read this data from Microsoft Graph or if there is no network connectivity to Microsoft Graph, the command will fail.
-If the command is successful in updating the set of permissions prior to searching for permissions, Find-MgGraphPermission will
-continue to use the updated list for all future invocations of the command even if they do not specify the Online parameter</maml:para>
+            <maml:para>Specify the Online parameter in addition to SearchString to force Find-MgGraphPermission to update its set of permissions by requesting the latest permissions data from Microsoft Graph itself before searching for the permissions specified the SearchString parameter. This ensures that Find-MgGraphPermission returns the most accurate search results as new permissions are added to Microsoft Graph for new APIs. The command uses the existing access to Microsoft Graph as enabled by a previous invocation of the Connect-MgGraph command to issue the request for updated permissions. If your current connection does not already have access to read this data from Microsoft Graph or if there is no network connectivity to Microsoft Graph, the command will fail. If the command is successful in updating the set of permissions prior to searching for permissions, Find-MgGraphPermission will continue to use the updated list for all future invocations of the command even if they do not specify the Online parameter</maml:para>
           </maml:description>
           <dev:type>
             <maml:name>SwitchParameter</maml:name>
@@ -522,9 +502,7 @@ continue to use the updated list for all future invocations of the command even
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
           <maml:name>PermissionType</maml:name>
           <maml:description>
-            <maml:para>Specify the PermissionType to determine whether application permissions, delegated permisisons, or both are returned by
-Find-MgGraphPermission. By default, the value of this parameter is Any, which includes both delegated and application permissions.
-Other valid values for PermissionType are Application and Delegated to return those specify types of permissions.</maml:para>
+            <maml:para>Specify the PermissionType to determine whether application permissions, delegated permisisons, or both are returned by Find-MgGraphPermission. By default, the value of this parameter is Any, which includes both delegated and application permissions. Other valid values for PermissionType are Application and Delegated to return those specify types of permissions.</maml:para>
           </maml:description>
           <command:parameterValue required="true" variableLength="false">String</command:parameterValue>
           <dev:type>
@@ -551,8 +529,7 @@ Other valid values for PermissionType are Application and Delegated to return th
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
         <maml:name>All</maml:name>
         <maml:description>
-          <maml:para>To return all possible permissions rather than just those that match the SearchString parameter, specify the All parameter. The
-All parameter may also be used with the PermissionType to enumerate all applicaition permissions or all delegated permissions.</maml:para>
+          <maml:para>To return all possible permissions rather than just those that match the SearchString parameter, specify the All parameter. The All parameter may also be used with the PermissionType to enumerate all applicaition permissions or all delegated permissions.</maml:para>
         </maml:description>
         <command:parameterValue required="false" variableLength="false">SwitchParameter</command:parameterValue>
         <dev:type>
@@ -576,14 +553,7 @@ All parameter may also be used with the PermissionType to enumerate all applicai
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
         <maml:name>Online</maml:name>
         <maml:description>
-          <maml:para>Specify the Online parameter in addition to SearchString to force Find-MgGraphPermission to update its set of permissions
-by requesting the latest permissions data from Microsoft Graph itself before searching for the permissions specified the
-SearchString parameter. This ensures that Find-MgGraphPermission returns the most accurate search results as new permissions
-are added to Microsoft Graph for new APIs. The command uses the existing access to Microsoft Graph as enabled by a previous
-invocation of the Connect-MgGraph command to issue the request for updated permissions. If your current connection does not
-already have access to read this data from Microsoft Graph or if there is no network connectivity to Microsoft Graph, the command will fail.
-If the command is successful in updating the set of permissions prior to searching for permissions, Find-MgGraphPermission will
-continue to use the updated list for all future invocations of the command even if they do not specify the Online parameter</maml:para>
+          <maml:para>Specify the Online parameter in addition to SearchString to force Find-MgGraphPermission to update its set of permissions by requesting the latest permissions data from Microsoft Graph itself before searching for the permissions specified the SearchString parameter. This ensures that Find-MgGraphPermission returns the most accurate search results as new permissions are added to Microsoft Graph for new APIs. The command uses the existing access to Microsoft Graph as enabled by a previous invocation of the Connect-MgGraph command to issue the request for updated permissions. If your current connection does not already have access to read this data from Microsoft Graph or if there is no network connectivity to Microsoft Graph, the command will fail. If the command is successful in updating the set of permissions prior to searching for permissions, Find-MgGraphPermission will continue to use the updated list for all future invocations of the command even if they do not specify the Online parameter</maml:para>
         </maml:description>
         <command:parameterValue required="false" variableLength="false">SwitchParameter</command:parameterValue>
         <dev:type>
@@ -595,9 +565,7 @@ continue to use the updated list for all future invocations of the command even
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
         <maml:name>PermissionType</maml:name>
         <maml:description>
-          <maml:para>Specify the PermissionType to determine whether application permissions, delegated permisisons, or both are returned by
-Find-MgGraphPermission. By default, the value of this parameter is Any, which includes both delegated and application permissions.
-Other valid values for PermissionType are Application and Delegated to return those specify types of permissions.</maml:para>
+          <maml:para>Specify the PermissionType to determine whether application permissions, delegated permisisons, or both are returned by Find-MgGraphPermission. By default, the value of this parameter is Any, which includes both delegated and application permissions. Other valid values for PermissionType are Application and Delegated to return those specify types of permissions.</maml:para>
         </maml:description>
         <command:parameterValue required="true" variableLength="false">String</command:parameterValue>
         <dev:type>
@@ -621,10 +589,7 @@ Other valid values for PermissionType are Application and Delegated to return th
       <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByValue)" position="1" aliases="none">
         <maml:name>SearchString</maml:name>
         <maml:description>
-          <maml:para>The SearchString parameter allows you to specify a string such as 'user' or 'mail' that represents the subject or domain
-of the permission you're searching for. Since permissions usually have names such as 'User.Read' or 'Mail.ReadWrite', the
-command uses the SearchString parameter to return all permissions that contain the value specified for SearchString in the
-name of the permission.</maml:para>
+          <maml:para>The SearchString parameter allows you to specify a string such as 'user' or 'mail' that represents the subject or domain of the permission you're searching for. Since permissions usually have names such as 'User.Read' or 'Mail.ReadWrite', the command uses the SearchString parameter to return all permissions that contain the value specified for SearchString in the name of the permission.</maml:para>
         </maml:description>
         <command:parameterValue required="true" variableLength="false">String</command:parameterValue>
         <dev:type>
diff --git a/src/Authentication/Authentication/Microsoft.Graph.Authentication.csproj b/src/Authentication/Authentication/Microsoft.Graph.Authentication.csproj
index 7f6e32952a..6d5e8c5a4b 100644
--- a/src/Authentication/Authentication/Microsoft.Graph.Authentication.csproj
+++ b/src/Authentication/Authentication/Microsoft.Graph.Authentication.csproj
@@ -10,7 +10,7 @@
     <WarningsAsErrors />
     <NuspecFile>Microsoft.Graph.Authentication.nuspec</NuspecFile>
     <Copyright>© Microsoft Corporation. All rights reserved.</Copyright>
-    <Version>2.35.1</Version>
+    <Version>2.38.1</Version>
   </PropertyGroup>
   <PropertyGroup>
     <EnableNETAnalyzers>true</EnableNETAnalyzers>
diff --git a/src/Authentication/Authentication/Microsoft.Graph.Authentication.dll-Help.xml b/src/Authentication/Authentication/Microsoft.Graph.Authentication.dll-Help.xml
index 5df68dcb55..e4fdd92455 100644
--- a/src/Authentication/Authentication/Microsoft.Graph.Authentication.dll-Help.xml
+++ b/src/Authentication/Authentication/Microsoft.Graph.Authentication.dll-Help.xml
@@ -6,11 +6,11 @@
       <command:verb>Add</command:verb>
       <command:noun>MgEnvironment</command:noun>
       <maml:description>
-        <maml:para>{{ Fill in the Synopsis }}</maml:para>
+        <maml:para>Adds Microsoft Graph environment to the settings file.</maml:para>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>{{ Fill in the Description }}</maml:para>
+      <maml:para>Adds Microsoft Graph environment to the settings file.</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
@@ -51,6 +51,18 @@
           </dev:type>
           <dev:defaultValue>None</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
           <maml:name>Confirm</maml:name>
           <maml:description>
@@ -112,6 +124,18 @@
         </dev:type>
         <dev:defaultValue>None</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
         <maml:name>Confirm</maml:name>
         <maml:description>
@@ -164,10 +188,13 @@
     </maml:alertSet>
     <command:examples>
       <command:example>
-        <maml:title>-------------------------- Example 1 --------------------------</maml:title>
-        <dev:code>PS C:\&gt; {{ Add example code here }}</dev:code>
+        <maml:title>----------- Example 1: Add user defined environment -----------</maml:title>
+        <dev:code>PS C:\&gt; Add-MgEnvironment -Name "Canary" -GraphEndpoint "https://canary.graph.microsoft.com" -AzureADEndpoint "https://login.microsoftonline.com"
+Name     AzureADEndpoint                      GraphEndpoint                 Type
+----     ---------------                      -------------                 ----
+Canary    https://login.microsoftonline.com   https://microsoftgraph.com User-defined</dev:code>
         <dev:remarks>
-          <maml:para>{{ Add example description here }}</maml:para>
+          <maml:para>Adds user defined environment.</maml:para>
         </dev:remarks>
       </command:example>
     </command:examples>
@@ -240,6 +267,18 @@
           </dev:type>
           <dev:defaultValue>False</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
       <command:syntaxItem>
         <maml:name>Connect-MgGraph</maml:name>
@@ -342,6 +381,30 @@
           </dev:type>
           <dev:defaultValue>False</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
+          <maml:name>SendCertificateChain</maml:name>
+          <maml:description>
+            <maml:para>Include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication using given certificate.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">Boolean</command:parameterValue>
+          <dev:type>
+            <maml:name>Boolean</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="Audience, Tenant">
           <maml:name>TenantId</maml:name>
           <maml:description>
@@ -421,6 +484,18 @@
           </dev:type>
           <dev:defaultValue>None</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
+          <maml:name>LoginHint</maml:name>
+          <maml:description>
+            <maml:para>The login hint (typically a username or email) used to pre-populate the account field during interactive browser authentication.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">String</command:parameterValue>
+          <dev:type>
+            <maml:name>String</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
           <maml:name>NoWelcome</maml:name>
           <maml:description>
@@ -432,6 +507,18 @@
           </dev:type>
           <dev:defaultValue>False</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="Audience, Tenant">
           <maml:name>TenantId</maml:name>
           <maml:description>
@@ -532,6 +619,18 @@
           </dev:type>
           <dev:defaultValue>False</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
       <command:syntaxItem>
         <maml:name>Connect-MgGraph</maml:name>
@@ -598,6 +697,18 @@
           </dev:type>
           <dev:defaultValue>False</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="Audience, Tenant">
           <maml:name>TenantId</maml:name>
           <maml:description>
@@ -675,6 +786,18 @@
           </dev:type>
           <dev:defaultValue>False</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
     </command:syntax>
     <command:parameters>
@@ -810,6 +933,18 @@
         </dev:type>
         <dev:defaultValue>False</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
+        <maml:name>LoginHint</maml:name>
+        <maml:description>
+          <maml:para>The login hint (typically a username or email) used to pre-populate the account field during interactive browser authentication.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">String</command:parameterValue>
+        <dev:type>
+          <maml:name>String</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
         <maml:name>NoWelcome</maml:name>
         <maml:description>
@@ -822,6 +957,18 @@
         </dev:type>
         <dev:defaultValue>False</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="1" aliases="none">
         <maml:name>Scopes</maml:name>
         <maml:description>
@@ -834,6 +981,18 @@
         </dev:type>
         <dev:defaultValue>None</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
+        <maml:name>SendCertificateChain</maml:name>
+        <maml:description>
+          <maml:para>Include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication using given certificate.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">Boolean</command:parameterValue>
+        <dev:type>
+          <maml:name>Boolean</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="Audience, Tenant">
         <maml:name>TenantId</maml:name>
         <maml:description>
@@ -961,24 +1120,49 @@ PS C:\&gt; Connect-MgGraph -TenantId "Tenant_Id" -ClientSecretCredential $Client
       <command:example>
         <maml:title>------ Example 11: Connecting to an environment or cloud ------</maml:title>
         <dev:code>PS C:\&gt; Get-MgEnvironment
-Name     AzureADEndpoint                   GraphEndpoint                           Type
-----     ---------------                   -------------                           ----
-China    https://login.chinacloudapi.cn    https://microsoftgraph.chinacloudapi.cn Built-in
-Global   https://login.microsoftonline.com https://graph.microsoft.com             Built-in
-USGov    https://login.microsoftonline.us  https://graph.microsoft.us              Built-in
-USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us          Built-in
+Name         AzureADEndpoint                        GraphEndpoint                           Type
+----         ---------------                        -------------                           ----
+BleuCloud    https://login.sovcloud-identity.fr     https://graph.svc.sovcloud.fr           Built-in
+China        https://login.chinacloudapi.cn         https://microsoftgraph.chinacloudapi.cn Built-in
+DelosCloud   https://login.sovcloud-identity.de     https://graph.svc.sovcloud.de           Built-in
+Global       https://login.microsoftonline.com      https://graph.microsoft.com             Built-in
+GovSGCloud   https://login.sovcloud-identity.sg     https://graph.svc.sovcloud.sg           Built-in
+USGov        https://login.microsoftonline.us       https://graph.microsoft.us              Built-in
+USGovDoD     https://login.microsoftonline.us       https://dod-graph.microsoft.us          Built-in
 PS C:\&gt; Connect-MgGraph -Environment USGov</dev:code>
         <dev:remarks>
           <maml:para>When you use Connect-MgGraph, you can choose to target other environments. By default, Connect-MgGraph targets the global public cloud.</maml:para>
         </dev:remarks>
       </command:example>
       <command:example>
-        <maml:title>Example 12: Connecting to an environment as a different identity</maml:title>
+        <maml:title>Example 12: Connecting to a sovereign cloud with a custom application</maml:title>
+        <dev:code>PS C:\&gt; Connect-MgGraph -ClientId "YOUR_APP_CLIENT_ID" -TenantId "YOUR_TENANT_ID" -Environment BleuCloud -Scopes "User.Read.All"</dev:code>
+        <dev:remarks>
+          <maml:para>Sovereign cloud environments (BleuCloud, DelosCloud, GovSGCloud) require a custom application registration. You cannot use the default Microsoft Graph PowerShell application in these environments. When registering your application, add an additional redirect URI of `ms-appx-web://Microsoft.AAD.BrokerPlugin/&lt;YOUR_APP_CLIENT_ID&gt;` to support WAM broker-based authentication. Requires Microsoft.Graph.Authentication v2.36.1 or later.</maml:para>
+        </dev:remarks>
+      </command:example>
+      <command:example>
+        <maml:title>Example 13: Connecting to a sovereign cloud when WAM authentication hangs</maml:title>
+        <dev:code>PS C:\&gt; Set-MgGraphOption -DisableLoginByWAM $true
+PS C:\&gt; Connect-MgGraph -ClientId "YOUR_APP_CLIENT_ID" -TenantId "YOUR_TENANT_ID" -Environment BleuCloud</dev:code>
+        <dev:remarks>
+          <maml:para>If the authentication popup hangs or times out when connecting to a sovereign cloud (for example, from a jumpbox), WAM broker-based login may not work in that environment. Disable WAM to use interactive browser sign-in instead. You only need to run `Set-MgGraphOption -DisableLoginByWAM $true` once; the setting persists across sessions.</maml:para>
+        </dev:remarks>
+      </command:example>
+      <command:example>
+        <maml:title>Example 14: Connecting to an environment as a different identity</maml:title>
         <dev:code>PS C:\&gt; Connect-MgGraph -ContextScope Process</dev:code>
         <dev:remarks>
           <maml:para>To connect as a different identity other than CurrentUser, specify the -ContextScope parameter with the value Process.</maml:para>
         </dev:remarks>
       </command:example>
+      <command:example>
+        <maml:title>Example 15: Delegated access: Pre-populating the account during interactive sign-in</maml:title>
+        <dev:code>PS C:\&gt; Connect-MgGraph -Scopes "User.Read.All" -LoginHint "user@contoso.com"</dev:code>
+        <dev:remarks>
+          <maml:para>Use the -LoginHint parameter to pre-populate the account (login_hint) shown in the interactive browser sign-in prompt. On Windows, WAM may still display the account picker on the first sign-in for an account; later sign-ins with the same -LoginHint are silent.</maml:para>
+        </dev:remarks>
+      </command:example>
     </command:examples>
     <command:relatedLinks>
       <maml:navigationLink>
@@ -997,14 +1181,62 @@ PS C:\&gt; Connect-MgGraph -Environment USGov</dev:code>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>Use Disconnect-MgGraph to sign out.</maml:para>
+      <maml:para>Use Disconnect-MgGraph to sign out. This clears the persisted MSAL token cache from disk when using CurrentUser context scope, as well as removing the in-memory token cache and authentication record. Use the -SignOutFromBroker switch to additionally remove cached accounts from the Windows broker (WAM); note that the broker store is shared at the OS level, so this can also sign you out of other broker-enabled applications (for example Visual Studio, Azure CLI, or Azure PowerShell) that use the same Windows account.</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
         <maml:name>Disconnect-MgGraph</maml:name>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
+          <maml:name>SignOutFromBroker</maml:name>
+          <maml:description>
+            <maml:para>Also removes cached accounts from the Windows broker (WAM). This is a shared, OS-level store, so it may sign you out of other broker-enabled applications (e.g. Visual Studio, Azure CLI, Azure PowerShell) using the same Windows account.</maml:para>
+          </maml:description>
+          <dev:type>
+            <maml:name>SwitchParameter</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>False</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
     </command:syntax>
-    <command:parameters />
+    <command:parameters>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
+        <maml:name>SignOutFromBroker</maml:name>
+        <maml:description>
+          <maml:para>Also removes cached accounts from the Windows broker (WAM). This is a shared, OS-level store, so it may sign you out of other broker-enabled applications (e.g. Visual Studio, Azure CLI, Azure PowerShell) using the same Windows account.</maml:para>
+        </maml:description>
+        <command:parameterValue required="false" variableLength="false">SwitchParameter</command:parameterValue>
+        <dev:type>
+          <maml:name>SwitchParameter</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>False</dev:defaultValue>
+      </command:parameter>
+    </command:parameters>
     <command:inputTypes>
       <command:inputType>
         <dev:type>
@@ -1038,6 +1270,13 @@ PS C:\&gt; Connect-MgGraph -Environment USGov</dev:code>
           <maml:para>Use Disconnect-MgGraph to sign out.</maml:para>
         </dev:remarks>
       </command:example>
+      <command:example>
+        <maml:title>Example 2: Sign out and also clear the Windows broker (WAM) cache</maml:title>
+        <dev:code>PS C:\&gt; Disconnect-MgGraph -SignOutFromBroker</dev:code>
+        <dev:remarks>
+          <maml:para>Signs out and additionally removes cached accounts from the Windows broker (WAM). Because the broker store is shared at the OS level, this can also sign you out of other broker-enabled applications (for example Visual Studio, Azure CLI, or Azure PowerShell) using the same Windows account.</maml:para>
+        </dev:remarks>
+      </command:example>
     </command:examples>
     <command:relatedLinks>
       <maml:navigationLink>
@@ -1061,9 +1300,34 @@ PS C:\&gt; Connect-MgGraph -Environment USGov</dev:code>
     <command:syntax>
       <command:syntaxItem>
         <maml:name>Get-MgContext</maml:name>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
     </command:syntax>
-    <command:parameters />
+    <command:parameters>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
+    </command:parameters>
     <command:inputTypes>
       <command:inputType>
         <dev:type>
@@ -1163,6 +1427,18 @@ User.ReadWrite.All</dev:code>
           </dev:type>
           <dev:defaultValue>None</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
     </command:syntax>
     <command:parameters>
@@ -1178,6 +1454,18 @@ User.ReadWrite.All</dev:code>
         </dev:type>
         <dev:defaultValue>None</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
     </command:parameters>
     <command:inputTypes>
       <command:inputType>
@@ -1208,12 +1496,15 @@ User.ReadWrite.All</dev:code>
       <command:example>
         <maml:title>----------------- Example 1: Get-MgEnvironment -----------------</maml:title>
         <dev:code>PS C:\&gt; Get-MgEnvironment
-Name     AzureADEndpoint                   GraphEndpoint                           Type
-----     ---------------                   -------------                           ----
-China    https://login.chinacloudapi.cn    https://microsoftgraph.chinacloudapi.cn Built-in
-Global   https://login.microsoftonline.com https://graph.microsoft.com             Built-in
-USGov    https://login.microsoftonline.us  https://graph.microsoft.us              Built-in
-USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us          Built-in</dev:code>
+Name         AzureADEndpoint                        GraphEndpoint                           Type
+----         ---------------                        -------------                           ----
+BleuCloud    https://login.sovcloud-identity.fr     https://graph.svc.sovcloud.fr           Built-in
+China        https://login.chinacloudapi.cn         https://microsoftgraph.chinacloudapi.cn Built-in
+DelosCloud   https://login.sovcloud-identity.de     https://graph.svc.sovcloud.de           Built-in
+Global       https://login.microsoftonline.com      https://graph.microsoft.com             Built-in
+GovSGCloud   https://login.sovcloud-identity.sg     https://graph.svc.sovcloud.sg           Built-in
+USGov        https://login.microsoftonline.us       https://graph.microsoft.us              Built-in
+USGovDoD     https://login.microsoftonline.us       https://dod-graph.microsoft.us          Built-in</dev:code>
         <dev:remarks>
           <maml:para>This command gets list of all environments.</maml:para>
         </dev:remarks>
@@ -1232,18 +1523,43 @@ USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us
       <command:verb>Get</command:verb>
       <command:noun>MgGraphOption</command:noun>
       <maml:description>
-        <maml:para>{{ Fill in the Synopsis }}</maml:para>
+        <maml:para>Gets global configurations that apply to the SDK. For example, check if Web Account Manager (WAM) support has been enabled.</maml:para>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>{{ Fill in the Description }}</maml:para>
+      <maml:para>Gets global configurations that apply to the SDK. For example, check if Web Account Manager (WAM) support has been enabled.</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
         <maml:name>Get-MgGraphOption</maml:name>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
     </command:syntax>
-    <command:parameters />
+    <command:parameters>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
+    </command:parameters>
     <command:inputTypes>
       <command:inputType>
         <dev:type>
@@ -1266,15 +1582,18 @@ USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us
     </command:returnValues>
     <maml:alertSet>
       <maml:alert>
-        <maml:para></maml:para>
+        <maml:para>Web Account Manager is enabled by default on Windows systems and cannot be disabled. Setting the `EnableWAMForMSGraph` option no longer has any effect.</maml:para>
       </maml:alert>
     </maml:alertSet>
     <command:examples>
       <command:example>
-        <maml:title>-------------------------- Example 1 --------------------------</maml:title>
-        <dev:code>PS C:\&gt; {{ Add example code here }}</dev:code>
+        <maml:title>------- Example 1: Check if WAM support has been enabled -------</maml:title>
+        <dev:code>PS C:\&gt; Get-MgGraphOption
+EnableWAMForMSGraph 
+--------------------
+                True</dev:code>
         <dev:remarks>
-          <maml:para>{{ Add example description here }}</maml:para>
+          <maml:para>Confirms if WAM support has been enabled. Web Account Manager is enabled by default on Windows systems and cannot be disabled.</maml:para>
         </dev:remarks>
       </command:example>
     </command:examples>
@@ -1291,15 +1610,27 @@ USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us
       <command:verb>Get</command:verb>
       <command:noun>MgRequestContext</command:noun>
       <maml:description>
-        <maml:para>{{ Fill in the Synopsis }}</maml:para>
+        <maml:para>Gets graph request context details</maml:para>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>{{ Fill in the Description }}</maml:para>
+      <maml:para>Gets graph request context details</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
         <maml:name>Get-MgRequestContext</maml:name>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
           <maml:name>Confirm</maml:name>
           <maml:description>
@@ -1325,6 +1656,18 @@ USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us
       </command:syntaxItem>
     </command:syntax>
     <command:parameters>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
         <maml:name>Confirm</maml:name>
         <maml:description>
@@ -1377,10 +1720,13 @@ USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us
     </maml:alertSet>
     <command:examples>
       <command:example>
-        <maml:title>-------------------------- Example 1 --------------------------</maml:title>
-        <dev:code>PS C:\&gt; {{ Add example code here }}</dev:code>
+        <maml:title>---------------- Example 1: Get request context ----------------</maml:title>
+        <dev:code>PS C:\&gt; Get-MgRequestContext
+ClientTimeout     RetryDelay                      MaxRetry                 RetriesTimeLimit
+-------------     ----------                      --------                 ----------------
+00:00:05                   3                             2                         00:00:02</dev:code>
         <dev:remarks>
-          <maml:para>{{ Add example description here }}</maml:para>
+          <maml:para>Gets graph request context details</maml:para>
         </dev:remarks>
       </command:example>
     </command:examples>
@@ -1619,6 +1965,18 @@ USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us
           </dev:type>
           <dev:defaultValue>False</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
     </command:syntax>
     <command:parameters>
@@ -1742,6 +2100,18 @@ USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us
         </dev:type>
         <dev:defaultValue>False</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="14" aliases="RHV">
         <maml:name>ResponseHeadersVariable</maml:name>
         <maml:description>
@@ -1888,11 +2258,11 @@ surname                        Administrator</dev:code>
       <command:verb>Remove</command:verb>
       <command:noun>MgEnvironment</command:noun>
       <maml:description>
-        <maml:para>{{ Fill in the Synopsis }}</maml:para>
+        <maml:para>Removes Microsoft Graph environment to the settings file</maml:para>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>{{ Fill in the Description }}</maml:para>
+      <maml:para>Removes Microsoft Graph environment to the settings file</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
@@ -1909,6 +2279,18 @@ surname                        Administrator</dev:code>
           </dev:type>
           <dev:defaultValue>None</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
           <maml:name>Confirm</maml:name>
           <maml:description>
@@ -1946,6 +2328,18 @@ surname                        Administrator</dev:code>
         </dev:type>
         <dev:defaultValue>None</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
         <maml:name>Confirm</maml:name>
         <maml:description>
@@ -1998,10 +2392,13 @@ surname                        Administrator</dev:code>
     </maml:alertSet>
     <command:examples>
       <command:example>
-        <maml:title>-------------------------- Example 1 --------------------------</maml:title>
-        <dev:code>PS C:\&gt; {{ Add example code here }}</dev:code>
+        <maml:title>---------- Example 1: Remove user-defined environment ----------</maml:title>
+        <dev:code>PS C:\&gt; Remove-MgEnvironment Canary
+Name     AzureADEndpoint                      GraphEndpoint                 Type
+----     ---------------                      -------------                 ----
+Canary    https://login.microsoftonline.com   https://microsoftgraph.com User-defined</dev:code>
         <dev:remarks>
-          <maml:para>{{ Add example description here }}</maml:para>
+          <maml:para>Removes user-defined environment.</maml:para>
         </dev:remarks>
       </command:example>
     </command:examples>
@@ -2018,11 +2415,11 @@ surname                        Administrator</dev:code>
       <command:verb>Set</command:verb>
       <command:noun>MgEnvironment</command:noun>
       <maml:description>
-        <maml:para>{{ Fill in the Synopsis }}</maml:para>
+        <maml:para>Sets a Microsoft Graph environment to the settings file.</maml:para>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>{{ Fill in the Description }}</maml:para>
+      <maml:para>Sets a Microsoft Graph environment to the settings file.</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
@@ -2063,6 +2460,18 @@ surname                        Administrator</dev:code>
           </dev:type>
           <dev:defaultValue>None</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
           <maml:name>Confirm</maml:name>
           <maml:description>
@@ -2124,6 +2533,18 @@ surname                        Administrator</dev:code>
         </dev:type>
         <dev:defaultValue>None</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="cf">
         <maml:name>Confirm</maml:name>
         <maml:description>
@@ -2176,10 +2597,10 @@ surname                        Administrator</dev:code>
     </maml:alertSet>
     <command:examples>
       <command:example>
-        <maml:title>-------------------------- Example 1 --------------------------</maml:title>
-        <dev:code>PS C:\&gt; {{ Add example code here }}</dev:code>
+        <maml:title>------ Example 1: Set environment for the current session ------</maml:title>
+        <dev:code>PS C:\&gt; Set-MgEnvironment -GraphEndpoint "https://canary.graph.microsoft.com" -AzureADEndpoint "https://login.microsoftonline.com"</dev:code>
         <dev:remarks>
-          <maml:para>{{ Add example description here }}</maml:para>
+          <maml:para>Sets the environment for the current session.</maml:para>
         </dev:remarks>
       </command:example>
     </command:examples>
@@ -2196,19 +2617,19 @@ surname                        Administrator</dev:code>
       <command:verb>Set</command:verb>
       <command:noun>MgGraphOption</command:noun>
       <maml:description>
-        <maml:para>{{ Fill in the Synopsis }}</maml:para>
+        <maml:para>Sets global configurations that apply to the SDK. For example, toggle Web Account Manager (WAM) support.</maml:para>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>{{ Fill in the Description }}</maml:para>
+      <maml:para>Sets global configurations that apply to the SDK. For example, toggle Web Account Manager (WAM) support.</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
         <maml:name>Set-MgGraphOption</maml:name>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
-          <maml:name>EnableLoginByWAM</maml:name>
+          <maml:name>DisableLoginByWAM</maml:name>
           <maml:description>
-            <maml:para>{{ Fill EnableLoginByWAM Description }}</maml:para>
+            <maml:para>Disables sign in via Web Account Manager (WAM). Note: This only takes effect when using a custom ClientId. When using the default ClientId, WAM remains enabled regardless of this setting.</maml:para>
           </maml:description>
           <command:parameterValue required="true" variableLength="false">Boolean</command:parameterValue>
           <dev:type>
@@ -2217,13 +2638,25 @@ surname                        Administrator</dev:code>
           </dev:type>
           <dev:defaultValue>None</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
       </command:syntaxItem>
     </command:syntax>
     <command:parameters>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">
-        <maml:name>EnableLoginByWAM</maml:name>
+        <maml:name>DisableLoginByWAM</maml:name>
         <maml:description>
-          <maml:para>{{ Fill EnableLoginByWAM Description }}</maml:para>
+          <maml:para>Disables sign in via Web Account Manager (WAM). Note: This only takes effect when using a custom ClientId. When using the default ClientId, WAM remains enabled regardless of this setting.</maml:para>
         </maml:description>
         <command:parameterValue required="true" variableLength="false">Boolean</command:parameterValue>
         <dev:type>
@@ -2232,6 +2665,18 @@ surname                        Administrator</dev:code>
         </dev:type>
         <dev:defaultValue>None</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
     </command:parameters>
     <command:inputTypes>
       <command:inputType>
@@ -2260,10 +2705,18 @@ surname                        Administrator</dev:code>
     </maml:alertSet>
     <command:examples>
       <command:example>
-        <maml:title>-------------------------- Example 1 --------------------------</maml:title>
-        <dev:code>PS C:\&gt; {{ Add example code here }}</dev:code>
+        <maml:title>-------- Example 1: Disable web account manager support --------</maml:title>
+        <dev:code>PS C:\&gt; Set-MgGraphOption -DisableLoginByWAM $True</dev:code>
+        <dev:remarks>
+          <maml:para>Disables sign in via Web Account Manager (WAM). Note: This only takes effect when using a custom ClientId. When using the default ClientId, WAM remains enabled regardless of this setting.</maml:para>
+        </dev:remarks>
+      </command:example>
+      <command:example>
+        <maml:title>--- Example 2: Disable WAM for sovereign cloud environments ---</maml:title>
+        <dev:code>PS C:\&gt; Set-MgGraphOption -DisableLoginByWAM $true
+PS C:\&gt; Connect-MgGraph -ClientId "YOUR_APP_CLIENT_ID" -TenantId "YOUR_TENANT_ID" -Environment BleuCloud</dev:code>
         <dev:remarks>
-          <maml:para>{{ Add example description here }}</maml:para>
+          <maml:para>If WAM broker-based authentication hangs or times out when connecting to a sovereign cloud environment (such as BleuCloud, DelosCloud, or GovSGCloud), disable WAM to fall back to interactive browser sign-in. This can occur when authenticating from environments like jumpboxes. The setting persists across PowerShell sessions.</maml:para>
         </dev:remarks>
       </command:example>
     </command:examples>
@@ -2280,11 +2733,11 @@ surname                        Administrator</dev:code>
       <command:verb>Set</command:verb>
       <command:noun>MgRequestContext</command:noun>
       <maml:description>
-        <maml:para>{{ Fill in the Synopsis }}</maml:para>
+        <maml:para>Sets request context for Microsoft Graph invocations</maml:para>
       </maml:description>
     </command:details>
     <maml:description>
-      <maml:para>{{ Fill in the Description }}</maml:para>
+      <maml:para>Sets request context for Microsoft Graph invocations</maml:para>
     </maml:description>
     <command:syntax>
       <command:syntaxItem>
@@ -2313,6 +2766,18 @@ surname                        Administrator</dev:code>
           </dev:type>
           <dev:defaultValue>None</dev:defaultValue>
         </command:parameter>
+        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+          <maml:name>ProgressAction</maml:name>
+          <maml:description>
+            <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+          </maml:description>
+          <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+          <dev:type>
+            <maml:name>ActionPreference</maml:name>
+            <maml:uri />
+          </dev:type>
+          <dev:defaultValue>None</dev:defaultValue>
+        </command:parameter>
         <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName)" position="named" aliases="none">
           <maml:name>RetriesTimeLimit</maml:name>
           <maml:description>
@@ -2386,6 +2851,18 @@ surname                        Administrator</dev:code>
         </dev:type>
         <dev:defaultValue>None</dev:defaultValue>
       </command:parameter>
+      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="proga">
+        <maml:name>ProgressAction</maml:name>
+        <maml:description>
+          <maml:para>Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.</maml:para>
+        </maml:description>
+        <command:parameterValue required="true" variableLength="false">ActionPreference</command:parameterValue>
+        <dev:type>
+          <maml:name>ActionPreference</maml:name>
+          <maml:uri />
+        </dev:type>
+        <dev:defaultValue>None</dev:defaultValue>
+      </command:parameter>
       <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName)" position="named" aliases="none">
         <maml:name>RetriesTimeLimit</maml:name>
         <maml:description>
@@ -2462,10 +2939,43 @@ surname                        Administrator</dev:code>
     </maml:alertSet>
     <command:examples>
       <command:example>
-        <maml:title>-------------------------- Example 1 --------------------------</maml:title>
-        <dev:code>PS C:\&gt; {{ Add example code here }}</dev:code>
+        <maml:title>-------- Example 1: Set Http client timeout in seconds --------</maml:title>
+        <dev:code>PS C:\&gt; Set-MgRequestContext -ClientTimeout 5
+ClientTimeout     RetryDelay                      MaxRetry                 RetriesTimeLimit
+-------------     ----------                      --------                 ----------------
+00:00:05                   3                             2                         00:00:00</dev:code>
+        <dev:remarks>
+          <maml:para>Sets Http client timeout in seconds.</maml:para>
+        </dev:remarks>
+      </command:example>
+      <command:example>
+        <maml:title>Example 2: Set the maximum time in seconds allowed for request retries</maml:title>
+        <dev:code>PS C:\&gt; Set-MgRequestContext -RetriesTimeLimit 2
+ClientTimeout     RetryDelay                      MaxRetry                 RetriesTimeLimit
+-------------     ----------                      --------                 ----------------
+00:00:05                   3                             2                         00:00:02</dev:code>
+        <dev:remarks>
+          <maml:para>Sets the maximum time in seconds allowed for request retries.</maml:para>
+        </dev:remarks>
+      </command:example>
+      <command:example>
+        <maml:title>-- Example 3: Set the maximum number of retries for a request --</maml:title>
+        <dev:code>PS C:\&gt; Set-MgRequestContext -MaxRetry 2
+ClientTimeout     RetryDelay                      MaxRetry                 RetriesTimeLimit
+-------------     ----------                      --------                 ----------------
+00:00:05                   3                             2                         00:00:02</dev:code>
+        <dev:remarks>
+          <maml:para>Sets the maximum number of retries for a request.</maml:para>
+        </dev:remarks>
+      </command:example>
+      <command:example>
+        <maml:title>Example 4: Set the waiting time in seconds before retrying a request</maml:title>
+        <dev:code>PS C:\&gt; Set-MgRequestContext -RetryDelay 3
+ClientTimeout     RetryDelay                      MaxRetry                 RetriesTimeLimit
+-------------     ----------                      --------                 ----------------
+00:00:05                   3                             2                         00:00:02</dev:code>
         <dev:remarks>
-          <maml:para>{{ Add example description here }}</maml:para>
+          <maml:para>Sets the waiting time in seconds before retrying a request.</maml:para>
         </dev:remarks>
       </command:example>
     </command:examples>
diff --git a/src/Authentication/Authentication/Microsoft.Graph.Authentication.nuspec b/src/Authentication/Authentication/Microsoft.Graph.Authentication.nuspec
index 0fb359f1c2..9f481d84af 100644
--- a/src/Authentication/Authentication/Microsoft.Graph.Authentication.nuspec
+++ b/src/Authentication/Authentication/Microsoft.Graph.Authentication.nuspec
@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <package>
   <metadata>
-    <version>2.35.1</version>
+    <version>2.38.1</version>
     <id>Microsoft.Graph.Authentication</id>
     <description>Microsoft Graph PowerShell authentication module</description>
     <authors>Microsoft</authors>
diff --git a/src/Authentication/Authentication/Microsoft.Graph.Authentication.psd1 b/src/Authentication/Authentication/Microsoft.Graph.Authentication.psd1
index 1373f08ec3..b935343b60 100644
--- a/src/Authentication/Authentication/Microsoft.Graph.Authentication.psd1
+++ b/src/Authentication/Authentication/Microsoft.Graph.Authentication.psd1
@@ -3,7 +3,7 @@
 #
 # Generated by: Microsoft
 #
-# Generated on: 21/09/2023
+# Generated on: 7/16/2026
 #
 
 @{
@@ -12,7 +12,7 @@
 RootModule = './Microsoft.Graph.Authentication.psm1'
 
 # Version number of this module.
-ModuleVersion = '2.6.1'
+ModuleVersion = '2.38.1'
 
 # Supported PSEditions
 CompatiblePSEditions = 'Core', 'Desktop'
@@ -133,3 +133,4 @@ PrivateData = @{
 # DefaultCommandPrefix = ''
 
 }
+
diff --git a/src/Authentication/Authentication/Models/AuthContext.cs b/src/Authentication/Authentication/Models/AuthContext.cs
index 94fc9aabef..bc8ca0f88a 100644
--- a/src/Authentication/Authentication/Models/AuthContext.cs
+++ b/src/Authentication/Authentication/Models/AuthContext.cs
@@ -21,6 +21,7 @@ public class AuthContext : IAuthContext
         public string CertificateSubjectName { get; set; }
         public bool SendCertificateChain { get; set; }
         public string Account { get; set; }
+        public string LoginHint { get; set; }
         public string HomeAccountId { get; set; }
         public string AppName { get; set; }
         public ContextScope ContextScope { get; set; }
diff --git a/src/Authentication/Authentication/test/Connect-MgGraph.Tests.ps1 b/src/Authentication/Authentication/test/Connect-MgGraph.Tests.ps1
index 382ad62a98..de52fcaef5 100644
--- a/src/Authentication/Authentication/test/Connect-MgGraph.Tests.ps1
+++ b/src/Authentication/Authentication/test/Connect-MgGraph.Tests.ps1
@@ -22,7 +22,15 @@ Describe 'Connect-MgGraph ParameterSets' {
         $UserParameterSet | Should -Not -BeNull
         $UserParameterSet.IsDefault | Should -BeTrue
         $UserParameterSet.Parameters | Where-Object IsMandatory | Should -HaveCount 0
-        @('ClientId', 'TenantId', 'ContextScope', 'Environment', 'ClientTimeout') | Should -BeIn $UserParameterSet.Parameters.Name
+        @('ClientId', 'TenantId', 'ContextScope', 'Environment', 'ClientTimeout', 'LoginHint') | Should -BeIn $UserParameterSet.Parameters.Name
+    }
+
+    It 'Should have an optional LoginHint parameter only in UserParameterSet' {
+        $LoginHintParameter = $ConnectMgGraphCommand.Parameters['LoginHint']
+        $LoginHintParameter | Should -Not -BeNull
+        $LoginHintParameter.ParameterType | Should -Be ([string])
+        $LoginHintParameter.ParameterSets.Keys | Should -Be 'UserParameterSet'
+        $LoginHintParameter.ParameterSets['UserParameterSet'].IsMandatory | Should -BeFalse
     }
 
     It 'Should have AppCertificateParameterSet' {
diff --git a/src/Authentication/docs/Add-MgEnvironment.md b/src/Authentication/docs/Add-MgEnvironment.md
index b2cec82695..335905cb59 100644
--- a/src/Authentication/docs/Add-MgEnvironment.md
+++ b/src/Authentication/docs/Add-MgEnvironment.md
@@ -13,8 +13,8 @@ schema: 2.0.0
 ## SYNTAX
 
 ```
-Add-MgEnvironment [-Name] <String> [-AzureADEndpoint] <String> [-GraphEndpoint] <String> [-WhatIf] [-Confirm]
- [<CommonParameters>]
+Add-MgEnvironment [-Name] <String> [-AzureADEndpoint] <String> [-GraphEndpoint] <String>
+ [-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -79,6 +79,21 @@ Accept pipeline input: True (ByPropertyName)
 Accept wildcard characters: False
 ```
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -Confirm
 Prompts you for confirmation before running the cmdlet.
 
@@ -116,14 +131,13 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 ## INPUTS
 
 ### System.String
-
 ## OUTPUTS
 
 ### Microsoft.Graph.PowerShell.Authentication.Models.GraphEnvironment
-
 ## NOTES
 
 ## RELATED LINKS
 
 [https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/add-mgenvironment](https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/add-mgenvironment)
 
+
diff --git a/src/Authentication/docs/Connect-MgGraph.md b/src/Authentication/docs/Connect-MgGraph.md
index 9ef5d0af7c..24d5d50faa 100644
--- a/src/Authentication/docs/Connect-MgGraph.md
+++ b/src/Authentication/docs/Connect-MgGraph.md
@@ -15,39 +15,41 @@ Microsoft Graph PowerShell supports two types of authentication: delegated and a
 ### UserParameterSet (Default)
 ```
 Connect-MgGraph [[-Scopes] <String[]>] [[-ClientId] <String>] [-TenantId <String>]
- [-ContextScope <ContextScope>] [-Environment <String>] [-UseDeviceCode] [-ClientTimeout <Double>] [-NoWelcome]
- [<CommonParameters>]
+ [-ContextScope <ContextScope>] [-Environment <String>] [-UseDeviceCode] [-LoginHint <String>]
+ [-ClientTimeout <Double>] [-NoWelcome] [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ### AppCertificateParameterSet
 ```
 Connect-MgGraph [-ClientId] <String> [[-CertificateSubjectName] <String>] [[-CertificateThumbprint] <String>]
- [-Certificate <X509Certificate2>] [-TenantId <String>] [-ContextScope <ContextScope>] [-Environment <String>]
- [-ClientTimeout <Double>] [-NoWelcome] [<CommonParameters>]
+ [-SendCertificateChain <Boolean>] [-Certificate <X509Certificate2>] [-TenantId <String>]
+ [-ContextScope <ContextScope>] [-Environment <String>] [-ClientTimeout <Double>] [-NoWelcome]
+ [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ### IdentityParameterSet
 ```
 Connect-MgGraph [[-ClientId] <String>] [-ContextScope <ContextScope>] [-Environment <String>]
- [-ClientTimeout <Double>] [-Identity] [-NoWelcome] [<CommonParameters>]
+ [-ClientTimeout <Double>] [-Identity] [-NoWelcome] [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ### AppSecretCredentialParameterSet
 ```
 Connect-MgGraph [-ClientSecretCredential <PSCredential>] [-TenantId <String>] [-ContextScope <ContextScope>]
- [-Environment <String>] [-ClientTimeout <Double>] [-NoWelcome] [<CommonParameters>]
+ [-Environment <String>] [-ClientTimeout <Double>] [-NoWelcome] [-ProgressAction <ActionPreference>]
+ [<CommonParameters>]
 ```
 
 ### AccessTokenParameterSet
 ```
 Connect-MgGraph [-AccessToken] <SecureString> [-Environment <String>] [-ClientTimeout <Double>] [-NoWelcome]
- [<CommonParameters>]
+ [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ### EnvironmentVariableParameterSet
 ```
 Connect-MgGraph [-ContextScope <ContextScope>] [-Environment <String>] [-ClientTimeout <Double>]
- [-EnvironmentVariable] [-NoWelcome] [<CommonParameters>]
+ [-EnvironmentVariable] [-NoWelcome] [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -131,24 +133,50 @@ Uses a user created managed identity as a standalone Azure resource.
 ### Example 11: Connecting to an environment or cloud
 ```powershell
 PS C:\> Get-MgEnvironment
-Name     AzureADEndpoint                   GraphEndpoint                           Type
-----     ---------------                   -------------                           ----
-China    https://login.chinacloudapi.cn    https://microsoftgraph.chinacloudapi.cn Built-in
-Global   https://login.microsoftonline.com https://graph.microsoft.com             Built-in
-USGov    https://login.microsoftonline.us  https://graph.microsoft.us              Built-in
-USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us          Built-in
+Name         AzureADEndpoint                        GraphEndpoint                           Type
+----         ---------------                        -------------                           ----
+BleuCloud    https://login.sovcloud-identity.fr     https://graph.svc.sovcloud.fr           Built-in
+China        https://login.chinacloudapi.cn         https://microsoftgraph.chinacloudapi.cn Built-in
+DelosCloud   https://login.sovcloud-identity.de     https://graph.svc.sovcloud.de           Built-in
+Global       https://login.microsoftonline.com      https://graph.microsoft.com             Built-in
+GovSGCloud   https://login.sovcloud-identity.sg     https://graph.svc.sovcloud.sg           Built-in
+USGov        https://login.microsoftonline.us       https://graph.microsoft.us              Built-in
+USGovDoD     https://login.microsoftonline.us       https://dod-graph.microsoft.us          Built-in
 PS C:\> Connect-MgGraph -Environment USGov
 ```
 
 When you use Connect-MgGraph, you can choose to target other environments. By default, Connect-MgGraph targets the global public cloud.
 
-### Example 12: Connecting to an environment as a different identity
+### Example 12: Connecting to a sovereign cloud with a custom application
+```powershell
+PS C:\> Connect-MgGraph -ClientId "YOUR_APP_CLIENT_ID" -TenantId "YOUR_TENANT_ID" -Environment BleuCloud -Scopes "User.Read.All"
+```
+
+Sovereign cloud environments (BleuCloud, DelosCloud, GovSGCloud) require a custom application registration. You cannot use the default Microsoft Graph PowerShell application in these environments. When registering your application, add an additional redirect URI of `ms-appx-web://Microsoft.AAD.BrokerPlugin/<YOUR_APP_CLIENT_ID>` to support WAM broker-based authentication. Requires Microsoft.Graph.Authentication v2.36.1 or later.
+
+### Example 13: Connecting to a sovereign cloud when WAM authentication hangs
+```powershell
+PS C:\> Set-MgGraphOption -DisableLoginByWAM $true
+PS C:\> Connect-MgGraph -ClientId "YOUR_APP_CLIENT_ID" -TenantId "YOUR_TENANT_ID" -Environment BleuCloud
+```
+
+If the authentication popup hangs or times out when connecting to a sovereign cloud (for example, from a jumpbox), WAM broker-based login may not work in that environment. Disable WAM to use interactive browser sign-in instead. You only need to run `Set-MgGraphOption -DisableLoginByWAM $true` once; the setting persists across sessions.
+
+### Example 14: Connecting to an environment as a different identity
 ```powershell
 PS C:\> Connect-MgGraph -ContextScope Process
 ```
 
 To connect as a different identity other than CurrentUser, specify the -ContextScope parameter with the value Process.
 
+### Example 15: Delegated access: Pre-populating the account during interactive sign-in
+```powershell
+PS C:\> Connect-MgGraph -Scopes "User.Read.All" -LoginHint "user@contoso.com"
+```
+
+Use the -LoginHint parameter to pre-populate the account (login_hint) shown in the interactive browser sign-in prompt.
+On Windows, WAM may still display the account picker on the first sign-in for an account; later sign-ins with the same -LoginHint are silent.
+
 ## PARAMETERS
 
 ### -AccessToken
@@ -336,6 +364,21 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -LoginHint
+The login hint (typically a username or email) used to pre-populate the account field during interactive browser authentication.
+
+```yaml
+Type: String
+Parameter Sets: UserParameterSet
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -NoWelcome
 Hides the welcome message.
 
@@ -351,6 +394,21 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -Scopes
 An array of delegated permissions to consent to.
 
@@ -366,6 +424,21 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -SendCertificateChain
+Include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication using given certificate.
+
+```yaml
+Type: Boolean
+Parameter Sets: AppCertificateParameterSet
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -TenantId
 The id of the tenant to connect to.
 You can also use this parameter to specify your sign-in audience.
diff --git a/src/Authentication/docs/Disconnect-MgGraph.md b/src/Authentication/docs/Disconnect-MgGraph.md
index 58db78b868..b37f7d8df0 100644
--- a/src/Authentication/docs/Disconnect-MgGraph.md
+++ b/src/Authentication/docs/Disconnect-MgGraph.md
@@ -37,28 +37,28 @@ Signs out and additionally removes cached accounts from the Windows broker (WAM)
 
 ## PARAMETERS
 
-### -SignOutFromBroker
-Also removes cached accounts for this module from the Windows broker (WAM). Because the broker store is shared at the OS level, this can sign you out of other broker-enabled applications (for example Visual Studio, Azure CLI, or Azure PowerShell) that use the same Windows account. Has no effect when the broker is not in use.
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
 
 ```yaml
-Type: SwitchParameter
+Type: ActionPreference
 Parameter Sets: (All)
-Aliases:
+Aliases: proga
 
 Required: False
 Position: Named
-Default value: False
+Default value: None
 Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
-### -ProgressAction
-Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+### -SignOutFromBroker
+Also removes cached accounts from the Windows broker (WAM). This is a shared, OS-level store, so it may sign you out of other broker-enabled applications (e.g. Visual Studio, Azure CLI, Azure PowerShell) using the same Windows account.
 
 ```yaml
-Type: ActionPreference
+Type: SwitchParameter
 Parameter Sets: (All)
-Aliases: proga
+Aliases:
 
 Required: False
 Position: Named
diff --git a/src/Authentication/docs/Get-MgContext.md b/src/Authentication/docs/Get-MgContext.md
index 73205cb296..814e21b319 100644
--- a/src/Authentication/docs/Get-MgContext.md
+++ b/src/Authentication/docs/Get-MgContext.md
@@ -13,7 +13,7 @@ Get-MgContext is used to retrieve the details about your current session, which
 ## SYNTAX
 
 ```
-Get-MgContext [<CommonParameters>]
+Get-MgContext [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -61,6 +61,21 @@ Retrieves all scopes.
 
 ## PARAMETERS
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### CommonParameters
 This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
 
diff --git a/src/Authentication/docs/Get-MgEnvironment.md b/src/Authentication/docs/Get-MgEnvironment.md
index bfbeeb85d4..cf8f914c4d 100644
--- a/src/Authentication/docs/Get-MgEnvironment.md
+++ b/src/Authentication/docs/Get-MgEnvironment.md
@@ -13,7 +13,7 @@ When you use Connect-MgGraph, you can choose to target other environments. By de
 ## SYNTAX
 
 ```
-Get-MgEnvironment [[-Name] <String>] [<CommonParameters>]
+Get-MgEnvironment [[-Name] <String>] [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -24,12 +24,15 @@ When you use Connect-MgGraph, you can choose to target other environments. By de
 ### Example 1: Get-MgEnvironment
 ```powershell
 PS C:\> Get-MgEnvironment
-Name     AzureADEndpoint                   GraphEndpoint                           Type
-----     ---------------                   -------------                           ----
-China    https://login.chinacloudapi.cn    https://microsoftgraph.chinacloudapi.cn Built-in
-Global   https://login.microsoftonline.com https://graph.microsoft.com             Built-in
-USGov    https://login.microsoftonline.us  https://graph.microsoft.us              Built-in
-USGovDoD https://login.microsoftonline.us  https://dod-graph.microsoft.us          Built-in
+Name         AzureADEndpoint                        GraphEndpoint                           Type
+----         ---------------                        -------------                           ----
+BleuCloud    https://login.sovcloud-identity.fr     https://graph.svc.sovcloud.fr           Built-in
+China        https://login.chinacloudapi.cn         https://microsoftgraph.chinacloudapi.cn Built-in
+DelosCloud   https://login.sovcloud-identity.de     https://graph.svc.sovcloud.de           Built-in
+Global       https://login.microsoftonline.com      https://graph.microsoft.com             Built-in
+GovSGCloud   https://login.sovcloud-identity.sg     https://graph.svc.sovcloud.sg           Built-in
+USGov        https://login.microsoftonline.us       https://graph.microsoft.us              Built-in
+USGovDoD     https://login.microsoftonline.us       https://dod-graph.microsoft.us          Built-in
 ```
 
 This command gets list of all environments.
@@ -51,6 +54,21 @@ Accept pipeline input: True (ByPropertyName)
 Accept wildcard characters: False
 ```
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### CommonParameters
 This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
 
diff --git a/src/Authentication/docs/Get-MgGraphOption.md b/src/Authentication/docs/Get-MgGraphOption.md
index 3f5c023fb4..60ccb07905 100644
--- a/src/Authentication/docs/Get-MgGraphOption.md
+++ b/src/Authentication/docs/Get-MgGraphOption.md
@@ -13,7 +13,7 @@ Gets global configurations that apply to the SDK. For example, check if Web Acco
 ## SYNTAX
 
 ```
-Get-MgGraphOption [<CommonParameters>]
+Get-MgGraphOption [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -29,21 +29,34 @@ EnableWAMForMSGraph
                 True
 ```
 
-Confirms if WAM support has been enabled.
+Confirms if WAM support has been enabled. Web Account Manager is enabled by default on Windows systems and cannot be disabled.
 
 ## PARAMETERS
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### CommonParameters
 This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
 
 ## INPUTS
 
 ### None
-
 ## OUTPUTS
 
 ### Microsoft.Graph.PowerShell.Authentication.IGraphOption
-
 ## NOTES
 Web Account Manager is enabled by default on Windows systems and cannot be disabled. Setting the `EnableWAMForMSGraph` option no longer has any effect.
 
diff --git a/src/Authentication/docs/Get-MgRequestContext.md b/src/Authentication/docs/Get-MgRequestContext.md
index 57dc617116..cd83532015 100644
--- a/src/Authentication/docs/Get-MgRequestContext.md
+++ b/src/Authentication/docs/Get-MgRequestContext.md
@@ -13,7 +13,7 @@ Gets graph request context details
 ## SYNTAX
 
 ```
-Get-MgRequestContext [-WhatIf] [-Confirm] [<CommonParameters>]
+Get-MgRequestContext [-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -33,6 +33,21 @@ Gets graph request context details
 
 ## PARAMETERS
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -Confirm
 Prompts you for confirmation before running the cmdlet.
 
@@ -70,11 +85,9 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 ## INPUTS
 
 ### None
-
 ## OUTPUTS
 
 ### Microsoft.Graph.PowerShell.Authentication.Core.Interfaces.IRequestContext
-
 ## NOTES
 
 ## RELATED LINKS
diff --git a/src/Authentication/docs/Invoke-MgGraphRequest.md b/src/Authentication/docs/Invoke-MgGraphRequest.md
index 5db5c8f361..3897488c22 100644
--- a/src/Authentication/docs/Invoke-MgGraphRequest.md
+++ b/src/Authentication/docs/Invoke-MgGraphRequest.md
@@ -18,7 +18,7 @@ Invoke-MgGraphRequest [[-Method] <GraphRequestMethod>] [-Uri] <Uri> [[-Body] <Ob
  [-PassThru] [-SkipHeaderValidation] [[-ContentType] <String>] [[-SessionVariable] <String>]
  [[-ResponseHeadersVariable] <String>] [[-StatusCodeVariable] <String>] [-SkipHttpErrorCheck]
  [[-GraphRequestSession] <GraphRequestSession>] [[-UserAgent] <String>] [[-OutputType] <OutputType>]
- [<CommonParameters>]
+ [-ProgressAction <ActionPreference>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -203,6 +203,21 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -ResponseHeadersVariable
 Response Headers Variable
 
diff --git a/src/Authentication/docs/Microsoft.Graph.Authentication.md b/src/Authentication/docs/Microsoft.Graph.Authentication.md
index c09769b3cc..1c7747b5f6 100644
--- a/src/Authentication/docs/Microsoft.Graph.Authentication.md
+++ b/src/Authentication/docs/Microsoft.Graph.Authentication.md
@@ -1,6 +1,6 @@
 ---
 Module Name: Microsoft.Graph.Authentication
-Module Guid: 0fecf360-9875-4e02-998c-b6d7b6653b6b
+Module Guid: 883916f2-9184-46ee-b1f8-b6a2fb784cee
 Download Help Link: https://learn.microsoft.com/powershell/module/Microsoft.Graph.Authentication
 Help Version: 1.0.0.0
 Locale: en-US
@@ -48,7 +48,7 @@ Removes Microsoft Graph environment to the settings file
 Sets a Microsoft Graph environment to the settings file.
 
 ### [Set-MgGraphOption](Set-MgGraphOption.md)
-Sets global configurations that apply to the SDK. For example, toggle Web Account Manager (WAM) support. Web Account Manager is enabled by default on Windows systems and cannot be disabled.
+Sets global configurations that apply to the SDK. For example, toggle Web Account Manager (WAM) support.
 
 ### [Set-MgRequestContext](Set-MgRequestContext.md)
 Sets request context for Microsoft Graph invocations
diff --git a/src/Authentication/docs/Remove-MgEnvironment.md b/src/Authentication/docs/Remove-MgEnvironment.md
index 4fd5c7a044..b8def86950 100644
--- a/src/Authentication/docs/Remove-MgEnvironment.md
+++ b/src/Authentication/docs/Remove-MgEnvironment.md
@@ -13,7 +13,8 @@ Removes Microsoft Graph environment to the settings file
 ## SYNTAX
 
 ```
-Remove-MgEnvironment [-Name] <String> [-WhatIf] [-Confirm] [<CommonParameters>]
+Remove-MgEnvironment [-Name] <String> [-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm]
+ [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -48,6 +49,21 @@ Accept pipeline input: True (ByPropertyName)
 Accept wildcard characters: False
 ```
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -Confirm
 Prompts you for confirmation before running the cmdlet.
 
@@ -85,14 +101,13 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 ## INPUTS
 
 ### System.String
-
 ## OUTPUTS
 
 ### Microsoft.Graph.PowerShell.Authentication.Models.GraphEnvironment
-
 ## NOTES
 
 ## RELATED LINKS
 
 [https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/remove-mgenvironment](https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/remove-mgenvironment)
 
+
diff --git a/src/Authentication/docs/Set-MgEnvironment.md b/src/Authentication/docs/Set-MgEnvironment.md
index 12e2632fce..7404de1a83 100644
--- a/src/Authentication/docs/Set-MgEnvironment.md
+++ b/src/Authentication/docs/Set-MgEnvironment.md
@@ -13,8 +13,8 @@ Sets a Microsoft Graph environment to the settings file.
 ## SYNTAX
 
 ```
-Set-MgEnvironment [-Name] <String> [[-AzureADEndpoint] <String>] [[-GraphEndpoint] <String>] [-WhatIf]
- [-Confirm] [<CommonParameters>]
+Set-MgEnvironment [-Name] <String> [[-AzureADEndpoint] <String>] [[-GraphEndpoint] <String>]
+ [-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -76,6 +76,21 @@ Accept pipeline input: True (ByPropertyName)
 Accept wildcard characters: False
 ```
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -Confirm
 Prompts you for confirmation before running the cmdlet.
 
diff --git a/src/Authentication/docs/Set-MgGraphOption.md b/src/Authentication/docs/Set-MgGraphOption.md
index 32abbbdb8c..b519e5fa54 100644
--- a/src/Authentication/docs/Set-MgGraphOption.md
+++ b/src/Authentication/docs/Set-MgGraphOption.md
@@ -28,6 +28,14 @@ PS C:\> Set-MgGraphOption -DisableLoginByWAM $True
 
  Disables sign in via Web Account Manager (WAM). Note: This only takes effect when using a custom ClientId. When using the default ClientId, WAM remains enabled regardless of this setting.
 
+### Example 2: Disable WAM for sovereign cloud environments
+```powershell
+PS C:\> Set-MgGraphOption -DisableLoginByWAM $true
+PS C:\> Connect-MgGraph -ClientId "YOUR_APP_CLIENT_ID" -TenantId "YOUR_TENANT_ID" -Environment BleuCloud
+```
+
+If WAM broker-based authentication hangs or times out when connecting to a sovereign cloud environment (such as BleuCloud, DelosCloud, or GovSGCloud), disable WAM to fall back to interactive browser sign-in. This can occur when authenticating from environments like jumpboxes. The setting persists across PowerShell sessions.
+
 ## PARAMETERS
 
 ### -DisableLoginByWAM
@@ -46,7 +54,7 @@ Accept wildcard characters: False
 ```
 
 ### -ProgressAction
-{{ Fill ProgressAction Description }}
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
 
 ```yaml
 Type: ActionPreference
diff --git a/src/Authentication/docs/Set-MgRequestContext.md b/src/Authentication/docs/Set-MgRequestContext.md
index afd36ba276..09506679ed 100644
--- a/src/Authentication/docs/Set-MgRequestContext.md
+++ b/src/Authentication/docs/Set-MgRequestContext.md
@@ -14,7 +14,7 @@ Sets request context for Microsoft Graph invocations
 
 ```
 Set-MgRequestContext [-RetryDelay <Int32>] [-MaxRetry <Int32>] [-RetriesTimeLimit <Int32>]
- [-ClientTimeout <Int32>] [-WhatIf] [-Confirm] [<CommonParameters>]
+ [-ClientTimeout <Int32>] [-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -95,6 +95,21 @@ Accept pipeline input: True (ByPropertyName)
 Accept wildcard characters: False
 ```
 
+### -ProgressAction
+Determines how PowerShell responds to progress updates generated by this cmdlet. This is a common parameter introduced in PowerShell 7.4.
+
+```yaml
+Type: ActionPreference
+Parameter Sets: (All)
+Aliases: proga
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -RetriesTimeLimit
 Sets the maximum time in seconds allowed for request retries.
 
@@ -163,11 +178,9 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 ## INPUTS
 
 ### System.Int32
-
 ## OUTPUTS
 
 ### Microsoft.Graph.PowerShell.Authentication.Core.Interfaces.IRequestContext
-
 ## NOTES
 
 ## RELATED LINKS
diff --git a/src/Authentication/examples/Connect-MgGraph.md b/src/Authentication/examples/Connect-MgGraph.md
index edc1c93101..bd135a8467 100644
--- a/src/Authentication/examples/Connect-MgGraph.md
+++ b/src/Authentication/examples/Connect-MgGraph.md
@@ -96,3 +96,10 @@ If the authentication popup hangs or times out when connecting to a sovereign cl
 PS C:\> Connect-MgGraph -ContextScope Process
 ```
 To connect as a different identity other than CurrentUser, specify the -ContextScope parameter with the value Process.
+
+### Example 15: Delegated access: Pre-populating the account during interactive sign-in
+```powershell
+PS C:\> Connect-MgGraph -Scopes "User.Read.All" -LoginHint "user@contoso.com"
+```
+Use the -LoginHint parameter to pre-populate the account (login_hint) shown in the interactive browser sign-in prompt.
+On Windows, WAM may still display the account picker on the first sign-in for an account; later sign-ins with the same -LoginHint are silent.
diff --git a/tools/Compare-WrapperCmdletNames.ps1 b/tools/Compare-WrapperCmdletNames.ps1
new file mode 100644
index 0000000000..418790973d
--- /dev/null
+++ b/tools/Compare-WrapperCmdletNames.ps1
@@ -0,0 +1,242 @@
+<#
+.SYNOPSIS
+Parity gate for kiota's PowerShellWrapper generator.
+
+.DESCRIPTION
+See the kiota repo: src/Kiota.Builder/PowerShellWrapper/README.md, sections 4 and 6.
+
+For every generated *.g.cs cmdlet file, reconstructs the HTTP method and URI from the
+client.<BuilderExpression>.<Method>Async( call chain (CmdletEmitter.cs's templates; the
+chain shape comes from CmdletNaming.BuildBuilderExpression), joins it against the
+Method+Uri -> Command inventory in MgCommandMetadata.json, and reports whether the
+emitted [Cmdlet(...)] name matches what the oracle says the published SDK calls that
+operation.
+
+Dispatcher cmdlets (the paired-GET public cmdlet that only forwards to its internal
+_List/_Get siblings via InvokeCommand.InvokeScript - see CmdletEmitter.EmitGetDispatcher)
+contain no direct Graph call, so there is nothing to reconstruct from their source; they
+are reported separately per module and excluded from the match ratio. Their two internal
+siblings do carry real calls and are what actually gets checked against the oracle.
+
+Path parameter names are not exactly recoverable from the generated C#: CmdletNaming
+.ExtractPathParamNames PascalCases each hyphen-chunk of a raw "{some-id}" segment and
+concatenates with no separator kept, so e.g. "conditionalAccessPolicy-id" and a
+hypothetical "conditionalAccess-policy-id" would both produce the indexer name
+"ConditionalAccessPolicyId" - the hyphen position inside a multi-word param name is lost.
+Fixed path segments do not have this problem (BuildBuilderExpression only ever uppercases
+the first character of a whole segment, which is exactly reversible). So this script
+compares fixed segments exactly and normalizes every path parameter, on both the
+generated and the oracle side, to a single "{param}" placeholder before joining.
+
+The oracle carries both v1.0 and beta rows, and many operations have the identical
+Method+URI in both (only the Command prefix differs: Get-MgUserMessage vs
+Get-MgBetaUserMessage) - joining on Method+URI alone is ambiguous. Each module's
+kiota-lock.json (written next to its *.g.cs files) records the descriptionLocation the
+module was generated from, e.g. "../../openApiDocs/v1.0/Mail.yml"; this script reads the
+v1.0/beta segment out of that path and scopes the oracle lookup to just that ApiVersion.
+A module folder with no kiota-lock.json (or an unrecognized descriptionLocation) falls
+back to searching every ApiVersion and reports a real ambiguity if more than one distinct
+command turns up.
+
+.PARAMETER GeneratedPath
+A folder of generated *.g.cs files for one module, or a folder containing one
+subfolder per module (each with its own *.g.cs files) - e.g. the repo's generated/.
+
+.PARAMETER OraclePath
+Path to MgCommandMetadata.json.
+
+.EXAMPLE
+.\tools\Compare-WrapperCmdletNames.ps1
+.\tools\Compare-WrapperCmdletNames.ps1 -GeneratedPath generated\Mail
+#>
+[CmdletBinding()]
+param(
+    [string]$GeneratedPath = (Join-Path $PSScriptRoot '..\generated'),
+    [string]$OraclePath = (Join-Path $PSScriptRoot '..\src\Authentication\Authentication\custom\common\MgCommandMetadata.json')
+)
+
+$ErrorActionPreference = 'Stop'
+
+if (-not (Test-Path $GeneratedPath)) {
+    Write-Error "Generated path not found: $GeneratedPath"
+    exit 1
+}
+if (-not (Test-Path $OraclePath)) {
+    Write-Error "Oracle file not found: $OraclePath"
+    exit 1
+}
+
+# One folder full of *.g.cs directly, or one folder per module. Handles both so the script
+# works whether -GeneratedPath points at generated/ or at generated/Mail directly.
+function Get-WrapperModuleFolders {
+    param([string]$Root)
+
+    $rootItem = Get-Item -Path $Root
+    $direct = Get-ChildItem -Path $rootItem.FullName -Filter '*.g.cs' -File -ErrorAction SilentlyContinue
+    if ($direct) {
+        return @([pscustomobject]@{ Name = $rootItem.Name; Path = $rootItem.FullName })
+    }
+
+    Get-ChildItem -Path $rootItem.FullName -Directory -ErrorAction SilentlyContinue | ForEach-Object {
+        if (Get-ChildItem -Path $_.FullName -Filter '*.g.cs' -File -ErrorAction SilentlyContinue) {
+            [pscustomobject]@{ Name = $_.Name; Path = $_.FullName }
+        }
+    }
+}
+
+function ConvertTo-NormalizedOracleUri {
+    param([string]$Uri)
+    $parts = $Uri.Trim('/') -split '/'
+    $norm = foreach ($p in $parts) {
+        if ($p -match '^\{.*\}$') { '{param}' } else { $p }
+    }
+    '/' + ($norm -join '/')
+}
+
+function ConvertTo-NormalizedGeneratedUri {
+    param([string]$BuilderExpression)
+    $segments = @()
+    foreach ($token in ($BuilderExpression -split '\.')) {
+        if ($token -notmatch '^([A-Za-z0-9]+)(\[([A-Za-z0-9]+)\])?$') {
+            return $null
+        }
+        $prop = $Matches[1]
+        $segments += ($prop.Substring(0, 1).ToLowerInvariant() + $prop.Substring(1))
+        if ($Matches[3]) { $segments += '{param}' }
+    }
+    '/' + ($segments -join '/')
+}
+
+# Reads the v1.0/beta segment out of a module's kiota-lock.json ("descriptionLocation":
+# "../../openApiDocs/v1.0/Mail.yml"), so the oracle join can be scoped to the ApiVersion
+# the module was actually generated from instead of guessing.
+function Get-ModuleApiVersion {
+    param([string]$ModulePath)
+    $lockPath = Join-Path $ModulePath 'kiota-lock.json'
+    if (-not (Test-Path $lockPath)) { return $null }
+    $loc = (Get-Content -Path $lockPath -Raw | ConvertFrom-Json).descriptionLocation
+    if (-not $loc) { return $null }
+    if ($loc -match '(^|[\\/])v1\.0([\\/]|$)') { return 'v1.0' }
+    if ($loc -match '(^|[\\/])beta([\\/]|$)') { return 'beta' }
+    return $null
+}
+
+Write-Host "Loading oracle from $OraclePath ..."
+$oracle = Get-Content -Path $OraclePath -Raw | ConvertFrom-Json
+
+$oracleIndex = @{}
+foreach ($entry in $oracle) {
+    if (-not $entry.Method -or -not $entry.Uri -or -not $entry.Command -or -not $entry.ApiVersion) { continue }
+    $key = "$($entry.ApiVersion)|$($entry.Method)|$(ConvertTo-NormalizedOracleUri $entry.Uri)"
+    if (-not $oracleIndex.ContainsKey($key)) {
+        $oracleIndex[$key] = [System.Collections.Generic.HashSet[string]]::new()
+    }
+    [void]$oracleIndex[$key].Add($entry.Command)
+}
+Write-Host "Indexed $($oracle.Count) oracle entries into $($oracleIndex.Count) ApiVersion+Method+URI keys."
+Write-Host ''
+
+# Looks up one Method+URI, scoped to $ApiVersion when known; falls back to searching every
+# ApiVersion (and merging what turns up) when the module's own version couldn't be
+# determined, so an unresolvable version shows up as a real ambiguity, not a false match.
+function Find-OracleCommands {
+    param([hashtable]$Index, [string]$ApiVersion, [string]$Method, [string]$NormalizedUri)
+    if ($ApiVersion) {
+        return $Index["$ApiVersion|$Method|$NormalizedUri"]
+    }
+    $merged = [System.Collections.Generic.HashSet[string]]::new()
+    foreach ($v in 'v1.0', 'beta') {
+        $found = $Index["$v|$Method|$NormalizedUri"]
+        if ($found) { [void]$merged.UnionWith($found) }
+    }
+    if ($merged.Count -eq 0) { return $null }
+    return $merged
+}
+
+$cmdletAttrPattern = '\[Cmdlet\(Verbs\w+\.(\w+),\s*"([^"]+)"'
+$callChainPattern = 'client\.([A-Za-z0-9_.\[\]]+)\.(Get|Post|Patch|Put|Delete)Async\('
+
+$modules = @(Get-WrapperModuleFolders -Root $GeneratedPath)
+if ($modules.Count -eq 0) {
+    Write-Error "No *.g.cs files found under $GeneratedPath"
+    exit 1
+}
+
+$totalJoinable = 0
+$totalMatched = 0
+$totalMismatches = 0
+$totalDispatchers = 0
+
+foreach ($module in $modules | Sort-Object Name) {
+    $files = Get-ChildItem -Path $module.Path -Filter '*.g.cs' -File | Sort-Object Name
+    $apiVersion = Get-ModuleApiVersion -ModulePath $module.Path
+    $moduleJoinable = 0
+    $moduleMatched = 0
+    $moduleDispatchers = 0
+    $moduleProblems = @()
+
+    foreach ($file in $files) {
+        $content = Get-Content -Path $file.FullName -Raw
+
+        $attrMatch = [regex]::Match($content, $cmdletAttrPattern)
+        if (-not $attrMatch.Success) {
+            continue # not a cmdlet file (Shared.g.cs)
+        }
+        $verb = $attrMatch.Groups[1].Value
+        $generatedNoun = $attrMatch.Groups[2].Value
+        $publishedNoun = $generatedNoun -replace '_(List|Get)$', ''
+        $generatedCommand = "$verb-$generatedNoun"
+        $expectedCommand = "$verb-$publishedNoun"
+
+        $callMatch = [regex]::Match($content, $callChainPattern)
+        if (-not $callMatch.Success) {
+            $moduleDispatchers++
+            continue # dispatcher: delegates to internal cmdlets, nothing to reconstruct here
+        }
+
+        $builderExpr = $callMatch.Groups[1].Value
+        $method = $callMatch.Groups[2].Value.ToUpperInvariant()
+        $normalizedUri = ConvertTo-NormalizedGeneratedUri -BuilderExpression $builderExpr
+
+        $moduleJoinable++
+
+        if (-not $normalizedUri) {
+            $moduleProblems += "  [UNPARSEABLE] $($file.Name): builder expression '$builderExpr' has a segment this script doesn't recognize (e.g. an OData cast segment - see README section 7, cast endpoints aren't generated yet)."
+            continue
+        }
+
+        $candidates = Find-OracleCommands -Index $oracleIndex -ApiVersion $apiVersion -Method $method -NormalizedUri $normalizedUri
+
+        if (-not $candidates -or $candidates.Count -eq 0) {
+            $moduleProblems += "  [NO ORACLE ENTRY] $($file.Name): '$generatedCommand' -> reconstructed $method $normalizedUri, no oracle row for that Method+URI."
+        }
+        elseif ($candidates.Count -gt 1) {
+            $moduleProblems += "  [AMBIGUOUS] $($file.Name): $method $normalizedUri matches multiple oracle commands: $($candidates -join ', ')."
+        }
+        elseif ($candidates.Contains($expectedCommand)) {
+            $moduleMatched++
+        }
+        else {
+            $moduleProblems += "  [MISMATCH] $($file.Name): generated '$expectedCommand', oracle says '$($candidates | Select-Object -First 1)' for $method $normalizedUri."
+        }
+    }
+
+    $status = if ($moduleJoinable -eq 0) { 'n/a' } else { "$moduleMatched of $moduleJoinable" }
+    $dispatcherNote = if ($moduleDispatchers -gt 0) { " (+$moduleDispatchers dispatcher cmdlet(s), no direct call to verify)" } else { '' }
+    $versionNote = if ($apiVersion) { " [$apiVersion]" } else { ' [ApiVersion unknown - searched all versions]' }
+    Write-Host "$($module.Name)$($versionNote): $status cmdlets match the oracle$dispatcherNote"
+    foreach ($line in $moduleProblems) { Write-Host $line -ForegroundColor Yellow }
+
+    $totalJoinable += $moduleJoinable
+    $totalMatched += $moduleMatched
+    $totalMismatches += $moduleProblems.Count
+    $totalDispatchers += $moduleDispatchers
+}
+
+Write-Host ''
+Write-Host "TOTAL: $totalMatched of $totalJoinable cmdlets match the oracle across $($modules.Count) module(s) (+$totalDispatchers dispatcher cmdlet(s) skipped)."
+
+if ($totalMismatches -gt 0) {
+    exit 1
+}
+exit 0
diff --git a/tools/WrapperGenerator.Tests/EmitterTests.cs b/tools/WrapperGenerator.Tests/EmitterTests.cs
new file mode 100644
index 0000000000..a6b9b86aff
--- /dev/null
+++ b/tools/WrapperGenerator.Tests/EmitterTests.cs
@@ -0,0 +1,33 @@
+using System.Collections.Generic;
+using WrapperGenerator;
+using Xunit;
+
+namespace WrapperGenerator.Tests;
+
+public sealed class EmitterTests
+{
+    // A spec-derived noun or header name containing a double quote must be escaped where it is
+    // interpolated into a generated C# string literal, or the generated source will not compile.
+    [Fact]
+    public void EscapesQuotesInSpecDerivedStringLiterals()
+    {
+        var naming = new CmdletNaming(
+            VerbsClass: "VerbsCommon",
+            VerbName: "Remove",
+            Noun: "MgHe\"llo",                       // quote lands in the [Cmdlet(..., "...")] literal
+            ClassName: "RemoveMgHelloCommand",        // class name is a separate, valid identifier
+            PathParamNames: new[] { "UserId" },
+            BuilderExpression: "Users[UserId]",
+            HeaderParams: new[] { new HeaderParam("If\"Match", "IfMatch") }); // quote in a header name
+
+        var source = CmdletEmitter.EmitRemove(naming, new EmitContext("Test.Client"));
+
+        // Escaped forms present (valid literals).
+        Assert.Contains("\"MgHe\\\"llo\"", source);   // "MgHe\"llo"
+        Assert.Contains("\"If\\\"Match\"", source);   // "If\"Match"
+
+        // Broken/unescaped forms absent.
+        Assert.DoesNotContain("\"MgHe\"llo\"", source); // "MgHe"llo"
+        Assert.DoesNotContain("\"If\"Match\"", source); // "If"Match"
+    }
+}
diff --git a/tools/WrapperGenerator.Tests/GenerationServiceRegressionTests.cs b/tools/WrapperGenerator.Tests/GenerationServiceRegressionTests.cs
new file mode 100644
index 0000000000..271049ab62
--- /dev/null
+++ b/tools/WrapperGenerator.Tests/GenerationServiceRegressionTests.cs
@@ -0,0 +1,149 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Net.Http;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.OpenApi;
+using WrapperGenerator;
+using Xunit;
+
+namespace WrapperGenerator.Tests;
+
+public sealed class GenerationServiceRegressionTests
+{
+    [Fact]
+    public async Task GenerateAsync_SkipsGetWithoutJsonSuccessSchema_DoesNotThrow()
+    {
+        var operation = new OpenApiOperation
+        {
+            OperationId = "user_get_plain_text",
+            Responses = new OpenApiResponses
+            {
+                ["200"] = new OpenApiResponse
+                {
+                    Content = new Dictionary<string, IOpenApiMediaType>
+                    {
+                        ["text/plain"] = new OpenApiMediaType
+                        {
+                            Schema = new OpenApiSchema { Type = JsonSchemaType.String },
+                        },
+                    },
+                },
+            },
+        };
+
+        var document = BuildDocument(HttpMethod.Get, "/users/{user-id}", operation);
+        var files = await RunGeneratorAndListFilesAsync(document);
+
+        Assert.Contains("Shared.g.cs", files);
+        Assert.DoesNotContain(files, f => f != "Shared.g.cs");
+    }
+
+    [Fact]
+    public async Task GenerateAsync_SkipsUnsupportedHttpMethod_DoesNotThrow()
+    {
+        var operation = new OpenApiOperation
+        {
+            OperationId = "user_set_photo_value",
+            RequestBody = new OpenApiRequestBody
+            {
+                Content = new Dictionary<string, IOpenApiMediaType>
+                {
+                    ["application/json"] = new OpenApiMediaType
+                    {
+                        Schema = new OpenApiSchema
+                        {
+                            Type = JsonSchemaType.Object,
+                            Properties = new Dictionary<string, IOpenApiSchema>
+                            {
+                                ["displayName"] = new OpenApiSchema { Type = JsonSchemaType.String },
+                            },
+                        },
+                    },
+                },
+            },
+        };
+
+        var document = BuildDocument(HttpMethod.Put, "/users/{user-id}/photo/$value", operation);
+        var files = await RunGeneratorAndListFilesAsync(document);
+
+        Assert.Contains("Shared.g.cs", files);
+        Assert.DoesNotContain(files, f => f != "Shared.g.cs");
+    }
+
+    [Fact]
+    public async Task GenerateAsync_SkipsPostWithNonRefBodySchema_DoesNotThrow()
+    {
+        var operation = new OpenApiOperation
+        {
+            OperationId = "user_create_inline",
+            RequestBody = new OpenApiRequestBody
+            {
+                Content = new Dictionary<string, IOpenApiMediaType>
+                {
+                    ["application/json"] = new OpenApiMediaType
+                    {
+                        // Inline object schema (no $ref) previously caused entity-type resolution crashes.
+                        Schema = new OpenApiSchema
+                        {
+                            Type = JsonSchemaType.Object,
+                            Properties = new Dictionary<string, IOpenApiSchema>
+                            {
+                                ["displayName"] = new OpenApiSchema { Type = JsonSchemaType.String },
+                            },
+                        },
+                    },
+                },
+            },
+        };
+
+        var document = BuildDocument(HttpMethod.Post, "/users", operation);
+        var files = await RunGeneratorAndListFilesAsync(document);
+
+        Assert.Contains("Shared.g.cs", files);
+        Assert.DoesNotContain(files, f => f != "Shared.g.cs");
+    }
+
+    private static OpenApiDocument BuildDocument(HttpMethod method, string path, OpenApiOperation operation)
+    {
+        return new OpenApiDocument
+        {
+            Paths = new OpenApiPaths
+            {
+                [path] = new OpenApiPathItem
+                {
+                    Operations = new Dictionary<HttpMethod, OpenApiOperation>
+                    {
+                        [method] = operation,
+                    },
+                },
+            },
+        };
+    }
+
+    private static async Task<string[]> RunGeneratorAndListFilesAsync(OpenApiDocument document)
+    {
+        var outputDir = Path.Combine(Path.GetTempPath(), "wrapper-generator-tests", Guid.NewGuid().ToString("N"));
+        Directory.CreateDirectory(outputDir);
+
+        try
+        {
+            var config = new GeneratorConfig("Microsoft.Graph.PowerShell.Test.Client", outputDir);
+            var service = new PowerShellWrapperGenerationService(document, config, NullLogger.Instance);
+
+            await service.GenerateAsync(CancellationToken.None);
+
+            var files = Directory.GetFiles(outputDir, "*.g.cs", SearchOption.TopDirectoryOnly);
+            for (var i = 0; i < files.Length; i++)
+                files[i] = Path.GetFileName(files[i]);
+            return files;
+        }
+        finally
+        {
+            if (Directory.Exists(outputDir))
+                Directory.Delete(outputDir, recursive: true);
+        }
+    }
+}
diff --git a/tools/WrapperGenerator.Tests/NamingTests.cs b/tools/WrapperGenerator.Tests/NamingTests.cs
new file mode 100644
index 0000000000..6ef40d424f
--- /dev/null
+++ b/tools/WrapperGenerator.Tests/NamingTests.cs
@@ -0,0 +1,188 @@
+using System.Collections.Generic;
+using WrapperGenerator;
+using Xunit;
+
+namespace WrapperGenerator.Tests;
+
+// The expected values are the published Microsoft.Graph cmdlet names, taken from the
+// MgCommandMetadata.json inventory that ships inside Microsoft.Graph.Authentication.
+// Changing one of these is a deliberate break from SDK parity and belongs in the
+// migration guide, not in a quiet test edit.
+public sealed class SingularizerTests
+{
+    [Theory]
+    // ies -> y
+    [InlineData("Policies", "Policy")]
+    [InlineData("Categories", "Category")]
+    // uses -> us (Get-MgDeviceManagementDeviceConfigurationUserStatus)
+    [InlineData("Statuses", "Status")]
+    // sibilant es
+    [InlineData("Businesses", "Business")]
+    [InlineData("Mailboxes", "Mailbox")]
+    [InlineData("Branches", "Branch")]
+    // ss/us/is guard
+    [InlineData("Access", "Access")]
+    [InlineData("Status", "Status")]
+    [InlineData("Analysis", "Analysis")]
+    // plain s
+    [InlineData("Messages", "Message")]
+    [InlineData("Plans", "Plan")]
+    [InlineData("Settings", "Setting")]
+    [InlineData("Licenses", "License")]
+    // irregulars (Get-MgDriveItemChild, Get-MgUserPerson)
+    [InlineData("Children", "Child")]
+    [InlineData("People", "Person")]
+    // invariants (Get-MgUserSettingWindows)
+    [InlineData("Windows", "Windows")]
+    // acronyms are never plural forms
+    [InlineData("OS", "OS")]
+    public void SingularizesWords(string word, string expected)
+    {
+        Assert.Equal(expected, Singularizer.SingularizeWord(word));
+    }
+
+    [Theory]
+    [InlineData("Users", "User")]
+    [InlineData("ManagedDevices", "ManagedDevice")]
+    [InlineData("BookingBusinesses", "BookingBusiness")]
+    [InlineData("ReportSettings", "ReportSetting")]
+    [InlineData("ConditionalAccess", "ConditionalAccess")]
+    // per-word inflection, matching the published SDK's inflector:
+    // Update-MgDeviceManagementTermAndCondition
+    [InlineData("TermsAndConditions", "TermAndCondition")]
+    // Get-MgDirectoryOnPremiseSynchronization (interior word singularized)
+    [InlineData("OnPremisesSynchronization", "OnPremiseSynchronization")]
+    // version tag: Get-MgSecurityAlertV2
+    [InlineData("Alerts_v2", "AlertV2")]
+    public void SingularizesSegments(string segment, string expected)
+    {
+        Assert.Equal(expected, Singularizer.SingularizeSegment(segment));
+    }
+}
+
+public sealed class NamingTests
+{
+    private static CmdletNaming Resolve(string method, string path)
+    {
+        var pathParams = new List<string>();
+        foreach (var segment in path.Split('/'))
+        {
+            if (segment.StartsWith('{') && segment.EndsWith('}'))
+                pathParams.Add(segment[1..^1]);
+        }
+        return Naming.Resolve(new OperationInfo(method, path, "test_op", pathParams, [], HasBody: false));
+    }
+
+    [Theory]
+    // pilot module goldens (Microsoft.Graph.* 2.37.0 names)
+    [InlineData("GET", "/users", "Get", "MgUser")]
+    [InlineData("GET", "/users/{user-id}", "Get", "MgUser")]
+    [InlineData("POST", "/users", "New", "MgUser")]
+    [InlineData("PATCH", "/users/{user-id}", "Update", "MgUser")]
+    [InlineData("DELETE", "/users/{user-id}", "Remove", "MgUser")]
+    [InlineData("GET", "/users/{user-id}/messages", "Get", "MgUserMessage")]
+    [InlineData("GET", "/users/{user-id}/messages/{message-id}", "Get", "MgUserMessage")]
+    [InlineData("GET", "/users/{user-id}/contacts", "Get", "MgUserContact")]
+    [InlineData("GET", "/applications/{application-id}", "Get", "MgApplication")]
+    [InlineData("GET", "/deviceManagement/managedDevices", "Get", "MgDeviceManagementManagedDevice")]
+    [InlineData("GET", "/identity/conditionalAccess/policies/{conditionalAccessPolicy-id}", "Get", "MgIdentityConditionalAccessPolicy")]
+    [InlineData("GET", "/planner/plans", "Get", "MgPlannerPlan")]
+    [InlineData("GET", "/security/alerts_v2", "Get", "MgSecurityAlertV2")]
+    [InlineData("PATCH", "/admin/reportSettings", "Update", "MgAdminReportSetting")]
+    [InlineData("GET", "/schemaExtensions", "Get", "MgSchemaExtension")]
+    [InlineData("GET", "/domains/{domain-id}", "Get", "MgDomain")]
+    [InlineData("GET", "/groups/{group-id}", "Get", "MgGroup")]
+    [InlineData("GET", "/teams/{team-id}", "Get", "MgTeam")]
+    // overrides mirroring the SDK's own AutoRest directives (see NamingOverrides)
+    [InlineData("GET", "/solutions/bookingBusinesses/{bookingBusiness-id}", "Get", "MgBookingBusiness")]
+    [InlineData("PATCH", "/solutions/bookingBusinesses/{bookingBusiness-id}", "Update", "MgBookingBusiness")]
+    [InlineData("GET", "/users/{user-id}/calendar", "Get", "MgUserDefaultCalendar")]
+    // boundary word-overlap collapse (Get-MgDomainNameReference)
+    [InlineData("GET", "/domains/{domain-id}/domainNameReferences", "Get", "MgDomainNameReference")]
+    // adjacent-duplicate collapse (Get-MgUserOnenoteSectionGroup... family)
+    [InlineData("GET", "/users/{user-id}/onenote/sectionGroups/{sectionGroup-id}/sectionGroups", "Get", "MgUserOnenoteSectionGroup")]
+    // OData cast segments (Get-MgGroupOwnerAsUser)
+    [InlineData("GET", "/groups/{group-id}/owners/{directoryObject-id}/graph.user", "Get", "MgGroupOwnerAsUser")]
+    public void ResolvesPublishedSdkNames(string method, string path, string expectedVerb, string expectedNoun)
+    {
+        var naming = Resolve(method, path);
+        Assert.Equal(expectedVerb, naming.VerbName);
+        Assert.Equal(expectedNoun, naming.Noun);
+        Assert.Equal($"{expectedVerb}{expectedNoun}Command", naming.ClassName);
+    }
+
+    [Theory]
+    // The builder expression is the Kiota request-builder chain the emitted cmdlet calls
+    // (client.<expr>.GetAsync()). A property per fixed segment, an indexer per path parameter.
+    [InlineData("/users", "Users")]
+    [InlineData("/users/{user-id}", "Users[UserId]")]
+    [InlineData("/users/{user-id}/messages", "Users[UserId].Messages")]
+    [InlineData("/users/{user-id}/messages/{message-id}", "Users[UserId].Messages[MessageId]")]
+    [InlineData("/deviceManagement/managedDevices", "DeviceManagement.ManagedDevices")]
+    [InlineData("/identity/conditionalAccess/policies/{conditionalAccessPolicy-id}", "Identity.ConditionalAccess.Policies[ConditionalAccessPolicyId]")]
+    // OData cast segments: a dotted segment is one Kiota builder member, not a member access.
+    // Verified against a real Kiota C# client: microsoft.graph.user -> the MicrosoftGraphUser
+    // request-builder property; graph.user (KiotaCompat form) -> GraphUser by the same rule.
+    [InlineData("/groups/{group-id}/owners/{directoryObject-id}/graph.user", "Groups[GroupId].Owners[DirectoryObjectId].GraphUser")]
+    [InlineData("/groups/{group-id}/owners/{directoryObject-id}/microsoft.graph.user", "Groups[GroupId].Owners[DirectoryObjectId].MicrosoftGraphUser")]
+    public void BuildsKiotaBuilderExpression(string path, string expectedExpression)
+    {
+        Assert.Equal(expectedExpression, Resolve("GET", path).BuilderExpression);
+    }
+
+    [Fact]
+    public void SuppressesOperationsThePublishedSdkOmits()
+    {
+        // Calendar.md remove-path-by-operation user_UpdateCalendar: no Update cmdlet ships for
+        // the default-calendar singleton.
+        Assert.True(NamingOverrides.IsSuppressed("PATCH", "/users/{user-id}/calendar"));
+        Assert.False(NamingOverrides.IsSuppressed("GET", "/users/{user-id}/calendar"));
+        Assert.False(NamingOverrides.IsSuppressed("PATCH", "/users/{user-id}/messages/{message-id}"));
+    }
+
+    [Fact]
+    public void ListAndItemGetsShareTheNounSoDispatcherPairingSurvives()
+    {
+        var list = Resolve("GET", "/users/{user-id}/messages");
+        var item = Resolve("GET", "/users/{user-id}/messages/{message-id}");
+        Assert.Equal(list.Noun, item.Noun);
+
+        var internalList = Naming.WithSuffix(list, "_List");
+        Assert.Equal("MgUserMessage_List", internalList.Noun);
+        Assert.Equal("GetMgUserMessage_ListCommand", internalList.ClassName);
+    }
+
+    [Fact]
+    public void CleanListItemPairMerges()
+    {
+        // A list GET and its item GET one id deeper share a noun and fit structurally, so they
+        // merge into the single public Get-MgUserMessage dispatcher.
+        var list = Resolve("GET", "/users/{user-id}/messages");
+        var item = Resolve("GET", "/users/{user-id}/messages/{message-id}");
+        Assert.Equal(list.Noun, item.Noun);
+        Assert.True(Naming.IsListItemPair(list, item));
+    }
+
+    [Fact]
+    public void GetWithNoStructuralPartnerStaysStandalone()
+    {
+        // A list under one resource and an item under a different resource neither share a noun
+        // nor fit structurally, so nothing merges — the list is emitted as a standalone cmdlet.
+        var contactsList = Resolve("GET", "/users/{user-id}/contacts");
+        var messageItem = Resolve("GET", "/users/{user-id}/messages/{message-id}");
+        Assert.NotEqual(contactsList.Noun, messageItem.Noun);
+        Assert.False(Naming.IsListItemPair(contactsList, messageItem));
+    }
+
+    [Fact]
+    public void AmbiguousSameNounDoesNotMerge()
+    {
+        // Self-referential /sites: the collection /sites/{id}/sites and the single /sites/{id}
+        // both resolve to MgSite, but the "item" is the parent, not a child one id deeper, so
+        // the structural check rejects the merge and both stay standalone.
+        var list = Resolve("GET", "/sites/{site-id}/sites");
+        var item = Resolve("GET", "/sites/{site-id}");
+        Assert.Equal(list.Noun, item.Noun);
+        Assert.False(Naming.IsListItemPair(list, item));
+    }
+}
diff --git a/tools/WrapperGenerator.Tests/SchemaPropertiesTests.cs b/tools/WrapperGenerator.Tests/SchemaPropertiesTests.cs
new file mode 100644
index 0000000000..5b1909196d
--- /dev/null
+++ b/tools/WrapperGenerator.Tests/SchemaPropertiesTests.cs
@@ -0,0 +1,96 @@
+using System.Collections.Generic;
+using System.Linq;
+using Microsoft.OpenApi;
+using WrapperGenerator;
+using Xunit;
+
+namespace WrapperGenerator.Tests;
+
+public sealed class SchemaPropertiesTests
+{
+    private static OpenApiSchema Scalar(JsonSchemaType type, bool readOnly = false) =>
+        new() { Type = type, ReadOnly = readOnly };
+
+    [Fact]
+    public void KeepsPrimitivesAndPrimitiveArrays_ExcludesServerManagedAndComplex()
+    {
+        var body = new OpenApiSchema
+        {
+            Type = JsonSchemaType.Object,
+            Properties = new Dictionary<string, IOpenApiSchema>
+            {
+                // kept
+                ["displayName"] = Scalar(JsonSchemaType.String),
+                ["accountEnabled"] = Scalar(JsonSchemaType.Boolean),
+                ["jobTitle"] = Scalar(JsonSchemaType.Integer),
+                ["businessPhones"] = new OpenApiSchema { Type = JsonSchemaType.Array, Items = Scalar(JsonSchemaType.String) },
+                // excluded
+                ["id"] = Scalar(JsonSchemaType.String),                       // server-assigned
+                ["@odata.type"] = Scalar(JsonSchemaType.String),              // @-prefixed OData control
+                ["createdDateTime"] = Scalar(JsonSchemaType.String, readOnly: true), // ReadOnly
+                ["assignedLicenses"] = new OpenApiSchema                       // nested complex
+                {
+                    Type = JsonSchemaType.Object,
+                    Properties = new Dictionary<string, IOpenApiSchema> { ["skuId"] = Scalar(JsonSchemaType.String) },
+                },
+            },
+        };
+
+        var names = SchemaProperties.ExtractPrimitiveProperties(body).Select(p => p.OpenApiName).ToHashSet();
+
+        Assert.Contains("displayName", names);
+        Assert.Contains("accountEnabled", names);
+        Assert.Contains("jobTitle", names);
+        Assert.Contains("businessPhones", names);
+
+        Assert.DoesNotContain("id", names);
+        Assert.DoesNotContain("@odata.type", names);
+        Assert.DoesNotContain("createdDateTime", names);
+        Assert.DoesNotContain("assignedLicenses", names);
+    }
+
+    [Fact]
+    public void MapsScalarAndArrayShapes()
+    {
+        var body = new OpenApiSchema
+        {
+            Type = JsonSchemaType.Object,
+            Properties = new Dictionary<string, IOpenApiSchema>
+            {
+                ["displayName"] = Scalar(JsonSchemaType.String),
+                ["businessPhones"] = new OpenApiSchema { Type = JsonSchemaType.Array, Items = Scalar(JsonSchemaType.String) },
+            },
+        };
+
+        var props = SchemaProperties.ExtractPrimitiveProperties(body);
+
+        var scalar = props.Single(p => p.OpenApiName == "displayName");
+        Assert.False(scalar.IsArray);
+        Assert.Equal("string", scalar.PsTypeName);
+        Assert.Equal("DisplayName", scalar.PascalName);
+
+        var array = props.Single(p => p.OpenApiName == "businessPhones");
+        Assert.True(array.IsArray);
+        Assert.Equal("string[]", array.PsTypeName);
+        Assert.Equal("BusinessPhones", array.PascalName);
+    }
+
+    [Fact]
+    public void HasPasswordProfile_DetectsDirectAndViaAllOf()
+    {
+        var withProfile = new OpenApiSchema
+        {
+            Properties = new Dictionary<string, IOpenApiSchema> { ["passwordProfile"] = new OpenApiSchema { Type = JsonSchemaType.Object } },
+        };
+        Assert.True(SchemaProperties.HasPasswordProfile(withProfile));
+
+        var viaAllOf = new OpenApiSchema { AllOf = new List<IOpenApiSchema> { withProfile } };
+        Assert.True(SchemaProperties.HasPasswordProfile(viaAllOf));
+
+        var without = new OpenApiSchema
+        {
+            Properties = new Dictionary<string, IOpenApiSchema> { ["displayName"] = Scalar(JsonSchemaType.String) },
+        };
+        Assert.False(SchemaProperties.HasPasswordProfile(without));
+    }
+}
diff --git a/tools/WrapperGenerator.Tests/WrapperGenerator.Tests.csproj b/tools/WrapperGenerator.Tests/WrapperGenerator.Tests.csproj
new file mode 100644
index 0000000000..a3634244bc
--- /dev/null
+++ b/tools/WrapperGenerator.Tests/WrapperGenerator.Tests.csproj
@@ -0,0 +1,26 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <OutputType>Exe</OutputType>
+    <ImplicitUsings>disable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <!-- Same test stack kiota uses (proven on this machine): xunit.v3 keeps the `using Xunit;`
+         API the ported NamingTests.cs relies on. -->
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.3.0" />
+    <PackageReference Include="xunit.v3" Version="3.2.2" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\WrapperGenerator\WrapperGenerator.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/tools/WrapperGenerator/CmdletEmitter.cs b/tools/WrapperGenerator/CmdletEmitter.cs
new file mode 100644
index 0000000000..ae31ed6fdf
--- /dev/null
+++ b/tools/WrapperGenerator/CmdletEmitter.cs
@@ -0,0 +1,686 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+
+namespace WrapperGenerator;
+
+// Emits the wrapper cmdlet shapes from section 8 of the design spec, one cmdlet class per
+// selected OpenAPI operation: mandatory path-id parameters, an optional -AccessToken with a
+// Connect-MgGraph fallback, a ShouldProcess gate on mutating calls, and the Kiota client's
+// property/indexer chain for the actual request.
+public static class CmdletEmitter
+{
+    // Repeated verbatim in every emitted cmdlet. EmitSharedAuth provides the two helpers this
+    // block depends on: IsParameterBound and StaticBearerTokenAuthenticationProvider.
+    private const string AuthBlock = """
+
+                // ── Choose HttpClient + auth provider ─────────────────────────────
+                HttpClient httpClient;
+                IAuthenticationProvider authProvider;
+
+                if (this.IsParameterBound(nameof(AccessToken)))
+                {
+                    httpClient = new HttpClient();
+                    authProvider = new StaticBearerTokenAuthenticationProvider(AccessToken!);
+                }
+                else
+                {
+                    WriteVerbose("[MgPoC] No -AccessToken supplied, using the active Connect-MgGraph session.");
+                    try
+                    {
+                        httpClient = HttpHelpers.GetGraphHttpClient();
+                    }
+                    catch (Exception ex)
+                    {
+                        ThrowTerminatingError(new ErrorRecord(
+                            new InvalidOperationException(
+                                "No active Graph session. Run Connect-MgGraph first, or supply -AccessToken.", ex),
+                            "NoGraphSession",
+                            ErrorCategory.AuthenticationError,
+                            null));
+                        return;
+                    }
+                    authProvider = new AnonymousAuthenticationProvider();
+                }
+
+                var requestAdapter = new HttpClientRequestAdapter(authProvider, httpClient: httpClient);
+                var client = new ApiClient(requestAdapter);
+        """;
+
+    // Escapes a spec-derived value so it is safe inside a double-quoted C# string literal in the
+    // generated source: backslash first, then double-quote. Applied to values taken from the
+    // OpenAPI document (the cmdlet noun and header names) wherever they land inside "..." — an
+    // unescaped quote or backslash would otherwise produce source that does not compile.
+    private static string EscapeLiteral(string value) =>
+        value.Replace("\\", "\\\\", StringComparison.Ordinal).Replace("\"", "\\\"", StringComparison.Ordinal);
+
+    private static string PathParams(CmdletNaming naming) =>
+        string.Join("\n", naming.PathParamNames.Select((name, i) => $$"""
+                [Parameter(Mandatory = true, Position = {{i}})]
+                public string {{name}} { get; set; } = string.Empty;
+        """));
+
+    private static string TargetId(CmdletNaming naming) =>
+        naming.PathParamNames.Count > 0 ? naming.PathParamNames[^1] : "null";
+
+    // Header parameters declared in the spec (most commonly an "If-Match" ETag on PATCH/DELETE)
+    // become real cmdlet parameters. Graph sometimes requires them even when the spec marks
+    // them optional; Planner's PATCH/DELETE is the known example. Dropping them would make
+    // those endpoints impossible to call.
+    private static string HeaderParamDecls(CmdletNaming naming) => HeaderParamDeclsFor(naming.HeaderParams, parameterSetName: null);
+
+    private static string HeaderParamDeclsFor(IReadOnlyList<HeaderParam> headers, string? parameterSetName)
+    {
+        var setAttr = parameterSetName is null ? "" : $", ParameterSetName = \"{parameterSetName}\"";
+        return string.Join("", headers.Select(h => $$"""
+
+
+                [Parameter(Mandatory = false{{setAttr}},
+                    HelpMessage = "Sets the '{{EscapeLiteral(h.RawName)}}' request header (for example an ETag for optimistic concurrency; some Graph APIs require it even where the spec marks it optional).")]
+                public string? {{h.PsName}} { get; set; }
+        """));
+    }
+
+    private static string HeaderBindings(CmdletNaming naming) => HeaderBindingsFor(naming.HeaderParams, extraIndent: "");
+
+    // extraIndent shifts the lines 4 spaces deeper for call sites inside nested if/else blocks.
+    private static string HeaderBindingsFor(IReadOnlyList<HeaderParam> headers, string extraIndent) =>
+        string.Join("", headers.Select(h => $$"""
+
+
+                {{extraIndent}}if (this.IsParameterBound(nameof({{h.PsName}})))
+                {{extraIndent}}    requestConfiguration.Headers.Add("{{EscapeLiteral(h.RawName)}}", {{h.PsName}}!);
+        """));
+
+    // Splits a paired list/item GET's header parameters into: declared on both operations (bind
+    // regardless of which parameter set is active), list-only, and get-only.
+    private static (IReadOnlyList<HeaderParam> Shared, IReadOnlyList<HeaderParam> ListOnly, IReadOnlyList<HeaderParam> GetOnly) PartitionHeaderParams(
+        CmdletNaming listNaming, CmdletNaming itemNaming)
+    {
+        var listNames = listNaming.HeaderParams.Select(h => h.RawName).ToHashSet(StringComparer.OrdinalIgnoreCase);
+        var itemNames = itemNaming.HeaderParams.Select(h => h.RawName).ToHashSet(StringComparer.OrdinalIgnoreCase);
+        var shared = listNaming.HeaderParams.Where(h => itemNames.Contains(h.RawName)).ToList();
+        var listOnly = listNaming.HeaderParams.Where(h => !itemNames.Contains(h.RawName)).ToList();
+        var getOnly = itemNaming.HeaderParams.Where(h => !listNames.Contains(h.RawName)).ToList();
+        return (shared, listOnly, getOnly);
+    }
+
+    // Every emitted cmdlet accepts -AccessToken as an alternative to an active Connect-MgGraph
+    // session. See AuthBlock.
+    private static string AccessTokenParamDecl() => """
+        [Parameter(Mandatory = false,
+            HelpMessage = "Bearer access token. Omit if you have already run Connect-MgGraph.")]
+        public string? AccessToken { get; set; }
+""";
+
+    // The shared try/catch tail around every Graph call. Only the ErrorRecord's target object
+    // varies, and sometimes the nesting depth (EmitUpdate's re-fetch sits one block deeper).
+    private static string CatchBlock(string targetIdExpr, string extraIndent = "") => $$"""
+            {{extraIndent}}catch (Exception ex)
+            {{extraIndent}}{
+                {{extraIndent}}ThrowTerminatingError(new ErrorRecord(ex, "GraphRequestFailed", ErrorCategory.InvalidOperation, {{targetIdExpr}}));
+                {{extraIndent}}return;
+            {{extraIndent}}}
+""";
+
+    // The -Headers dictionary, matching the published SDK's parameter of the same name. It
+    // lets a caller set any header, not just the ones the spec declares.
+    private static string GenericHeadersParamDecl() => $$"""
+
+
+                [Parameter(Mandatory = false,
+                    HelpMessage = "Additional HTTP request headers to send, keyed by header name.")]
+                public System.Collections.IDictionary? Headers { get; set; }
+        """;
+
+    private static string GenericHeadersBinding(string extraIndent = "") => $$"""
+
+
+                {{extraIndent}}if (this.IsParameterBound(nameof(Headers)))
+                {{extraIndent}}{
+                {{extraIndent}}    foreach (System.Collections.DictionaryEntry entry in Headers!)
+                {{extraIndent}}        requestConfiguration.Headers.Add(entry.Key.ToString()!, entry.Value?.ToString() ?? string.Empty);
+                {{extraIndent}}}
+        """;
+
+    // Post/Patch/DeleteAsync always take a requestConfiguration lambda, because -Headers exists
+    // on every cmdlet. Reuses the same binding fragments the GET emitters use, at this call
+    // site's deeper indent, so there is one binding implementation instead of three.
+    private static string EmitCallWithOptionalHeaders(CmdletNaming naming, string method, string? bodyArg)
+    {
+        var call = $"client.{naming.BuilderExpression}.{method}(";
+        var args = bodyArg is null ? "" : bodyArg + ", ";
+        var bindings = HeaderBindingsFor(naming.HeaderParams, extraIndent: "                ") + GenericHeadersBinding("                ");
+        return $"{call}{args}requestConfiguration =>\n                {{{bindings}\n                }})";
+    }
+
+    public static string EmitItemGet(CmdletNaming naming, EmitContext ctx, string entityType)
+    {
+        ArgumentNullException.ThrowIfNull(naming);
+        ArgumentNullException.ThrowIfNull(ctx);
+        return $$"""
+#nullable enable
+
+using System;
+using System.Management.Automation;
+using System.Net.Http;
+using Microsoft.Graph.PowerShell.Authentication.Helpers;
+using {{ctx.ClientNamespace}};
+using {{ctx.ModelsNamespace}};
+using Microsoft.Kiota.Abstractions;
+using Microsoft.Kiota.Abstractions.Authentication;
+using Microsoft.Kiota.Http.HttpClientLibrary;
+
+namespace {{ctx.CmdletNamespace}}
+{
+    [Cmdlet(VerbsCommon.{{naming.VerbName}}, "{{EscapeLiteral(naming.Noun)}}")]
+    [OutputType(typeof({{entityType}}))]
+    public class {{naming.ClassName}} : PSCmdlet
+    {
+{{PathParams(naming)}}
+
+{{AccessTokenParamDecl()}}
+
+        [Parameter(Mandatory = false)]
+        [Alias("Select")]
+        public string[]? Property { get; set; }
+
+        [Parameter(Mandatory = false)]
+        [Alias("Expand")]
+        public string[]? ExpandProperty { get; set; }
+{{HeaderParamDecls(naming)}}
+{{GenericHeadersParamDecl()}}
+
+        protected override void ProcessRecord()
+        {
+{{AuthBlock}}
+
+            {{entityType}} result;
+            try
+            {
+                result = client.{{naming.BuilderExpression}}.GetAsync(requestConfiguration =>
+                {
+                    if (this.IsParameterBound(nameof(Property)))
+                        requestConfiguration.QueryParameters.Select = Property;
+
+                    if (this.IsParameterBound(nameof(ExpandProperty)))
+                        requestConfiguration.QueryParameters.Expand = ExpandProperty;
+{{HeaderBindings(naming)}}
+{{GenericHeadersBinding()}}
+                }).GetAwaiter().GetResult();
+            }
+{{CatchBlock(TargetId(naming))}}
+
+            WriteObject(result);
+        }
+    }
+}
+
+""";
+    }
+
+    // Collection GETs do not all support the same OData query options (GET /users has no $skip,
+    // for example), so the emitted parameters follow what the operation declares, not a fixed
+    // set. Primary names match the published SDK (Property, ExpandProperty, Sort); the
+    // wrapper's original names stay as aliases so -Select/-Expand/-OrderBy keep working.
+    //
+    // ParamDecl takes the owning parameter-set name (null when the cmdlet has no sets) so the
+    // dispatcher can derive its "List"-tagged declarations from this same table instead of
+    // keeping a second copy that would drift.
+    private static string ParamSetDecl(string? parameterSetName, string propertyDecl, string? alias = null)
+    {
+        var setAttr = parameterSetName is null ? "" : $", ParameterSetName = \"{parameterSetName}\"";
+        var aliasLine = alias is null ? "" : $"\n        [Alias(\"{alias}\")]";
+        return $"        [Parameter(Mandatory = false{setAttr})]{aliasLine}\n        {propertyDecl}";
+    }
+
+    private static readonly (string ODataName, string PsName, Func<string?, string> ParamDecl, string Binding)[] CollectionQueryOptions =
+    [
+        ("$filter", "Filter", ps => ParamSetDecl(ps, "public string? Filter { get; set; }"),
+            "                    if (this.IsParameterBound(nameof(Filter)))\n                        requestConfiguration.QueryParameters.Filter = Filter;"),
+        ("$select", "Property", ps => ParamSetDecl(ps, "public string[]? Property { get; set; }", alias: "Select"),
+            "                    if (this.IsParameterBound(nameof(Property)))\n                        requestConfiguration.QueryParameters.Select = Property;"),
+        ("$expand", "ExpandProperty", ps => ParamSetDecl(ps, "public string[]? ExpandProperty { get; set; }", alias: "Expand"),
+            "                    if (this.IsParameterBound(nameof(ExpandProperty)))\n                        requestConfiguration.QueryParameters.Expand = ExpandProperty;"),
+        ("$orderby", "Sort", ps => ParamSetDecl(ps, "public string[]? Sort { get; set; }", alias: "OrderBy"),
+            "                    if (this.IsParameterBound(nameof(Sort)))\n                        requestConfiguration.QueryParameters.Orderby = Sort;"),
+        ("$search", "Search", ps => ParamSetDecl(ps, "public string? Search { get; set; }"),
+            "                    if (this.IsParameterBound(nameof(Search)))\n                        requestConfiguration.QueryParameters.Search = Search;"),
+        ("$top", "Top", ps => ParamSetDecl(ps, "public int Top { get; set; }"),
+            "                    if (this.IsParameterBound(nameof(Top)))\n                        requestConfiguration.QueryParameters.Top = Top;"),
+        ("$skip", "Skip", ps => ParamSetDecl(ps, "public int Skip { get; set; }"),
+            "                    if (this.IsParameterBound(nameof(Skip)))\n                        requestConfiguration.QueryParameters.Skip = Skip;"),
+        ("$count", "Count", ps => ParamSetDecl(ps, "public SwitchParameter Count { get; set; }"),
+            "                    if (Count.IsPresent)\n                        requestConfiguration.QueryParameters.Count = true;"),
+    ];
+
+    public static string EmitListGet(CmdletNaming naming, EmitContext ctx, string entityType, string collectionResponseType, IReadOnlySet<string> queryParamNames)
+    {
+        ArgumentNullException.ThrowIfNull(naming);
+        ArgumentNullException.ThrowIfNull(ctx);
+        ArgumentNullException.ThrowIfNull(queryParamNames);
+        var applicable = CollectionQueryOptions.Where(o => queryParamNames.Contains(o.ODataName)).ToList();
+        var paramDecls = string.Join("\n\n", applicable.Select(o => o.ParamDecl(null)));
+        var bindings = string.Join("\n\n", applicable.Select(o => o.Binding));
+
+        return $$"""
+#nullable enable
+
+using System;
+using System.Management.Automation;
+using System.Net.Http;
+using Microsoft.Graph.PowerShell.Authentication.Helpers;
+using {{ctx.ClientNamespace}};
+using {{ctx.ModelsNamespace}};
+using Microsoft.Kiota.Abstractions;
+using Microsoft.Kiota.Abstractions.Authentication;
+using Microsoft.Kiota.Http.HttpClientLibrary;
+
+namespace {{ctx.CmdletNamespace}}
+{
+    [Cmdlet(VerbsCommon.{{naming.VerbName}}, "{{EscapeLiteral(naming.Noun)}}")]
+    [OutputType(typeof({{entityType}}))]
+    public class {{naming.ClassName}} : PSCmdlet
+    {
+{{PathParams(naming)}}
+
+{{AccessTokenParamDecl()}}
+
+{{paramDecls}}
+{{HeaderParamDecls(naming)}}
+{{GenericHeadersParamDecl()}}
+
+        protected override void ProcessRecord()
+        {
+{{AuthBlock}}
+
+            {{collectionResponseType}} result;
+            try
+            {
+                result = client.{{naming.BuilderExpression}}.GetAsync(requestConfiguration =>
+                {
+{{bindings}}
+{{HeaderBindings(naming)}}
+{{GenericHeadersBinding()}}
+                }).GetAwaiter().GetResult();
+            }
+{{CatchBlock(TargetId(naming))}}
+
+            WriteObject(result.Value, enumerateCollection: true);
+        }
+    }
+}
+
+""";
+    }
+
+    // The dispatcher's list-only parameter declarations: CollectionQueryOptions minus
+    // $select/$expand, which are shared with the "Get" set and declared once at class level.
+    // Declarations only; binding happens in the internal list cmdlet the dispatcher calls.
+    private static IEnumerable<(string ODataName, string ParamDecl)> ListOnlyQueryOptionsForMerge() =>
+        CollectionQueryOptions
+            .Where(o => o.ODataName is not ("$select" or "$expand"))
+            .Select(o => (o.ODataName, o.ParamDecl("List")));
+
+    // Shared path params (-UserId on a nested list) carry no ParameterSetName, which PowerShell
+    // treats as "all sets". The trailing item id (-MessageId) belongs to the "Get" set only and
+    // continues the Position sequence where the shared ones left off.
+    private static string PairedPathParams(IReadOnlyList<string> sharedNames, IReadOnlyList<string> getOnlyNames)
+    {
+        var parts = new List<string>();
+        var sharedDecls = string.Join("\n", sharedNames.Select((name, i) => $$"""
+                [Parameter(Mandatory = true, Position = {{i}})]
+                public string {{name}} { get; set; } = string.Empty;
+        """));
+        if (sharedDecls.Length > 0)
+            parts.Add(sharedDecls);
+
+        var getOnlyDecls = string.Join("\n", getOnlyNames.Select((name, i) => $$"""
+                [Parameter(Mandatory = true, ParameterSetName = "Get", Position = {{sharedNames.Count + i}})]
+                public string {{name}} { get; set; } = string.Empty;
+        """));
+        if (getOnlyDecls.Length > 0)
+            parts.Add(getOnlyDecls);
+
+        return string.Join("\n", parts);
+    }
+
+    // The thin public cmdlet for a paired list/item GET. It presents the merged Get-MgX surface
+    // the published SDK exposes ("List" as the default set, "Get" for item lookups) but makes no
+    // HTTP call itself. Per the design spec's parameter-set decision, the real work stays in the
+    // two internal cmdlets; ProcessRecord only picks one and forwards the bound parameters. The
+    // forward goes through InvokeCommand.InvokeScript on the current runspace, so the nested
+    // call shares the caller's session, including an active Connect-MgGraph.
+    public static string EmitGetDispatcher(CmdletNaming listNaming, CmdletNaming itemNaming,
+        CmdletNaming internalListNaming, CmdletNaming internalItemNaming, EmitContext ctx,
+        string entityType, string collectionResponseType, IReadOnlySet<string> queryParamNames)
+    {
+        ArgumentNullException.ThrowIfNull(listNaming);
+        ArgumentNullException.ThrowIfNull(itemNaming);
+        ArgumentNullException.ThrowIfNull(internalListNaming);
+        ArgumentNullException.ThrowIfNull(internalItemNaming);
+        ArgumentNullException.ThrowIfNull(ctx);
+        ArgumentNullException.ThrowIfNull(queryParamNames);
+
+        var sharedPathParams = listNaming.PathParamNames;
+        var getOnlyPathParams = itemNaming.PathParamNames.Skip(sharedPathParams.Count).ToList();
+
+        var applicable = ListOnlyQueryOptionsForMerge().Where(o => queryParamNames.Contains(o.ODataName)).ToList();
+        var listOnlyParamDecls = string.Join("\n\n", applicable.Select(o => o.ParamDecl));
+
+        var (sharedHeaders, listOnlyHeaders, getOnlyHeaders) = PartitionHeaderParams(listNaming, itemNaming);
+
+        var internalListCmdletName = $"{internalListNaming.VerbName}-{internalListNaming.Noun}";
+        var internalGetCmdletName = $"{internalItemNaming.VerbName}-{internalItemNaming.Noun}";
+
+        return $$"""
+#nullable enable
+
+using System;
+using System.Management.Automation;
+using System.Management.Automation.Runspaces;
+using {{ctx.ModelsNamespace}};
+
+namespace {{ctx.CmdletNamespace}}
+{
+    [Cmdlet(VerbsCommon.Get, "{{EscapeLiteral(listNaming.Noun)}}", DefaultParameterSetName = "List")]
+    [OutputType(typeof({{collectionResponseType}}), ParameterSetName = new[] { "List" })]
+    [OutputType(typeof({{entityType}}), ParameterSetName = new[] { "Get" })]
+    public class {{listNaming.ClassName}} : PSCmdlet
+    {
+{{PairedPathParams(sharedPathParams, getOnlyPathParams)}}
+
+{{AccessTokenParamDecl()}}
+
+        [Parameter(Mandatory = false)]
+        [Alias("Select")]
+        public string[]? Property { get; set; }
+
+        [Parameter(Mandatory = false)]
+        [Alias("Expand")]
+        public string[]? ExpandProperty { get; set; }
+
+{{listOnlyParamDecls}}
+{{HeaderParamDeclsFor(sharedHeaders, parameterSetName: null)}}
+{{HeaderParamDeclsFor(listOnlyHeaders, parameterSetName: "List")}}
+{{HeaderParamDeclsFor(getOnlyHeaders, parameterSetName: "Get")}}
+{{GenericHeadersParamDecl()}}
+
+        // Delegates to {{internalGetCmdletName}} or {{internalListCmdletName}}, the two cmdlets
+        // that actually call Graph.
+        protected override void ProcessRecord()
+        {
+            var internalCmdletName = ParameterSetName == "Get" ? "{{EscapeLiteral(internalGetCmdletName)}}" : "{{EscapeLiteral(internalListCmdletName)}}";
+            try
+            {
+                InvokeCommand.InvokeScript(
+                    "param($BoundParameters, $CmdletName) & $CmdletName @BoundParameters",
+                    false,
+                    PipelineResultTypes.Output | PipelineResultTypes.Error,
+                    null,
+                    MyInvocation.BoundParameters, internalCmdletName);
+            }
+{{CatchBlock(TargetId(itemNaming))}}
+        }
+    }
+}
+
+""";
+    }
+
+    public static string EmitNew(CmdletNaming naming, EmitContext ctx, string entityType, IReadOnlyList<CmdletProperty> properties, bool hasPasswordProfile)
+    {
+        ArgumentNullException.ThrowIfNull(naming);
+        ArgumentNullException.ThrowIfNull(ctx);
+        ArgumentNullException.ThrowIfNull(properties);
+        return $$"""
+#nullable enable
+
+using System;
+using System.Linq;
+using System.Management.Automation;
+using System.Net.Http;
+using Microsoft.Graph.PowerShell.Authentication.Helpers;
+using {{ctx.ClientNamespace}};
+using {{ctx.ModelsNamespace}};
+using Microsoft.Kiota.Abstractions.Authentication;
+using Microsoft.Kiota.Http.HttpClientLibrary;
+
+namespace {{ctx.CmdletNamespace}}
+{
+    [Cmdlet(VerbsCommon.{{naming.VerbName}}, "{{EscapeLiteral(naming.Noun)}}", SupportsShouldProcess = true, ConfirmImpact = ConfirmImpact.Medium)]
+    [OutputType(typeof({{entityType}}))]
+    public class {{naming.ClassName}} : PSCmdlet
+    {
+{{PathParams(naming)}}
+{{EmitPropertyParameters(properties)}}
+{{(hasPasswordProfile ? EmitPasswordProfileParameters() : "")}}
+{{HeaderParamDecls(naming)}}
+{{GenericHeadersParamDecl()}}
+
+{{AccessTokenParamDecl()}}
+
+        protected override void ProcessRecord()
+        {
+            if (!ShouldProcess({{TargetId(naming)}}, "{{naming.VerbName}}"))
+                return;
+
+            var body = new {{entityType}}();
+{{EmitPropertyAssignments(properties)}}
+{{(hasPasswordProfile ? EmitPasswordProfileAssignment() : "")}}
+{{AuthBlock}}
+
+            {{entityType}}? result;
+            try
+            {
+                result = {{EmitCallWithOptionalHeaders(naming, "PostAsync", "body")}}.GetAwaiter().GetResult();
+            }
+{{CatchBlock("body")}}
+
+            WriteObject(result);
+        }
+    }
+}
+
+""";
+    }
+
+    public static string EmitUpdate(CmdletNaming naming, EmitContext ctx, string entityType, IReadOnlyList<CmdletProperty> properties, bool hasPasswordProfile)
+    {
+        ArgumentNullException.ThrowIfNull(naming);
+        ArgumentNullException.ThrowIfNull(ctx);
+        ArgumentNullException.ThrowIfNull(properties);
+        return $$"""
+#nullable enable
+
+using System;
+using System.Linq;
+using System.Management.Automation;
+using System.Net.Http;
+using Microsoft.Graph.PowerShell.Authentication.Helpers;
+using {{ctx.ClientNamespace}};
+using {{ctx.ModelsNamespace}};
+using Microsoft.Kiota.Abstractions.Authentication;
+using Microsoft.Kiota.Http.HttpClientLibrary;
+
+namespace {{ctx.CmdletNamespace}}
+{
+    [Cmdlet(VerbsData.{{naming.VerbName}}, "{{EscapeLiteral(naming.Noun)}}", SupportsShouldProcess = true, ConfirmImpact = ConfirmImpact.Medium)]
+    [OutputType(typeof({{entityType}}))]
+    public class {{naming.ClassName}} : PSCmdlet
+    {
+{{PathParams(naming)}}
+{{EmitPropertyParameters(properties)}}
+{{(hasPasswordProfile ? EmitPasswordProfileParameters() : "")}}
+{{HeaderParamDecls(naming)}}
+{{GenericHeadersParamDecl()}}
+
+{{AccessTokenParamDecl()}}
+
+        protected override void ProcessRecord()
+        {
+            if (!ShouldProcess({{TargetId(naming)}}, "{{naming.VerbName}}"))
+                return;
+
+            var body = new {{entityType}}();
+{{EmitPropertyAssignments(properties)}}
+{{(hasPasswordProfile ? EmitPasswordProfileAssignment() : "")}}
+{{AuthBlock}}
+
+            {{entityType}}? result;
+            try
+            {
+                result = {{EmitCallWithOptionalHeaders(naming, "PatchAsync", "body")}}.GetAwaiter().GetResult();
+            }
+{{CatchBlock(TargetId(naming))}}
+
+            // Graph often answers a successful PATCH with 204 and no body (seen live on
+            // schemaExtension update). Re-fetch so the cmdlet returns the updated resource
+            // instead of nothing.
+            if (result is null)
+            {
+                WriteVerbose("[MgPoC] PATCH succeeded with no response body, re-fetching the updated resource.");
+                try
+                {
+                    result = client.{{naming.BuilderExpression}}.GetAsync().GetAwaiter().GetResult();
+                }
+{{CatchBlock(TargetId(naming), "    ")}}
+            }
+
+            WriteObject(result);
+        }
+    }
+}
+
+""";
+    }
+
+    public static string EmitRemove(CmdletNaming naming, EmitContext ctx)
+    {
+        ArgumentNullException.ThrowIfNull(naming);
+        ArgumentNullException.ThrowIfNull(ctx);
+        return $$"""
+#nullable enable
+
+using System;
+using System.Management.Automation;
+using System.Net.Http;
+using Microsoft.Graph.PowerShell.Authentication.Helpers;
+using {{ctx.ClientNamespace}};
+using Microsoft.Kiota.Abstractions.Authentication;
+using Microsoft.Kiota.Http.HttpClientLibrary;
+
+namespace {{ctx.CmdletNamespace}}
+{
+    [Cmdlet(VerbsCommon.{{naming.VerbName}}, "{{EscapeLiteral(naming.Noun)}}", SupportsShouldProcess = true, ConfirmImpact = ConfirmImpact.High)]
+    public class {{naming.ClassName}} : PSCmdlet
+    {
+{{PathParams(naming)}}
+{{HeaderParamDecls(naming)}}
+{{GenericHeadersParamDecl()}}
+
+{{AccessTokenParamDecl()}}
+
+        protected override void ProcessRecord()
+        {
+            if (!ShouldProcess({{TargetId(naming)}}, "{{naming.VerbName}}"))
+                return;
+{{AuthBlock}}
+
+            // DeleteAsync returns a plain Task: a standard delete response has no body.
+            try
+            {
+                {{EmitCallWithOptionalHeaders(naming, "DeleteAsync", null)}}
+                    .GetAwaiter().GetResult();
+            }
+{{CatchBlock(TargetId(naming))}}
+        }
+    }
+}
+
+""";
+    }
+
+    // Written once per module. Every cmdlet file relies on same-namespace visibility for these
+    // helpers instead of carrying its own copy.
+    public static string EmitSharedAuth(EmitContext ctx)
+    {
+        ArgumentNullException.ThrowIfNull(ctx);
+        return $$"""
+#nullable enable
+
+using System;
+using System.Collections.Generic;
+using System.Management.Automation;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.Kiota.Abstractions;
+using Microsoft.Kiota.Abstractions.Authentication;
+
+namespace {{ctx.CmdletNamespace}}
+{
+    internal static class CmdletExtensions
+    {
+        public static bool IsParameterBound(this PSCmdlet cmdlet, string parameterName)
+            => cmdlet.MyInvocation?.BoundParameters.ContainsKey(parameterName) ?? false;
+    }
+
+    // Minimal IAuthenticationProvider for the -AccessToken path: just stamps the bearer header
+    // Kiota's own request-adapter pipeline expects, no token acquisition/refresh.
+    internal sealed class StaticBearerTokenAuthenticationProvider : IAuthenticationProvider
+    {
+        private readonly string _token;
+
+        public StaticBearerTokenAuthenticationProvider(string token)
+        {
+            _token = token.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase)
+                ? token.Substring(7)
+                : token;
+        }
+
+        public Task AuthenticateRequestAsync(RequestInformation request, Dictionary<string, object>? additionalAuthenticationContext = null, CancellationToken cancellationToken = default)
+        {
+            request.Headers.TryAdd("Authorization", $"Bearer {_token}");
+            return Task.CompletedTask;
+        }
+    }
+}
+""";
+    }
+
+    private static string EmitPropertyParameters(IReadOnlyList<CmdletProperty> properties) =>
+        string.Join("\n", properties.Select(p => $$"""
+
+                [Parameter(Mandatory = false)]
+                public {{p.PsTypeName}}? {{p.PascalName}} { get; set; }
+        """));
+
+    private static string EmitPropertyAssignments(IReadOnlyList<CmdletProperty> properties) =>
+        string.Join("\n", properties.Select(p => $$"""
+
+            if (this.IsParameterBound(nameof({{p.PascalName}})))
+                body.{{p.PascalName}} = {{(p.IsArray ? $"{p.PascalName}!.ToList()" : p.PascalName)}};
+        """));
+
+    private static string EmitPasswordProfileParameters() => """
+
+                [Parameter(Mandatory = false,
+                    HelpMessage = "Required by Graph to create a user. Ignored if the resource has no passwordProfile.")]
+                public string? Password { get; set; }
+
+                [Parameter(Mandatory = false)]
+                public bool? ForceChangePasswordNextSignIn { get; set; }
+        """;
+
+    private static string EmitPasswordProfileAssignment() => """
+
+            if (this.IsParameterBound(nameof(Password)) || this.IsParameterBound(nameof(ForceChangePasswordNextSignIn)))
+            {
+                body.PasswordProfile = new PasswordProfile
+                {
+                    Password = Password,
+                    ForceChangePasswordNextSignIn = ForceChangePasswordNextSignIn ?? true,
+                };
+            }
+        """;
+}
diff --git a/tools/WrapperGenerator/CmdletNaming.cs b/tools/WrapperGenerator/CmdletNaming.cs
new file mode 100644
index 0000000000..22c146169f
--- /dev/null
+++ b/tools/WrapperGenerator/CmdletNaming.cs
@@ -0,0 +1,177 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+
+namespace WrapperGenerator;
+
+public sealed record HeaderParam(string RawName, string PsName);
+
+public sealed record CmdletNaming(
+    string VerbsClass,
+    string VerbName,
+    string Noun,
+    string ClassName,
+    IReadOnlyList<string> PathParamNames,
+    string BuilderExpression,
+    IReadOnlyList<HeaderParam> HeaderParams);
+
+public static class Naming
+{
+    // GET->Get, POST->New, PATCH->Update, PUT->Set, DELETE->Remove (design spec section 7).
+    // The attribute class is tracked too because it differs per verb: Update lives in
+    // VerbsData, the rest in VerbsCommon.
+    private static readonly Dictionary<string, (string VerbsClass, string VerbName)> VerbMap = new(StringComparer.OrdinalIgnoreCase)
+    {
+        ["get"] = ("VerbsCommon", "Get"),
+        ["post"] = ("VerbsCommon", "New"),
+        ["patch"] = ("VerbsData", "Update"),
+        ["put"] = ("VerbsCommon", "Set"),
+        ["delete"] = ("VerbsCommon", "Remove"),
+    };
+
+    public static CmdletNaming Resolve(OperationInfo operation)
+    {
+        ArgumentNullException.ThrowIfNull(operation);
+        if (!VerbMap.TryGetValue(operation.HttpMethod, out var verb))
+            throw new NotSupportedException($"No cmdlet verb mapping for HTTP method '{operation.HttpMethod}'.");
+
+        // The noun comes from the URL path, not the operationId. OperationIds keep whatever
+        // plurality the spec author chose, while the published SDK names follow the path:
+        // GET /users/{id}/messages is Get-MgUserMessage. The few hand-tuned exceptions the
+        // published SDK carries are mirrored as data in NamingOverrides, never as code here.
+        var noun = "Mg" + NamingOverrides.ApplyNounOverrides(operation.HttpMethod, operation.Path, BuildNounFromPath(operation.Path));
+
+        // A list GET (/users/{id}/messages) and its item GET (/users/{id}/messages/{message-id})
+        // get the same noun on purpose. PowerShellWrapperGenerationService pairs them into one
+        // public Get-MgX dispatcher cmdlet; the two real implementations get suffixed names via
+        // WithSuffix below.
+        var className = $"{verb.VerbName}{noun}Command";
+
+        var pathParamNames = ExtractPathParamNames(operation.Path);
+        var builderExpression = BuildBuilderExpression(operation.Path, pathParamNames);
+        var headerParams = (operation.HeaderParams ?? [])
+            .Select(raw => new HeaderParam(raw, raw.ToPascalCase('-')))
+            .ToList();
+
+        return new CmdletNaming(verb.VerbsClass, verb.VerbName, noun, className, pathParamNames, builderExpression, headerParams);
+    }
+
+    // Names one of the two internal cmdlets behind a paired GET dispatcher, e.g.
+    // Get-MgUserMessage_List. The public dispatcher keeps the bare noun.
+    public static CmdletNaming WithSuffix(CmdletNaming naming, string suffix)
+    {
+        ArgumentNullException.ThrowIfNull(naming);
+        return naming with
+        {
+            Noun = naming.Noun + suffix,
+            ClassName = $"{naming.VerbName}{naming.Noun}{suffix}Command",
+        };
+    }
+
+    // Pascal-cases and singularizes every fixed path segment, then joins them. Two kinds of
+    // repetition are dropped, because the published SDK drops them:
+    //   /sites/{id}/sites                  -> Site (not SiteSite)
+    //   /domains/{id}/domainNameReferences -> DomainNameReference (the shared word "Domain"
+    //                                         appears once, matching Get-MgDomainNameReference)
+    // An OData cast segment like graph.user becomes AsUser, matching Get-MgGroupOwnerAsUser.
+    // Cast type names are already singular, so they skip the singularizer.
+    private static string BuildNounFromPath(string path)
+    {
+        var parts = new List<string>();
+        foreach (var segment in path.Split('/', StringSplitOptions.RemoveEmptyEntries))
+        {
+            if (segment.StartsWith('{') && segment.EndsWith('}'))
+                continue;
+
+            var castType = segment.StartsWith("microsoft.graph.", StringComparison.OrdinalIgnoreCase)
+                ? segment["microsoft.graph.".Length..]
+                : segment.StartsWith("graph.", StringComparison.OrdinalIgnoreCase)
+                    ? segment["graph.".Length..]
+                    : null;
+            if (castType is not null)
+            {
+                parts.Add("As" + castType.ToFirstCharacterUpperCase());
+                continue;
+            }
+
+            var part = Singularizer.SingularizeSegment(segment.ToFirstCharacterUpperCase());
+            if (parts.Count > 0)
+            {
+                var previous = parts[^1];
+                if (string.Equals(previous, part, StringComparison.Ordinal))
+                    continue;
+                var boundaryWord = Singularizer.TrailingWord(previous);
+                if (string.Equals(part, boundaryWord, StringComparison.Ordinal))
+                    continue;
+                if (part.StartsWith(boundaryWord, StringComparison.Ordinal) && part.Length > boundaryWord.Length)
+                    part = part[boundaryWord.Length..];
+            }
+            parts.Add(part);
+        }
+        return string.Concat(parts);
+    }
+
+    private static List<string> ExtractPathParamNames(string path)
+    {
+        var names = new List<string>();
+        foreach (var segment in path.Split('/', StringSplitOptions.RemoveEmptyEntries))
+        {
+            if (segment.StartsWith('{') && segment.EndsWith('}'))
+                names.Add(segment[1..^1].ToPascalCase('-'));
+        }
+        return names;
+    }
+
+    // The Kiota-generated ApiClient exposes a property per fixed path segment and an indexer
+    // per path parameter, e.g. client.Users[UserId].Messages[MessageId].
+    private static string BuildBuilderExpression(string path, List<string> pathParamNames)
+    {
+        var expression = new System.Text.StringBuilder();
+        var paramIndex = 0;
+        var first = true;
+
+        foreach (var segment in path.Split('/', StringSplitOptions.RemoveEmptyEntries))
+        {
+            if (segment.StartsWith('{') && segment.EndsWith('}'))
+            {
+                expression.Append('[').Append(pathParamNames[paramIndex++]).Append(']');
+            }
+            else
+            {
+                if (!first)
+                    expression.Append('.');
+                expression.Append(ToBuilderMemberName(segment));
+            }
+            first = false;
+        }
+
+        return expression.ToString();
+    }
+
+    // A fixed path segment becomes one Kiota request-builder member. An OData cast segment
+    // carries dots ("microsoft.graph.user", or "graph.user" in the KiotaCompat specs); Kiota
+    // maps it to a single member by upper-casing each dot-separated part and concatenating, so
+    // "microsoft.graph.user" is the "MicrosoftGraphUser" property, "graph.user" is "GraphUser"
+    // (verified against a generated Kiota C# client). Emitting the raw segment would leave a
+    // stray dot ("Graph.user") — invalid C# and not a real builder member. Non-cast segments
+    // have no dots and are unchanged. NOTE: cast endpoints are not generated end to end yet
+    // (tracked follow-up), so this keeps the expression a valid identifier chain until then.
+    private static string ToBuilderMemberName(string segment) =>
+        segment.Contains('.', StringComparison.Ordinal)
+            ? string.Concat(segment.Split('.', StringSplitOptions.RemoveEmptyEntries).Select(part => part.ToFirstCharacterUpperCase()))
+            : segment.ToFirstCharacterUpperCase();
+
+    // Whether a list GET and an item GET form a mergeable pair for the public Get-MgX
+    // dispatcher: the item's path must be the list's path plus exactly one trailing id
+    // (Users[UserId].Messages -> Users[UserId].Messages[MessageId]). Callers group by noun
+    // first, so this only decides the structural fit; a same-noun item that does not extend the
+    // list (for example the self-referential /sites/{id} vs /sites/{id}/sites) is rejected.
+    public static bool IsListItemPair(CmdletNaming list, CmdletNaming item)
+    {
+        ArgumentNullException.ThrowIfNull(list);
+        ArgumentNullException.ThrowIfNull(item);
+        return item.PathParamNames.Count == list.PathParamNames.Count + 1
+            && item.PathParamNames.Take(list.PathParamNames.Count).SequenceEqual(list.PathParamNames)
+            && item.BuilderExpression.StartsWith(list.BuilderExpression + "[", StringComparison.Ordinal);
+    }
+}
diff --git a/tools/WrapperGenerator/EmitContext.cs b/tools/WrapperGenerator/EmitContext.cs
new file mode 100644
index 0000000000..9a738aa7f9
--- /dev/null
+++ b/tools/WrapperGenerator/EmitContext.cs
@@ -0,0 +1,9 @@
+namespace WrapperGenerator;
+
+// The per-module values CmdletEmitter's templates need, so the emitter stays module-agnostic.
+// ClientNamespace is whatever --namespace-name the module was generated with, for example
+// "Microsoft.Graph.PowerShell.Mail.Client".
+public sealed record EmitContext(string ClientNamespace, string CmdletNamespace = "MgPoC")
+{
+    public string ModelsNamespace => $"{ClientNamespace}.Models";
+}
diff --git a/tools/WrapperGenerator/GeneratorConfig.cs b/tools/WrapperGenerator/GeneratorConfig.cs
new file mode 100644
index 0000000000..0b8f90c796
--- /dev/null
+++ b/tools/WrapperGenerator/GeneratorConfig.cs
@@ -0,0 +1,5 @@
+namespace WrapperGenerator;
+
+// Configuration for a generation run. The generation service reads exactly two values: the
+// client namespace the module is generated with, and the output folder for the .g.cs files.
+public sealed record GeneratorConfig(string ClientNamespaceName, string OutputPath);
diff --git a/tools/WrapperGenerator/GeneratorExtensions.cs b/tools/WrapperGenerator/GeneratorExtensions.cs
new file mode 100644
index 0000000000..6afdad3165
--- /dev/null
+++ b/tools/WrapperGenerator/GeneratorExtensions.cs
@@ -0,0 +1,41 @@
+using System;
+using System.Linq;
+using Microsoft.OpenApi;
+
+namespace WrapperGenerator;
+
+// Small string and OpenAPI-schema helpers used across the generator.
+internal static class GeneratorExtensions
+{
+    public static string ToFirstCharacterLowerCase(this string? input)
+        => string.IsNullOrEmpty(input) ? string.Empty : char.ToLowerInvariant(input[0]) + input[1..];
+
+    public static string ToFirstCharacterUpperCase(this string? input)
+        => string.IsNullOrEmpty(input) ? string.Empty : char.ToUpperInvariant(input[0]) + input[1..];
+
+    private static readonly char[] defaultSeparators = ['-'];
+
+    public static string ToPascalCase(this string? input, params char[] separators) => ToInternalCamelCase(input, separators, true);
+
+    private static string ToInternalCamelCase(string? input, char[] separators, bool firstCharacterUpperCase = false, bool normalizeFirstCharacter = true)
+    {
+        if (string.IsNullOrEmpty(input)) return string.Empty;
+        if (separators is null || separators.Length == 0) separators = defaultSeparators;
+        var chunks = input.Split(separators, StringSplitOptions.RemoveEmptyEntries);
+        if (chunks.Length == 0) return string.Empty;
+        return ((normalizeFirstCharacter, firstCharacterUpperCase) switch
+        {
+            (false, _) => chunks[0],
+            (true, true) => chunks[0].ToFirstCharacterUpperCase(),
+            (true, false) => chunks[0].ToFirstCharacterLowerCase()
+        }) +
+                string.Join(string.Empty, chunks.Skip(1).Select(ToFirstCharacterUpperCase));
+    }
+
+    // Resolves the schema name for a $ref: a referenced schema is an OpenApiSchemaReference and
+    // carries the id. (Kiota's own reader can also recover an id from an allOf-merged schema via a
+    // marker its refiner stamps on, but this generator does not run that refiner, so no such marker
+    // is ever present and there is nothing more to resolve.)
+    internal static string? GetReferenceId(this IOpenApiSchema schema) =>
+        schema is OpenApiSchemaReference reference ? reference.Reference?.Id : null;
+}
diff --git a/tools/WrapperGenerator/IncludePathFilter.cs b/tools/WrapperGenerator/IncludePathFilter.cs
new file mode 100644
index 0000000000..fc1126e5d6
--- /dev/null
+++ b/tools/WrapperGenerator/IncludePathFilter.cs
@@ -0,0 +1,115 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Text.RegularExpressions;
+using Microsoft.OpenApi;
+
+namespace WrapperGenerator;
+
+// Trims the OpenAPI document to the requested paths/methods before generation (the generation
+// service just walks whatever paths remain).
+//
+// Each --include-path is "<glob>#METHOD1,METHOD2" (the "#..." method list is optional). A path
+// is kept if it matches any pattern's glob; on a kept path, only operations whose HTTP method
+// is in that pattern's method set survive (methods are unioned across every pattern that
+// matches the path, and a pattern with no "#..." keeps all methods). With no --include-path
+// supplied, the document is left untouched — i.e. a cmdlet is generated for every operation,
+// which is the "feed an already-filtered document" mode.
+//
+// Glob semantics, matched against the templated path keys (e.g. "/users/{user-id}/messages"):
+//   **  -> any characters, including "/"
+//   *   -> any run of non-"/" characters (stays within one segment)
+//   [s] -> a character class, passed through to the regex (so "message[s]" matches "messages")
+//   everything else (including "{", "}", "-") is matched literally
+// This is intentionally minimal: it covers the operators the current include patterns use, not
+// a full glob surface.
+internal static class IncludePathFilter
+{
+    private sealed record Pattern(Regex PathRegex, HashSet<string> Methods);
+
+    public static void Apply(OpenApiDocument document, IReadOnlyList<string> includePaths)
+    {
+        if (includePaths.Count == 0 || document.Paths is null)
+            return;
+
+        var patterns = includePaths.Select(Parse).ToList();
+
+        foreach (var pathKey in document.Paths.Keys.ToList())
+        {
+            var allowedMethods = new HashSet<string>(StringComparer.OrdinalIgnoreCase);
+            var allowAllMethods = false;
+            var matchedAny = false;
+
+            foreach (var pattern in patterns)
+            {
+                if (!pattern.PathRegex.IsMatch(pathKey))
+                    continue;
+                matchedAny = true;
+                if (pattern.Methods.Count == 0)
+                    allowAllMethods = true;
+                else
+                    allowedMethods.UnionWith(pattern.Methods);
+            }
+
+            if (!matchedAny)
+            {
+                document.Paths.Remove(pathKey);
+                continue;
+            }
+
+            if (allowAllMethods)
+                continue;
+
+            var operations = document.Paths[pathKey].Operations;
+            if (operations is null)
+                continue;
+            foreach (var method in operations.Keys.ToList())
+            {
+                if (!allowedMethods.Contains(method.Method))
+                    operations.Remove(method);
+            }
+        }
+    }
+
+    private static Pattern Parse(string includePath)
+    {
+        var hashIndex = includePath.IndexOf('#');
+        var glob = hashIndex >= 0 ? includePath[..hashIndex] : includePath;
+        var methodsPart = hashIndex >= 0 ? includePath[(hashIndex + 1)..] : string.Empty;
+
+        var methods = methodsPart
+            .Split(',', StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries)
+            .ToHashSet(StringComparer.OrdinalIgnoreCase);
+
+        return new Pattern(new Regex(GlobToRegex(glob), RegexOptions.IgnoreCase), methods);
+    }
+
+    private static string GlobToRegex(string glob)
+    {
+        var sb = new StringBuilder("^");
+        for (var i = 0; i < glob.Length; i++)
+        {
+            var c = glob[i];
+            switch (c)
+            {
+                case '*' when i + 1 < glob.Length && glob[i + 1] == '*':
+                    sb.Append(".*");
+                    i++;
+                    break;
+                case '*':
+                    sb.Append("[^/]*");
+                    break;
+                case '[':
+                case ']':
+                    sb.Append(c); // pass a glob character class straight through to the regex
+                    break;
+                default:
+                    sb.Append(Regex.Escape(c.ToString()));
+                    break;
+            }
+        }
+        sb.Append('$');
+        return sb.ToString();
+    }
+}
diff --git a/tools/WrapperGenerator/NamingOverrides.cs b/tools/WrapperGenerator/NamingOverrides.cs
new file mode 100644
index 0000000000..803e961a20
--- /dev/null
+++ b/tools/WrapperGenerator/NamingOverrides.cs
@@ -0,0 +1,105 @@
+using System;
+using System.Collections.Generic;
+using System.Text.RegularExpressions;
+
+namespace WrapperGenerator;
+
+// Hand-tuned naming exceptions, kept as data with a cited source on every entry.
+//
+// The published Microsoft.Graph names are mostly algorithmic, but a few come from
+// hand-written AutoRest directives in the msgraph-sdk-powershell module configs. Matching
+// the published names 100% means mirroring those directives here.
+//
+// Keep this list short. Add an entry only when the published name cannot come out of the
+// naming rules, and cite the directive that created it.
+public static partial class NamingOverrides
+{
+    private enum OverrideKind
+    {
+        SuppressOperation,
+        ReplaceNoun,
+        StripNounPrefix,
+    }
+
+    private sealed record Entry(OverrideKind Kind, string? Method, string PathPrefix, bool ExactPath, string? Value, string Reason);
+
+    private static readonly List<Entry> Entries =
+    [
+        // The SDK ships no Update cmdlet for /users/{id}/calendar. Its pipeline removes the
+        // operation outright, in src/Calendar/Calendar.md: remove-path-by-operation
+        // user_UpdateCalendar. The wrapper must not invent a cmdlet the SDK chose to drop.
+        new(OverrideKind.SuppressOperation, "PATCH", "/users/{}/calendar", ExactPath: true, Value: null,
+            Reason: "Calendar.md remove-path-by-operation user_UpdateCalendar"),
+
+        // GET /users/{id}/calendar ships as Get-MgUserDefaultCalendar, renamed in
+        // src/Calendar/Calendar.md: "^(User)(Calendar)$" -> "$1Default$2".
+        new(OverrideKind.ReplaceNoun, "GET", "/users/{}/calendar", ExactPath: true, Value: "UserDefaultCalendar",
+            Reason: "Calendar.md directive renames UserCalendar to UserDefaultCalendar"),
+
+        // Most nouns under /solutions/ drop the "Solution" prefix (for example
+        // Get-MgBookingBusiness, Get-MgVirtualEventWebinar). BackupRestore is a known
+        // exception where published cmdlets keep the Solution prefix.
+        new(OverrideKind.StripNounPrefix, Method: null, "/solutions/", ExactPath: false, Value: "Solution",
+            Reason: "Bookings/VirtualEvents naming pattern under /solutions/*; BackupRestore is explicitly excluded in ApplyNounOverrides"),
+    ];
+
+    [GeneratedRegex(@"\{[^}]*\}")]
+    private static partial Regex PathParamRegex();
+
+    // Parameter names are erased before comparing, so "/users/{user-id}/calendar" and
+    // "/users/{id}/calendar" both match the "/users/{}/calendar" entries above. A spec-side
+    // parameter rename must not silently disable an override.
+    private static string NormalizePath(string pathTemplate) =>
+        PathParamRegex().Replace(pathTemplate, "{}").TrimEnd('/').ToLowerInvariant();
+
+    public static bool IsSuppressed(string httpMethod, string pathTemplate)
+    {
+        ArgumentNullException.ThrowIfNull(httpMethod);
+        ArgumentNullException.ThrowIfNull(pathTemplate);
+        var path = NormalizePath(pathTemplate);
+        foreach (var entry in Entries)
+        {
+            if (entry.Kind == OverrideKind.SuppressOperation && Matches(entry, httpMethod, path))
+                return true;
+        }
+        return false;
+    }
+
+    public static string ApplyNounOverrides(string httpMethod, string pathTemplate, string noun)
+    {
+        ArgumentNullException.ThrowIfNull(httpMethod);
+        ArgumentNullException.ThrowIfNull(pathTemplate);
+        ArgumentNullException.ThrowIfNull(noun);
+        var path = NormalizePath(pathTemplate);
+
+        // Published BackupRestore cmdlets retain the Solution prefix (for example,
+        // Get-MgSolutionBackupRestore). Do not apply /solutions/* strip rules here.
+        var skipSolutionStrip = path.StartsWith("/solutions/backuprestore", StringComparison.Ordinal);
+
+        foreach (var entry in Entries)
+        {
+            if (!Matches(entry, httpMethod, path))
+                continue;
+            switch (entry.Kind)
+            {
+                case OverrideKind.ReplaceNoun:
+                    return entry.Value!;
+                case OverrideKind.StripNounPrefix when skipSolutionStrip:
+                    break;
+                case OverrideKind.StripNounPrefix when noun.StartsWith(entry.Value!, StringComparison.Ordinal) && noun.Length > entry.Value!.Length:
+                    noun = noun[entry.Value!.Length..];
+                    break;
+            }
+        }
+        return noun;
+    }
+
+    private static bool Matches(Entry entry, string httpMethod, string normalizedPath)
+    {
+        if (entry.Method is not null && !string.Equals(entry.Method, httpMethod, StringComparison.OrdinalIgnoreCase))
+            return false;
+        return entry.ExactPath
+            ? string.Equals(normalizedPath, entry.PathPrefix, StringComparison.Ordinal)
+            : normalizedPath.StartsWith(entry.PathPrefix, StringComparison.Ordinal);
+    }
+}
diff --git a/tools/WrapperGenerator/OperationInfo.cs b/tools/WrapperGenerator/OperationInfo.cs
new file mode 100644
index 0000000000..e8ede2787d
--- /dev/null
+++ b/tools/WrapperGenerator/OperationInfo.cs
@@ -0,0 +1,20 @@
+using System.Collections.Generic;
+
+namespace WrapperGenerator;
+
+public sealed record OperationInfo(
+    string HttpMethod,
+    string Path,
+    string OperationId,
+    IReadOnlyList<string> PathParams,
+    IReadOnlyList<string> QueryParams,
+    bool HasBody,
+    // True when the success response wraps results in a "value" array (GET /users) rather
+    // than returning a single entity (GET /users/{id}). Path-param count alone cannot tell
+    // these apart for nested resources: a nested list and a nested get-by-id both carry the
+    // parent's path param.
+    bool IsCollectionResponse = false,
+    // Raw OpenAPI header parameter names, for example "If-Match". Graph sometimes requires
+    // these even where the spec marks them optional (Planner's PATCH/DELETE), so they become
+    // real cmdlet parameters instead of being dropped.
+    IReadOnlyList<string>? HeaderParams = null);
diff --git a/tools/WrapperGenerator/PowerShellWrapperGenerationService.cs b/tools/WrapperGenerator/PowerShellWrapperGenerationService.cs
new file mode 100644
index 0000000000..3316b54e81
--- /dev/null
+++ b/tools/WrapperGenerator/PowerShellWrapperGenerationService.cs
@@ -0,0 +1,370 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Linq;
+using System.Net.Http;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.Extensions.Logging;
+using Microsoft.OpenApi;
+
+namespace WrapperGenerator;
+
+// Drives the "PowerShellWrapper" generation language: emits one PowerShell cmdlet class per
+// selected OpenAPI operation, straight from the OpenApiDocument that KiotaBuilder already
+// loaded and filtered with --include-path/--exclude-path. It bypasses the CodeDOM, refiner,
+// and writer pipeline, the same way PluginsGenerationService does for plugin output.
+public sealed partial class PowerShellWrapperGenerationService
+{
+    private readonly OpenApiDocument document;
+    private readonly GeneratorConfig config;
+    private readonly ILogger logger;
+
+    public PowerShellWrapperGenerationService(OpenApiDocument document, GeneratorConfig configuration, ILogger logger)
+    {
+        ArgumentNullException.ThrowIfNull(document);
+        ArgumentNullException.ThrowIfNull(configuration);
+        ArgumentNullException.ThrowIfNull(logger);
+        this.document = document;
+        config = configuration;
+        this.logger = logger;
+    }
+
+    // One GET operation from the first pass, held until we know whether it pairs with a
+    // list/item partner. CollectionValueSchema is the response's "value" array property when
+    // the response is a collection, null for a single entity. It is resolved once here so
+    // later steps never re-walk the schema.
+    private sealed record GetOperationRecord(CmdletNaming Naming, IOpenApiSchema ResponseSchema, IOpenApiSchema? CollectionValueSchema, IReadOnlyList<string> QueryParams)
+    {
+        public bool IsCollection => CollectionValueSchema is not null;
+    }
+
+    public async Task GenerateAsync(CancellationToken cancellationToken)
+    {
+        cancellationToken.ThrowIfCancellationRequested();
+
+        var ctx = new EmitContext(ClientNamespace: config.ClientNamespaceName);
+
+        Directory.CreateDirectory(config.OutputPath);
+        foreach (var stale in Directory.GetFiles(config.OutputPath, "*.g.cs"))
+            File.Delete(stale);
+
+        await File.WriteAllTextAsync(Path.Combine(config.OutputPath, "Shared.g.cs"), CmdletEmitter.EmitSharedAuth(ctx), cancellationToken).ConfigureAwait(false);
+        LogWroteSharedFile();
+
+        var written = 0;
+        var getOperations = new List<GetOperationRecord>();
+
+        foreach (var (pathTemplate, pathItem) in document.Paths)
+        {
+            foreach (var (httpMethod, operation) in pathItem.Operations ?? new Dictionary<HttpMethod, OpenApiOperation>())
+            {
+                cancellationToken.ThrowIfCancellationRequested();
+
+                // Skip operations the published SDK deliberately does not ship. NamingOverrides
+                // holds the citation for each one.
+                if (NamingOverrides.IsSuppressed(httpMethod.Method, pathTemplate))
+                {
+                    LogSuppressedOperation(httpMethod.Method, pathTemplate);
+                    continue;
+                }
+
+                var pathParams = (operation.Parameters ?? []).Where(p => p.In == ParameterLocation.Path).Select(p => p.Name!).ToList();
+                var queryParams = (operation.Parameters ?? []).Where(p => p.In == ParameterLocation.Query).Select(p => p.Name!).ToList();
+                var headerParams = (operation.Parameters ?? []).Where(p => p.In == ParameterLocation.Header).Select(p => p.Name!).ToList();
+
+                // Only GET responses need inspecting: the list/item pairing is decided by the
+                // response shape, and DELETE returns 204 with no body.
+                //
+                // The "2XX" response key and "application/json" content type are intentional,
+                // Graph-scoped assumptions, not a generic OpenAPI reader: the Graph metadata keys
+                // every success response as "2XX" and describes JSON bodies. This generator only
+                // targets Graph, so the direct indexers are deliberate. A general reader would
+                // need to fall back across 200/201/default and negotiate content types.
+                var responseSchema = httpMethod == HttpMethod.Get
+                    ? TryGetSuccessJsonSchema(operation)
+                    : null;
+                var collectionValueSchema = responseSchema is not null ? FindProperty(responseSchema, "value") : null;
+                var isCollection = collectionValueSchema is not null;
+
+                var operationId = operation.OperationId
+                    ?? throw new InvalidOperationException($"Operation at '{pathTemplate}' ({httpMethod}) has no operationId.");
+                var opInfo = new OperationInfo(httpMethod.Method, pathTemplate, operationId, pathParams, queryParams, operation.RequestBody is not null, isCollection, headerParams);
+                var cmdletNaming = Naming.Resolve(opInfo);
+
+                if (httpMethod == HttpMethod.Get && responseSchema is null)
+                {
+                    LogSkippedUnsupportedOperation(httpMethod.Method, pathTemplate, "missing supported success JSON response schema");
+                    continue;
+                }
+
+                // GETs are held back: pairing is decided per noun, so it needs every GET first.
+                if (httpMethod == HttpMethod.Get)
+                {
+                    getOperations.Add(new GetOperationRecord(cmdletNaming, responseSchema!, collectionValueSchema, queryParams));
+                    continue;
+                }
+
+                string? source = httpMethod switch
+                {
+                    _ when httpMethod == HttpMethod.Delete => CmdletEmitter.EmitRemove(cmdletNaming, ctx),
+                    _ when httpMethod == HttpMethod.Post => EmitNewFor(cmdletNaming, ctx, operation),
+                    _ when httpMethod == HttpMethod.Patch => EmitUpdateFor(cmdletNaming, ctx, operation),
+                    _ => null,
+                };
+
+                if (source is null)
+                {
+                    var reason = httpMethod == HttpMethod.Delete || httpMethod == HttpMethod.Post || httpMethod == HttpMethod.Patch
+                        ? "missing supported request JSON schema"
+                        : "no wrapper emitter for this HTTP method";
+                    LogSkippedUnsupportedOperation(httpMethod.Method, pathTemplate, reason);
+                    continue;
+                }
+
+                written += await WriteCmdletFileAsync(cmdletNaming, source, cancellationToken).ConfigureAwait(false);
+            }
+        }
+
+        written += await EmitGetOperationsAsync(getOperations, ctx, cancellationToken).ConfigureAwait(false);
+
+        LogWroteFiles(written + 1, config.OutputPath);
+    }
+
+    // Pairs a list GET (GET /users/{id}/messages) with its item GET
+    // (GET /users/{id}/messages/{message-id}) and presents them as one public Get-MgX cmdlet,
+    // matching the published SDK surface. The real work stays in two separate internal cmdlets
+    // (the *_List/*_Get classes named by Naming.WithSuffix); the public dispatcher only picks
+    // which one to invoke.
+    //
+    // A pairing is only trusted when it is structurally unambiguous: exactly one collection GET
+    // and one single-entity GET share the noun, and the item's path is the list's path plus one
+    // trailing id (Users[UserId].Messages -> Users[UserId].Messages[MessageId]). Everything
+    // else keeps the standalone shape: singleton navs with no list (GET /users/{id}/calendar),
+    // list-only endpoints such as delta queries, or an unexpected same-noun collision.
+    private async Task<int> EmitGetOperationsAsync(List<GetOperationRecord> getOperations, EmitContext ctx, CancellationToken cancellationToken)
+    {
+        var written = 0;
+        var consumed = new HashSet<GetOperationRecord>();
+
+        var listsByNoun = getOperations.Where(o => o.IsCollection).ToLookup(o => o.Naming.Noun);
+        var itemsByNoun = getOperations.Where(o => !o.IsCollection).ToLookup(o => o.Naming.Noun);
+
+        foreach (var listGroup in listsByNoun)
+        {
+            if (listGroup.Count() != 1)
+                continue;
+            var listOp = listGroup.Single();
+
+            var itemGroup = itemsByNoun[listGroup.Key];
+            if (itemGroup.Count() != 1)
+                continue;
+            var itemOp = itemGroup.Single();
+
+            if (!Naming.IsListItemPair(listOp.Naming, itemOp.Naming))
+                continue;
+
+            if (!TryResolveListEntityTypeName(listOp.CollectionValueSchema!, ctx.ModelsNamespace, out var listEntityType)
+                || !TryResolveEntityTypeName(itemOp.ResponseSchema, ctx.ModelsNamespace, out var entityType))
+            {
+                LogSkippedUnsupportedOperation("GET", listOp.Naming.BuilderExpression, "response schema is not a resolvable $ref entity type");
+                continue;
+            }
+            var collectionResponseType = listEntityType + "CollectionResponse";
+
+            // The two real implementations: separate, independently documented cmdlets, unchanged
+            // from (and reusing) the standalone shapes used for unpaired GETs.
+            var internalListNaming = Naming.WithSuffix(listOp.Naming, "_List");
+            var internalItemNaming = Naming.WithSuffix(itemOp.Naming, "_Get");
+            var internalListSource = CmdletEmitter.EmitListGet(internalListNaming, ctx, listEntityType, collectionResponseType, listOp.QueryParams.ToHashSet());
+            var internalItemSource = CmdletEmitter.EmitItemGet(internalItemNaming, ctx, entityType);
+
+            // The thin public dispatcher on top, presenting the merged Get-MgX surface.
+            var dispatcherSource = CmdletEmitter.EmitGetDispatcher(listOp.Naming, itemOp.Naming,
+                internalListNaming, internalItemNaming, ctx, entityType, collectionResponseType, listOp.QueryParams.ToHashSet());
+
+            written += await WriteCmdletFileAsync(internalListNaming, internalListSource, cancellationToken).ConfigureAwait(false);
+            written += await WriteCmdletFileAsync(internalItemNaming, internalItemSource, cancellationToken).ConfigureAwait(false);
+            written += await WriteCmdletFileAsync(listOp.Naming, dispatcherSource, cancellationToken).ConfigureAwait(false);
+            consumed.Add(listOp);
+            consumed.Add(itemOp);
+        }
+
+        foreach (var op in getOperations)
+        {
+            if (consumed.Contains(op))
+                continue;
+
+            string? source;
+            if (op.IsCollection)
+            {
+                if (!TryResolveListEntityTypeName(op.CollectionValueSchema!, ctx.ModelsNamespace, out var listEntityType))
+                {
+                    LogSkippedUnsupportedOperation("GET", op.Naming.BuilderExpression, "collection response schema is not a resolvable $ref entity type");
+                    continue;
+                }
+
+                source = CmdletEmitter.EmitListGet(op.Naming, ctx, listEntityType, listEntityType + "CollectionResponse", op.QueryParams.ToHashSet());
+            }
+            else
+            {
+                if (!TryResolveEntityTypeName(op.ResponseSchema, ctx.ModelsNamespace, out var entityType))
+                {
+                    LogSkippedUnsupportedOperation("GET", op.Naming.BuilderExpression, "response schema is not a resolvable $ref entity type");
+                    continue;
+                }
+
+                source = CmdletEmitter.EmitItemGet(op.Naming, ctx, entityType);
+            }
+
+            written += await WriteCmdletFileAsync(op.Naming, source, cancellationToken).ConfigureAwait(false);
+        }
+
+        return written;
+    }
+
+    private async Task<int> WriteCmdletFileAsync(CmdletNaming naming, string source, CancellationToken cancellationToken)
+    {
+        var fileName = naming.ClassName.Replace("Command", "", StringComparison.Ordinal) + ".g.cs";
+        await File.WriteAllTextAsync(Path.Combine(config.OutputPath, fileName), source, cancellationToken).ConfigureAwait(false);
+        LogWroteCmdletFile(fileName, naming.VerbName, naming.Noun);
+        return 1;
+    }
+
+    [LoggerMessage(Level = LogLevel.Information, Message = "Wrote Shared.g.cs")]
+    private partial void LogWroteSharedFile();
+    [LoggerMessage(Level = LogLevel.Information, Message = "Wrote {FileName} ({Verb}-{Noun})")]
+    private partial void LogWroteCmdletFile(string fileName, string verb, string noun);
+    [LoggerMessage(Level = LogLevel.Information, Message = "Wrote {Count} file(s) to {OutputPath}")]
+    private partial void LogWroteFiles(int count, string outputPath);
+    [LoggerMessage(Level = LogLevel.Information, Message = "Suppressed {Method} {PathTemplate}: the published SDK ships no cmdlet for it (see NamingOverrides)")]
+    private partial void LogSuppressedOperation(string method, string pathTemplate);
+    [LoggerMessage(Level = LogLevel.Warning, Message = "Skipped {Method} {PathTemplate}: {Reason}")]
+    private partial void LogSkippedUnsupportedOperation(string method, string pathTemplate, string reason);
+
+    // collectionValueSchema is the already-resolved "value" array property from
+    // GetOperationRecord, so nothing is re-walked here.
+    private static bool TryResolveListEntityTypeName(IOpenApiSchema collectionValueSchema, string modelsNamespace, out string entityTypeName)
+    {
+        entityTypeName = string.Empty;
+        var itemSchema = collectionValueSchema.Items;
+        if (itemSchema is null)
+            return false;
+        return TryResolveEntityTypeName(itemSchema, modelsNamespace, out entityTypeName);
+    }
+
+    // The old openApiDocs specs declare "value" directly on the schema; the KiotaCompat specs
+    // compose it through allOf. Look in both places, recursively for nested composition.
+    private static IOpenApiSchema? FindProperty(IOpenApiSchema schema, string propertyName)
+    {
+        if (schema.Properties?.TryGetValue(propertyName, out var direct) == true)
+            return direct;
+
+        foreach (var branch in schema.AllOf ?? [])
+        {
+            if (FindProperty(branch, propertyName) is { } found)
+                return found;
+        }
+
+        return null;
+    }
+
+    private static string? EmitNewFor(CmdletNaming naming, EmitContext ctx, OpenApiOperation operation)
+    {
+        // "application/json" is an intentional, Graph-scoped assumption: Graph request bodies are
+        // JSON, so the content type is indexed directly rather than negotiated. See the matching
+        // note on the response lookup in GenerateAsync.
+        var bodySchema = TryGetRequestJsonSchema(operation);
+        if (bodySchema is null)
+            return null;
+        if (!TryResolveEntityTypeName(bodySchema, ctx.ModelsNamespace, out var entityType))
+            return null;
+        return CmdletEmitter.EmitNew(naming, ctx, entityType,
+            SchemaProperties.ExtractPrimitiveProperties(bodySchema), SchemaProperties.HasPasswordProfile(bodySchema));
+    }
+
+    private static string? EmitUpdateFor(CmdletNaming naming, EmitContext ctx, OpenApiOperation operation)
+    {
+        // "application/json" is an intentional, Graph-scoped assumption (see EmitNewFor).
+        var bodySchema = TryGetRequestJsonSchema(operation);
+        if (bodySchema is null)
+            return null;
+        if (!TryResolveEntityTypeName(bodySchema, ctx.ModelsNamespace, out var entityType))
+            return null;
+        return CmdletEmitter.EmitUpdate(naming, ctx, entityType,
+            SchemaProperties.ExtractPrimitiveProperties(bodySchema), SchemaProperties.HasPasswordProfile(bodySchema));
+    }
+
+    private static IOpenApiSchema? TryGetSuccessJsonSchema(OpenApiOperation operation)
+    {
+        if (operation.Responses is null)
+            return null;
+
+        foreach (var key in new[] { "2XX", "200", "201", "default" })
+        {
+            if (!operation.Responses.TryGetValue(key, out var response) || response?.Content is null)
+                continue;
+
+            var schema = TryGetJsonSchemaFromContent(response.Content);
+            if (schema is not null)
+                return schema;
+        }
+
+        return null;
+    }
+
+    private static IOpenApiSchema? TryGetRequestJsonSchema(OpenApiOperation operation)
+    {
+        var content = operation.RequestBody?.Content;
+        if (content is null)
+            return null;
+        return TryGetJsonSchemaFromContent(content);
+    }
+
+    private static IOpenApiSchema? TryGetJsonSchemaFromContent(IDictionary<string, IOpenApiMediaType> content)
+    {
+        if (content.TryGetValue("application/json", out var exactJson) && exactJson?.Schema is not null)
+            return exactJson.Schema;
+
+        foreach (var (contentType, mediaType) in content)
+        {
+            if (contentType.StartsWith("application/json", StringComparison.OrdinalIgnoreCase)
+                || contentType.EndsWith("+json", StringComparison.OrdinalIgnoreCase))
+            {
+                if (mediaType?.Schema is not null)
+                    return mediaType.Schema;
+            }
+        }
+
+        return null;
+    }
+
+    private static bool TryResolveEntityTypeName(IOpenApiSchema schema, string modelsNamespace, out string entityTypeName)
+    {
+        entityTypeName = string.Empty;
+        var id = schema.GetReferenceId();
+        if (string.IsNullOrEmpty(id))
+            return false;
+        entityTypeName = SchemaNameToTypeName(id, modelsNamespace);
+        return true;
+    }
+
+    private static string ResolveReferenceId(IOpenApiSchema schema) =>
+        schema.GetReferenceId() is string id && !string.IsNullOrEmpty(id)
+            ? id
+            : throw new InvalidOperationException("Expected a $ref schema for entity type resolution.");
+
+    private static string SchemaNameToTypeName(string schemaName, string modelsNamespace)
+    {
+        var name = schemaName.StartsWith("microsoft.graph.", StringComparison.Ordinal)
+            ? schemaName["microsoft.graph.".Length..]
+            : schemaName;
+
+        // Kiota nests each dot segment as a sub-namespace under Models ("security.alert"
+        // becomes Models.Security.Alert). A using directive does not reach into nested
+        // namespaces, so multi-segment names are fully qualified; single-segment names,
+        // the common case, stay bare.
+        var segments = name.Split('.').Select(static segment => char.ToUpperInvariant(segment[0]) + segment[1..]).ToArray();
+        return segments.Length == 1 ? segments[0] : $"{modelsNamespace}.{string.Join('.', segments)}";
+    }
+}
diff --git a/tools/WrapperGenerator/Program.cs b/tools/WrapperGenerator/Program.cs
new file mode 100644
index 0000000000..837357fc7c
--- /dev/null
+++ b/tools/WrapperGenerator/Program.cs
@@ -0,0 +1,92 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Text.Json;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.OpenApi;
+using Microsoft.OpenApi.Reader;
+
+namespace WrapperGenerator;
+
+// Entry point: loads an OpenAPI document from a file, applies --include-path filtering, builds
+// the run configuration, and calls PowerShellWrapperGenerationService.GenerateAsync.
+internal static class Program
+{
+    private static readonly JsonSerializerOptions LockFileJsonOptions = new() { WriteIndented = true };
+
+    private static async Task<int> Main(string[] args)
+    {
+        string? specPath = null;
+        string? outputPath = null;
+        string? clientNamespace = null;
+        var includePaths = new List<string>();
+
+        for (var i = 0; i < args.Length; i++)
+        {
+            switch (args[i])
+            {
+                case "-d" or "--openapi":
+                    specPath = ArgValue(args, ref i);
+                    break;
+                case "-o" or "--output":
+                    outputPath = ArgValue(args, ref i);
+                    break;
+                case "-n" or "--namespace" or "--namespace-name":
+                    clientNamespace = ArgValue(args, ref i);
+                    break;
+                case "--include-path":
+                    includePaths.Add(ArgValue(args, ref i));
+                    break;
+                case "-c" or "--class-name":
+                    // Accepted for parity with the kiota command line; the emitter hardcodes the
+                    // client type name, so this tool does not use it.
+                    ArgValue(args, ref i);
+                    break;
+                default:
+                    Console.Error.WriteLine($"Unknown argument: {args[i]}");
+                    return 2;
+            }
+        }
+
+        if (specPath is null || outputPath is null || clientNamespace is null)
+        {
+            Console.Error.WriteLine(
+                "Usage: WrapperGenerator -d <openapi> -o <output> -n <namespace> [--include-path '<glob>#GET,POST' ...]");
+            return 2;
+        }
+
+        var settings = new OpenApiReaderSettings();
+        settings.AddYamlReader();
+
+        await using var stream = File.OpenRead(specPath);
+        var readResult = await OpenApiDocument.LoadAsync(stream, settings: settings, cancellationToken: CancellationToken.None).ConfigureAwait(false);
+        var document = readResult.Document
+            ?? throw new InvalidOperationException($"Failed to parse an OpenAPI document from '{specPath}'.");
+
+        IncludePathFilter.Apply(document, includePaths);
+
+        var config = new GeneratorConfig(ClientNamespaceName: clientNamespace, OutputPath: outputPath);
+        var service = new PowerShellWrapperGenerationService(document, config, NullLogger.Instance);
+        await service.GenerateAsync(CancellationToken.None).ConfigureAwait(false);
+
+        // The generation service writes only *.g.cs. Also write a minimal kiota-lock.json recording
+        // the source spec path, so downstream tooling that keys off it — notably
+        // tools/Compare-WrapperCmdletNames.ps1, which reads the v1.0/beta segment out of it to scope
+        // its oracle join — can determine the API version.
+        var lockJson = JsonSerializer.Serialize(new { descriptionLocation = specPath }, LockFileJsonOptions);
+        await File.WriteAllTextAsync(Path.Combine(outputPath, "kiota-lock.json"), lockJson, CancellationToken.None).ConfigureAwait(false);
+
+        var count = Directory.GetFiles(outputPath, "*.g.cs").Length;
+        Console.WriteLine($"Generated {count} .g.cs file(s) to {outputPath}");
+        return 0;
+    }
+
+    private static string ArgValue(string[] args, ref int i)
+    {
+        if (i + 1 >= args.Length)
+            throw new ArgumentException($"Missing value after '{args[i]}'.");
+        return args[++i];
+    }
+}
diff --git a/tools/WrapperGenerator/README.md b/tools/WrapperGenerator/README.md
new file mode 100644
index 0000000000..963593ef42
--- /dev/null
+++ b/tools/WrapperGenerator/README.md
@@ -0,0 +1,174 @@
+# WrapperGenerator
+
+Generates the PowerShell **cmdlets** for the Microsoft Graph SDK from Graph's OpenAPI description — the C# classes behind commands like `Get-MgUserMessage` and `New-MgUserMessage`.
+
+## Why this exists
+
+The Microsoft Graph PowerShell SDK is thousands of cmdlets, and customers have scripts that depend on their exact names — `Get-MgUserMessage`, not `Get-MgUsersMessages`. Those names follow conventions, but the conventions are fiddly (singular nouns, a `Mg` prefix, a handful of hand-tuned exceptions), and the SDK's current generator (AutoRest) has quietly dropped cmdlets when names collided.
+
+This tool regenerates those cmdlets from the same OpenAPI description **while reproducing the published names exactly**, so a regenerated module is a drop-in replacement. Because name parity is the hard part, most of the tool is a naming engine; the rest is a straightforward C# code emitter.
+
+## What it produces
+
+You give it operations from the OpenAPI document; it writes one C# file per cmdlet. For the four Mail operations on messages, the mapping is:
+
+| OpenAPI operation | Cmdlet |
+|---|---|
+| `GET /users/{user-id}/messages` (a list) | `Get-MgUserMessage` |
+| `GET /users/{user-id}/messages/{message-id}` (one item) | `Get-MgUserMessage` |
+| `POST /users/{user-id}/messages` | `New-MgUserMessage` |
+| `DELETE /users/{user-id}/messages/{message-id}` | `Remove-MgUserMessage` |
+
+Each cmdlet is a `PSCmdlet` subclass that authenticates, binds parameters, and calls Graph through the Kiota-generated C# client. A user runs `Get-MgUserMessage -UserId <id>` and gets their messages back.
+
+## How a cmdlet name is built
+
+This is the core of the tool. A name has three parts: a **verb**, a **noun**, and the `Mg` prefix.
+
+**Verb — from the HTTP method:**
+
+| HTTP | Verb | | HTTP | Verb |
+|---|---|---|---|---|
+| GET | `Get` | | PUT | `Set` |
+| POST | `New` | | DELETE | `Remove` |
+| PATCH | `Update` | | | |
+
+**Noun — from the URL path, not the operationId.** The operationId in the spec carries whatever plurality and casing the spec author chose; the URL path is deterministic. So the noun is built by walking the path:
+
+1. Drop the `{parameter}` segments. `/users/{user-id}/messages` → `users` `messages`.
+2. Pascal-case and **singularize each remaining segment**: `User`, `Message`.
+3. Collapse repeats and stitch together, prefix `Mg`: `MgUserMessage`.
+
+Singularization runs per camel-case word (so `termsAndConditions` → `TermAndCondition`), through an ordered list of rules — first match wins:
+
+| Rule | Example |
+|---|---|
+| Acronyms / words under 3 letters stay | `OS` → `OS` |
+| Irregulars | `Children` → `Child`, `People` → `Person` |
+| Invariants (never singularized) | `Windows` → `Windows` |
+| `ies` → `y` | `Policies` → `Policy` |
+| `uses` → `us` | `Statuses` → `Status` |
+| `es` after x/z/ch/sh/ss | `Businesses` → `Business` |
+| ends in `ss`/`us`/`is` stays | `Access`, `Status`, `Analysis` |
+| trailing `s` drops | `Messages` → `Message` |
+
+A few published names aren't algorithmic — they come from hand-written directives in the SDK's module configs. Those live as data in `NamingOverrides.cs`, each with a cited source, rather than as special cases in the naming code. There are three today: suppress `PATCH /users/{id}/calendar` (the SDK ships no such cmdlet), rename `GET /users/{id}/calendar` to `…UserDefaultCalendar`, and strip the `Solution` prefix for most `/solutions/*` nouns (for example, `Get-MgBookingBusiness`, not `Get-MgSolutionBookingBusiness`) while preserving it for known exceptions such as BackupRestore (`Get-MgSolutionBackupRestore`).
+
+## The one subtle part: list + item GET become one cmdlet
+
+Graph has two GETs for a resource — the collection (`GET …/messages`) and a single item (`GET …/messages/{message-id}`) — but the published SDK exposes **one** cmdlet, `Get-MgUserMessage`,that does both: no `-MessageId` lists them, a `-MessageId` fetches one.
+
+The generator reproduces that. When it finds a list GET and an item GET that share a noun, it emits **three** files:
+
+- `Get-MgUserMessage` — a thin **dispatcher**. It has two parameter sets, `List` (default) and `Get`, and makes no Graph call itself; it just forwards to one of the two cmdlets below.
+- `Get-MgUserMessage_List` — the real list implementation.
+- `Get-MgUserMessage_Get` — the real single-item implementation.
+
+The dispatcher is small enough to read in full — this is the actual generated output:
+
+```csharp
+[Cmdlet(VerbsCommon.Get, "MgUserMessage", DefaultParameterSetName = "List")]
+[OutputType(typeof(MessageCollectionResponse), ParameterSetName = new[] { "List" })]
+[OutputType(typeof(Message), ParameterSetName = new[] { "Get" })]
+public class GetMgUserMessageCommand : PSCmdlet
+{
+    [Parameter(Mandatory = true, Position = 0)]
+    public string UserId { get; set; } = string.Empty;
+    [Parameter(Mandatory = true, ParameterSetName = "Get", Position = 1)]
+    public string MessageId { get; set; } = string.Empty;
+    // ... -Filter/-Top/-Skip/... on the "List" set, -Property/-Expand on both ...
+
+    protected override void ProcessRecord()
+    {
+        var internalCmdletName = ParameterSetName == "Get" ? "Get-MgUserMessage_Get" : "Get-MgUserMessage_List";
+        InvokeCommand.InvokeScript(
+            "param($BoundParameters, $CmdletName) & $CmdletName @BoundParameters",
+            /* ... */ MyInvocation.BoundParameters, internalCmdletName);
+    }
+}
+```
+
+`-MessageId` belongs only to the `Get` set, so binding it selects that set and the dispatcher calls `Get-MgUserMessage_Get`; otherwise it calls `Get-MgUserMessage_List`. (Standalone GETs with no list/item pair — like a singleton `GET /users/{id}/calendar` — just get one plain cmdlet.)
+
+## What's inside every cmdlet
+
+Whatever the shape, a generated cmdlet has the same skeleton:
+
+- **Path IDs** become mandatory positional parameters (`-UserId`, `-MessageId`).
+- **Auth**: every cmdlet takes an optional `-AccessToken`; without it, the cmdlet uses the active
+  `Connect-MgGraph` session. (The shared auth helpers are written once per module into `Shared.g.cs`.)
+- **GETs** expose the OData query options the operation supports — `-Filter`, `-Property` (alias`-Select`), `-Sort` (alias `-OrderBy`), `-Top`, `-Skip`, `-Count`.
+- **`New`/`Update`** flatten the request body's top-level primitive properties into parameters (`-Subject`, `-IsRead`, …). Nested/complex properties are skipped, with one special case:
+  `passwordProfile` is exposed as `-Password`/`-ForceChangePasswordNextSignIn` because creating a user requires it. `Update` also re-fetches after a `204 No Content` so it still returns the updated object.
+- **`New`/`Update`/`Remove`** are gated by `ShouldProcess`, so `-WhatIf` and `-Confirm` work.
+- **The actual request** is the Kiota client's fluent chain built from the path:
+  `client.Users[UserId].Messages[MessageId].GetAsync(...)`.
+
+## What it needs to actually run
+
+The generated files are **source, not a built module**. They reference, by name, a Kiota-generated C# client (an `ApiClient` type and its `Models`) plus the Graph auth helpers. So this tool is step 2
+of a two-step build:
+
+```
+Filtered OpenAPI (Graph)
+   ├─► [1] kiota generate  ─► request builders + models  (the "ApiClient" — run separately)
+   └─► [2] WrapperGenerator ─► the cmdlet wrappers        (this tool)
+```
+
+The wrappers compile and run only alongside step 1's output. Wiring the two into one buildable module is later work (see Gaps).
+
+## The source files
+
+| File | What it does |
+|---|---|
+| `Program.cs` | CLI entry point: load the spec, filter paths, run the generator |
+| `IncludePathFilter.cs` | Trims the spec to the requested `--include-path` paths/methods |
+| `PowerShellWrapperGenerationService.cs` | The orchestrator: walks the paths, pairs list/item GETs, writes the files |
+| `CmdletNaming.cs` | Verb + noun + the `client.X[Y].Z` request chain |
+| `Singularizer.cs` | The per-word singularization rules |
+| `NamingOverrides.cs` | The three hand-cited name exceptions |
+| `CmdletEmitter.cs` | The C# templates for each cmdlet shape (the actual code text) |
+| `SchemaProperties.cs` | Which body properties become `New`/`Update` parameters |
+| `OperationInfo.cs`, `EmitContext.cs`, `GeneratorConfig.cs` | Small data/config carriers |
+| `GeneratorExtensions.cs` | String + schema helper methods |
+
+## Build, run, test
+
+**Build:**
+
+```powershell dotnet build tools/WrapperGenerator
+```
+
+**Run** — generate the Mail message cmdlets (the `--include-path` args pick which operations):
+
+```powershell
+dotnet run --project tools/WrapperGenerator -- `
+  -d openApiDocs/v1.0/Mail.yml `
+  -o <output-folder> `
+  -n Microsoft.Graph.PowerShell.Mail.Client `
+  --include-path '/users/{user-id}/message[s]#GET,POST' `
+  --include-path '/users/{user-id}/messages/{message-id}*#GET,DELETE'
+```
+
+`-d` is the spec, `-o` the output folder, `-n` the namespace of the step-1 client the wrappers call. Each `--include-path` is a glob with an optional `#METHOD,METHOD` filter; omit them to generate every operation in the document. Output: `Shared.g.cs`, one `*.g.cs` per cmdlet (in namespace `MgPoC`), and a small `kiota-lock.json` noting the source spec.
+
+**Test** — two layers:
+
+```powershell
+# 1. Naming rules pinned to published Microsoft.Graph names (69 tests)
+dotnet test tools/WrapperGenerator.Tests
+#    => Passed! - Failed: 0, Passed: 69, Total: 69
+
+# 2. Parity gate: generate, then check every cmdlet name against Graph's own command inventory
+.\tools\Compare-WrapperCmdletNames.ps1 -GeneratedPath <output-folder>
+#    => Mail [v1.0]: 4 of 4 cmdlets match the oracle ...  EXIT CODE: 0
+```
+
+The unit tests guard the naming rules (their expected values are real published names from `src/Authentication/Authentication/custom/common/MgCommandMetadata.json`). The parity gate checks actual generated output against that same inventory. There is **no** test yet that the generated cmdlets *compile* — that needs step 1's client to compile against.
+
+## Gaps / not done yet
+
+- **Output isn't wired into a module.** Files go to whatever `-o` folder you pass, in a fixed `MgPoC` namespace. The target design commits wrappers into `src/{Module}/` with a per-module namespace; that alignment (and a namespace override) isn't built.
+- **No runtime base classes or real auth flow.** Shared paging, a proper `Connect-MgGraph`/session integration, and base cmdlet classes are a later phase.
+- **Body binding is shallow** — top-level primitive properties only; no nested/complex types beyond the `passwordProfile` special case.
+- **Some operation shapes aren't generated** — `$count`/`$ref`/`$value`, delta, OData actions/functions, and cast endpoints.
diff --git a/tools/WrapperGenerator/SchemaProperties.cs b/tools/WrapperGenerator/SchemaProperties.cs
new file mode 100644
index 0000000000..f8b15322ce
--- /dev/null
+++ b/tools/WrapperGenerator/SchemaProperties.cs
@@ -0,0 +1,84 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using Microsoft.OpenApi;
+
+namespace WrapperGenerator;
+
+public sealed record CmdletProperty(string OpenApiName, string PascalName, string PsTypeName, bool IsArray);
+
+// Maps a body schema's top-level primitive properties onto cmdlet parameters. Deliberately
+// shallow, per team decision: nested complex properties (assignedLicenses, employeeOrgData,
+// and the like) are skipped rather than modeled. Two special cases: "id" is excluded because
+// the server assigns it, and passwordProfile is flagged separately via HasPasswordProfile
+// because creating a user requires it.
+public static class SchemaProperties
+{
+    public static IReadOnlyList<CmdletProperty> ExtractPrimitiveProperties(IOpenApiSchema schema)
+    {
+        ArgumentNullException.ThrowIfNull(schema);
+        var result = new List<CmdletProperty>();
+        var seen = new HashSet<string>(StringComparer.Ordinal);
+
+        void Walk(IOpenApiSchema s)
+        {
+            foreach (var inherited in s.AllOf ?? [])
+                Walk(inherited);
+
+            foreach (var (name, propSchema) in s.Properties ?? new Dictionary<string, IOpenApiSchema>())
+            {
+                if (IsProtocolOrServerManagedProperty(name, propSchema) || !seen.Add(name))
+                    continue;
+
+                if (IsPlainScalar(propSchema))
+                {
+                    result.Add(new CmdletProperty(name, name.ToFirstCharacterUpperCase(), MapPsType(propSchema.Type!.Value), IsArray: false));
+                }
+                else if (propSchema.Type == JsonSchemaType.Array && propSchema.Items is { } items && IsPlainScalar(items))
+                {
+                    result.Add(new CmdletProperty(name, name.ToFirstCharacterUpperCase(), MapPsType(items.Type!.Value) + "[]", IsArray: true));
+                }
+            }
+        }
+
+        Walk(schema);
+        return result;
+    }
+
+    // passwordProfile is a nested complex type, so ExtractPrimitiveProperties skips it, but
+    // Graph requires it to create a user. This flag lets the emitter add the two flattened
+    // parameters (-Password, -ForceChangePasswordNextSignIn) that make New-MgUser usable.
+    public static bool HasPasswordProfile(IOpenApiSchema schema)
+    {
+        ArgumentNullException.ThrowIfNull(schema);
+        if (schema.Properties?.ContainsKey("passwordProfile") ?? false)
+            return true;
+        return schema.AllOf?.Any(HasPasswordProfile) ?? false;
+    }
+
+    // A "format" on a string (date-time, uuid, byte, ...) means Kiota maps it to a non-string
+    // CLR type, and an enum-valued string becomes a real enum type. Both are left out rather
+    // than guessing Kiota's mapping and risking a type mismatch. Schema.Type is a flags enum
+    // and nullable unions set the Null bit, so it is masked off before comparing.
+    private static bool IsPlainScalar(IOpenApiSchema schema) => (schema.Type & ~JsonSchemaType.Null) switch
+    {
+        JsonSchemaType.String => string.IsNullOrEmpty(schema.Format) && (schema.Enum?.Count ?? 0) == 0,
+        JsonSchemaType.Boolean or JsonSchemaType.Integer or JsonSchemaType.Number => true,
+        _ => false,
+    };
+
+    private static string MapPsType(JsonSchemaType openApiType) => (openApiType & ~JsonSchemaType.Null) switch
+    {
+        JsonSchemaType.String => "string",
+        JsonSchemaType.Boolean => "bool",
+        JsonSchemaType.Integer or JsonSchemaType.Number => "int",
+        _ => "string",
+    };
+
+    // Excludes properties a caller cannot or should not set. "id" is server-assigned.
+    // "@"-prefixed names like "@odata.type" are OData control data that Kiota's serializer
+    // fills in from the model type, and they are not legal C# identifiers anyway. ReadOnly is
+    // the general OpenAPI signal for server-managed. Future exclusions of this kind belong here.
+    private static bool IsProtocolOrServerManagedProperty(string name, IOpenApiSchema propSchema) =>
+        name == "id" || name.StartsWith('@') || propSchema.ReadOnly;
+}
diff --git a/tools/WrapperGenerator/Singularizer.cs b/tools/WrapperGenerator/Singularizer.cs
new file mode 100644
index 0000000000..c00957ecc8
--- /dev/null
+++ b/tools/WrapperGenerator/Singularizer.cs
@@ -0,0 +1,115 @@
+using System;
+using System.Collections.Generic;
+using System.Text;
+using System.Text.RegularExpressions;
+
+namespace WrapperGenerator;
+
+// Singularizes path segments so cmdlet nouns match the published Microsoft.Graph names.
+//
+// This is not a general English inflector. The vocabulary is the finite set of Graph path
+// segments, and every rule exists because a shipping cmdlet needs it. The README in this
+// folder lists each rule with the cmdlet that proves it.
+//
+// One behavior matters most: the published SDK singularizes every camel-case word in a
+// segment, not just the last one. "termsAndConditions" ships as TermAndCondition and
+// "onPremisesSynchronization" as OnPremiseSynchronization. SingularizeSegment does the same:
+// it splits a segment into words and runs the rules on each word.
+public static partial class Singularizer
+{
+    // Irregular plurals the SDK singularizes: Get-MgDriveItemChild, Get-MgUserPerson.
+    private static readonly Dictionary<string, string> Irregulars = new(StringComparer.Ordinal)
+    {
+        ["Children"] = "Child",
+        ["People"] = "Person",
+    };
+
+    // Words that end in "s" but are not plurals. The SDK keeps them as-is:
+    // /users/{id}/settings/windows ships as Get-MgUserSettingWindows.
+    private static readonly HashSet<string> Invariants = new(StringComparer.Ordinal)
+    {
+        "Windows",
+    };
+
+    // Splits Pascal or camel text into words. Handles acronym runs ("OS" in "MacOSDmgApp"),
+    // trailing digits ("Win32"), and a leading lowercase word.
+    [GeneratedRegex("[A-Z]+(?![a-z])|[A-Z][a-z0-9]*|[a-z0-9]+")]
+    private static partial Regex WordRegex();
+
+    // Segments with a version tag: "alerts_v2" must become "AlertV2" (Get-MgSecurityAlertV2).
+    // Underscores are not legal in a cmdlet noun anyway.
+    [GeneratedRegex(@"^(?<stem>.+)_[vV](?<version>\d+)$")]
+    private static partial Regex VersionTagRegex();
+
+    // Singularizes one already-Pascal-cased path segment, word by word.
+    public static string SingularizeSegment(string pascalSegment)
+    {
+        ArgumentNullException.ThrowIfNull(pascalSegment);
+
+        var versionTag = VersionTagRegex().Match(pascalSegment);
+        if (versionTag.Success)
+            return SingularizeSegment(versionTag.Groups["stem"].Value) + "V" + versionTag.Groups["version"].Value;
+
+        var result = new StringBuilder(pascalSegment.Length);
+        foreach (Match word in WordRegex().Matches(pascalSegment))
+            result.Append(SingularizeWord(word.Value));
+        return result.ToString();
+    }
+
+    // Returns the last camel-case word of a noun part: "Workflow" for "LifecycleWorkflow".
+    // BuildNounFromPath uses this to spot a word repeated across a segment boundary.
+    public static string TrailingWord(string pascalText)
+    {
+        ArgumentNullException.ThrowIfNull(pascalText);
+        var matches = WordRegex().Matches(pascalText);
+        return matches.Count > 0 ? matches[^1].Value : pascalText;
+    }
+
+    // Ordered rules; first match wins, so the order is part of the algorithm. The README's
+    // rule table gives the shipping cmdlet behind each rule.
+    public static string SingularizeWord(string word)
+    {
+        ArgumentNullException.ThrowIfNull(word);
+        if (word.Length < 3)
+            return word;
+        if (IsAllUpper(word))
+            return word; // acronyms ("OS", "SMS") are never plural forms
+        if (Irregulars.TryGetValue(word, out var irregular))
+            return irregular;
+        if (Invariants.Contains(word))
+            return word;
+        if (word.EndsWith("ies", StringComparison.Ordinal) && word.Length > 3)
+            return word[..^3] + "y";                                   // Policies -> Policy
+        if (word.EndsWith("uses", StringComparison.Ordinal) && word.Length > 4)
+            return word[..^2];                                         // Statuses -> Status
+        if (EndsWithSibilantEs(word))
+            return word[..^2];                                         // Businesses -> Business, Mailboxes -> Mailbox
+        if (word.EndsWith("ss", StringComparison.Ordinal) || word.EndsWith("us", StringComparison.Ordinal) || word.EndsWith("is", StringComparison.Ordinal))
+            return word;                                               // Access, Status, Analysis stay put
+        if (word.EndsWith('s'))
+            return word[..^1];                                         // Messages -> Message, Plans -> Plan
+        return word;
+    }
+
+    private static bool EndsWithSibilantEs(string word)
+    {
+        if (!word.EndsWith("es", StringComparison.Ordinal) || word.Length < 4)
+            return false;
+        var stem = word[..^2];
+        return stem.EndsWith('x')
+            || stem.EndsWith('z')
+            || stem.EndsWith("ch", StringComparison.Ordinal)
+            || stem.EndsWith("sh", StringComparison.Ordinal)
+            || stem.EndsWith("ss", StringComparison.Ordinal);
+    }
+
+    private static bool IsAllUpper(string word)
+    {
+        foreach (var c in word)
+        {
+            if (char.IsLower(c))
+                return false;
+        }
+        return true;
+    }
+}
diff --git a/tools/WrapperGenerator/WrapperGenerator.csproj b/tools/WrapperGenerator/WrapperGenerator.csproj
new file mode 100644
index 0000000000..ee22043de8
--- /dev/null
+++ b/tools/WrapperGenerator/WrapperGenerator.csproj
@@ -0,0 +1,23 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net10.0</TargetFramework>
+    <ImplicitUsings>disable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <LangVersion>latest</LangVersion>
+    <AssemblyName>WrapperGenerator</AssemblyName>
+    <RootNamespace>WrapperGenerator</RootNamespace>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <!-- Microsoft.OpenApi reads the spec; YamlReader is required for the .yml specs.
+         Microsoft.Extensions.Logging.Abstractions supplies ILogger and the [LoggerMessage] source
+         generator the generation service uses. -->
+    <PackageReference Include="Microsoft.OpenApi" Version="3.7.0" />
+    <PackageReference Include="Microsoft.OpenApi.YamlReader" Version="3.7.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="9.0.0" />
+  </ItemGroup>
+
+</Project>