From 7935205fba5e783d9e74b087740f28b653d4fc33 Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Tue, 12 May 2026 23:31:41 +0300
Subject: [PATCH] Schema sync 2026-05-12 from 1.4.563.0

---
 schemas/beta-Bleu.csdl     | 272 +++++++++++++++++++++++++++++++++++++
 schemas/beta-Fairfax.csdl  |  12 ++
 schemas/beta-Prod.csdl     |  52 +++++++
 schemas/v1.0-Bleu.csdl     | 127 ++++++++++++++++-
 schemas/v1.0-Delos.csdl    |  70 +++++++++-
 schemas/v1.0-Fairfax.csdl  |  55 +++++++-
 schemas/v1.0-GovSG.csdl    |  50 ++++++-
 schemas/v1.0-Mooncake.csdl |  55 +++++++-
 schemas/v1.0-Prod.csdl     |  50 ++++++-
 schemas/v1.0-USNat.csdl    |  62 ++++++++-
 schemas/v1.0-USSec.csdl    |  62 ++++++++-
 11 files changed, 845 insertions(+), 22 deletions(-)

diff --git a/schemas/beta-Bleu.csdl b/schemas/beta-Bleu.csdl
index d7325d12..75c75320 100644
--- a/schemas/beta-Bleu.csdl
+++ b/schemas/beta-Bleu.csdl
@@ -6,12 +6,18 @@
         <Member Name="target" Value="1" />
         <Member Name="createdBy" Value="2" />
         <Member Name="unknownFutureValue" Value="99" />
+        <Member Name="targetManager" Value="100" />
+        <Member Name="targetAgentIdentitySponsorOrOwner" Value="101" />
       </EnumType>
       <EnumType Name="accessPackageAssignmentRequestFilterByCurrentUserOptions">
         <Member Name="target" Value="1" />
         <Member Name="createdBy" Value="2" />
         <Member Name="approver" Value="3" />
         <Member Name="unknownFutureValue" Value="99" />
+        <Member Name="targetOrRequestor" Value="100" />
+        <Member Name="targetManager" Value="101" />
+        <Member Name="requestForOthers" Value="102" />
+        <Member Name="targetAgentIdentitySponsorOrOwner" Value="103" />
       </EnumType>
       <EnumType Name="accessPackageCustomExtensionHandlerStatus">
         <Member Name="requestSent" Value="1" />
@@ -31,6 +37,24 @@
         <Member Name="allowedRequestor" Value="1" />
         <Member Name="unknownFutureValue" Value="99" />
       </EnumType>
+      <EnumType Name="accessPackageSubjectLifecycle">
+        <Member Name="notDefined" Value="0" />
+        <Member Name="notGoverned" Value="1" />
+        <Member Name="governed" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
+      <EnumType Name="accessPackageSuggestionFilterByCurrentUserOptions" IsFlags="true">
+        <Member Name="none" Value="0" />
+        <Member Name="relatedPeopleAssignments" Value="1" />
+        <Member Name="assignmentHistory" Value="2" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
+      <EnumType Name="accessPackageSuggestionRelatedPeopleInsightLevel">
+        <Member Name="disabled" Value="0" />
+        <Member Name="count" Value="1" />
+        <Member Name="countAndNames" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="accessReviewHistoryDecisionFilter">
         <Member Name="approve" Value="0" />
         <Member Name="deny" Value="1" />
@@ -723,6 +747,12 @@
         <Member Name="approver" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="approverInformationVisibility">
+        <Member Name="default" Value="0" />
+        <Member Name="notVisible" Value="1" />
+        <Member Name="visible" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="appVulnerabilityTaskMitigationType">
         <Member Name="unknown" Value="0" />
         <Member Name="update" Value="1" />
@@ -1659,6 +1689,11 @@
         <Member Name="active" Value="0" />
         <Member Name="inactive" Value="1" />
       </EnumType>
+      <EnumType Name="connectorType">
+        <Member Name="sapIag" Value="0" />
+        <Member Name="sapAc" Value="1" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="consentRequestFilterByCurrentUserOptions">
         <Member Name="reviewer" Value="0" />
         <Member Name="unknownFutureValue" Value="1" />
@@ -4746,6 +4781,11 @@
         <Member Name="member" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="privilegeLevel">
+        <Member Name="standard" Value="0" />
+        <Member Name="privileged" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="privilegeManagementElevationType">
         <Member Name="undetermined" Value="0" />
         <Member Name="unmanagedElevation" Value="1" />
@@ -4834,6 +4874,13 @@
         <Member Name="export" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="purviewInsiderRiskManagementLevel">
+        <Member Name="none" Value="0" />
+        <Member Name="minor" Value="1" />
+        <Member Name="moderate" Value="2" />
+        <Member Name="elevated" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
       <EnumType Name="quarantineReason">
         <Member Name="EncounteredBaseEscrowThreshold" Value="0" />
         <Member Name="EncounteredTotalEscrowThreshold" Value="1" />
@@ -5391,6 +5438,13 @@
         <Member Name="approver" Value="3" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="roleType">
+        <Member Name="active" Value="0" />
+        <Member Name="eligible" Value="1" />
+        <Member Name="application" Value="2" />
+        <Member Name="delegated" Value="3" />
+        <Member Name="unknownFutureValue" Value="99" />
+      </EnumType>
       <EnumType Name="rootDomains">
         <Member Name="none" Value="0" />
         <Member Name="all" Value="1" />
@@ -5734,6 +5788,10 @@
         <Member Name="expert" Value="4" />
         <Member Name="unknownFutureValue" Value="5" />
       </EnumType>
+      <EnumType Name="socialIdentitySourceType">
+        <Member Name="facebook" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="stateManagementSetting">
         <Member Name="notConfigured" Value="0" />
         <Member Name="blocked" Value="1" />
@@ -7268,6 +7326,17 @@
       <ComplexType Name="accessPackageAnswerString" BaseType="graph.accessPackageAnswer">
         <Property Name="value" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="accessPackageApprovalStage">
+        <Property Name="approverInformationVisibility" Type="graph.approverInformationVisibility" Nullable="false" />
+        <Property Name="durationBeforeAutomaticDenial" Type="Edm.Duration" />
+        <Property Name="durationBeforeEscalation" Type="Edm.Duration" />
+        <Property Name="escalationApprovers" Type="Collection(graph.subjectSet)" />
+        <Property Name="fallbackEscalationApprovers" Type="Collection(graph.subjectSet)" />
+        <Property Name="fallbackPrimaryApprovers" Type="Collection(graph.subjectSet)" />
+        <Property Name="isApproverJustificationRequired" Type="Edm.Boolean" />
+        <Property Name="isEscalationEnabled" Type="Edm.Boolean" />
+        <Property Name="primaryApprovers" Type="Collection(graph.subjectSet)" />
+      </ComplexType>
       <ComplexType Name="accessPackageAssignmentRequestCallbackData" BaseType="graph.customExtensionData">
         <Property Name="customExtensionStageInstanceDetail" Type="Edm.String" />
         <Property Name="customExtensionStageInstanceId" Type="Edm.String" />
@@ -7285,6 +7354,10 @@
         <Property Name="policyId" Type="Edm.String" />
         <Property Name="questions" Type="Collection(graph.accessPackageQuestion)" />
         <Property Name="schedule" Type="graph.requestSchedule" />
+        <Property Name="verifiableCredentialRequirementStatus" Type="graph.verifiableCredentialRequirementStatus" />
+      </ComplexType>
+      <ComplexType Name="accessPackageDynamicApprovalStage" BaseType="graph.approvalStage">
+        <NavigationProperty Name="customExtension" Type="graph.customCalloutExtension" />
       </ComplexType>
       <ComplexType Name="accessPackageLocalizedContent">
         <Property Name="defaultText" Type="Edm.String" />
@@ -7298,25 +7371,42 @@
         <Property Name="allowsMultipleSelection" Type="Edm.Boolean" />
         <Property Name="choices" Type="Collection(graph.accessPackageAnswerChoice)" />
       </ComplexType>
+      <ComplexType Name="accessPackageNotificationSettings">
+        <Property Name="isAssignmentNotificationDisabled" Type="Edm.Boolean" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="accessPackageQuestion" Abstract="true">
         <Property Name="id" Type="Edm.String" />
+        <Property Name="isAnswerEditable" Type="Edm.Boolean" />
         <Property Name="isRequired" Type="Edm.Boolean" />
         <Property Name="sequence" Type="Edm.Int32" />
         <Property Name="text" Type="graph.accessPackageLocalizedContent" />
       </ComplexType>
+      <ComplexType Name="accessPackageRequestApprovalStageCallbackConfiguration" BaseType="graph.customExtensionCallbackConfiguration" />
       <ComplexType Name="accessPackageResourceAttribute">
         <Property Name="attributeDestination" Type="graph.accessPackageResourceAttributeDestination" />
         <Property Name="attributeName" Type="Edm.String" />
         <Property Name="attributeSource" Type="graph.accessPackageResourceAttributeSource" />
         <Property Name="id" Type="Edm.String" />
+        <Property Name="isEditable" Type="Edm.Boolean" />
+        <Property Name="isPersistedOnAssignmentRemoval" Type="Edm.Boolean" />
       </ComplexType>
       <ComplexType Name="accessPackageResourceAttributeDestination" Abstract="true" />
       <ComplexType Name="accessPackageResourceAttributeQuestion" BaseType="graph.accessPackageResourceAttributeSource">
         <Property Name="question" Type="graph.accessPackageQuestion" />
       </ComplexType>
       <ComplexType Name="accessPackageResourceAttributeSource" Abstract="true" />
+      <ComplexType Name="accessPackageSuggestionReason" Abstract="true" />
+      <ComplexType Name="accessPackageSuggestionRelatedPeopleBased" BaseType="graph.accessPackageSuggestionReason">
+        <Property Name="relatedPeople" Type="Collection(graph.identity)" Nullable="false" />
+        <Property Name="relatedPeopleAssignmentCount" Type="Edm.Int32" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="accessPackageSuggestionSelfAssignmentHistoryBased" BaseType="graph.accessPackageSuggestionReason">
+        <Property Name="lastAssignmentDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="pastAssigmentCount" Type="Edm.Int32" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="accessPackageTextInputQuestion" BaseType="graph.accessPackageQuestion">
         <Property Name="isSingleLineQuestion" Type="Edm.Boolean" />
+        <Property Name="regexPattern" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="accessPackageUserDirectoryAttributeStore" BaseType="graph.accessPackageResourceAttributeDestination" />
       <ComplexType Name="accessReviewAccessPackageAssignmentPolicyScope" BaseType="graph.accessReviewResourceScope">
@@ -7776,6 +7866,10 @@
         <Property Name="isEscalationEnabled" Type="Edm.Boolean" />
         <Property Name="primaryApprovers" Type="Collection(graph.userSet)" />
       </ComplexType>
+      <ComplexType Name="approverDelegate">
+        <Property Name="delegate" Type="graph.userSet" />
+        <Property Name="schedule" Type="graph.requestSchedule" />
+      </ComplexType>
       <ComplexType Name="assignedLabel">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="labelId" Type="Edm.String" />
@@ -7833,10 +7927,14 @@
       <ComplexType Name="assignmentFilterValidationResult">
         <Property Name="isValidRule" Type="Edm.Boolean" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="assignmentRequestApprovalStageCallbackData" BaseType="graph.accessPackageAssignmentRequestCallbackData">
+        <Property Name="approvalStage" Type="graph.accessPackageApprovalStage" />
+      </ComplexType>
       <ComplexType Name="assignmentReviewSettings">
         <Property Name="accessReviewTimeoutBehavior" Type="graph.accessReviewTimeoutBehavior" />
         <Property Name="durationInDays" Type="Edm.Int32" />
         <Property Name="isAccessRecommendationEnabled" Type="Edm.Boolean" />
+        <Property Name="isAgenticExperienceEnabled" Type="Edm.Boolean" />
         <Property Name="isApprovalJustificationRequired" Type="Edm.Boolean" />
         <Property Name="isEnabled" Type="Edm.Boolean" />
         <Property Name="recurrenceType" Type="Edm.String" />
@@ -7897,6 +7995,10 @@
         <Property Name="parameters" Type="Collection(graph.stringKeyAttributeMappingSourceValuePair)" />
         <Property Name="type" Type="graph.attributeMappingSourceType" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="attributeRuleMembers" BaseType="graph.userSet">
+        <Property Name="description" Type="Edm.String" />
+        <Property Name="membershipRule" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="audio">
         <Property Name="album" Type="Edm.String" />
         <Property Name="albumArtist" Type="Edm.String" />
@@ -9667,6 +9769,14 @@
         <Property Name="issuerUri" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="externalSponsors" BaseType="graph.userSet" />
+      <ComplexType Name="externalTokenBasedSapIagConnectionInfo" BaseType="graph.connectionInfo">
+        <Property Name="accessTokenUrl" Type="Edm.String" />
+        <Property Name="clientId" Type="Edm.String" />
+        <Property Name="keyVaultName" Type="Edm.String" />
+        <Property Name="resourceGroup" Type="Edm.String" />
+        <Property Name="secretName" Type="Edm.String" />
+        <Property Name="subscriptionId" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="extractSensitivityLabelsResult">
         <Property Name="labels" Type="Collection(graph.sensitivityLabelAssignment)" />
       </ComplexType>
@@ -9922,6 +10032,9 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="identityGovernanceUserSettings">
+        <Property Name="approverDelegate" Type="graph.approverDelegate" />
+      </ComplexType>
       <ComplexType Name="identityInput">
         <Property Name="alias" Type="Edm.String" />
         <Property Name="email" Type="Edm.String" />
@@ -11803,6 +11916,14 @@
         <Property Name="state" Type="graph.advancedConfigState" Nullable="false" />
         <Property Name="voiceReportingCode" Type="Edm.Int32" />
       </ComplexType>
+      <ComplexType Name="requestActivity">
+        <Property Name="action" Type="Edm.String" />
+        <Property Name="actionDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="detail" Type="Edm.String" />
+        <Property Name="scheduledDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="userDisplayName" Type="Edm.String" />
+        <Property Name="userPrincipalName" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="requestorManager" BaseType="graph.userSet">
         <Property Name="managerLevel" Type="Edm.Int32" />
       </ComplexType>
@@ -12247,6 +12368,10 @@
         <Property Name="maximumSize" Type="Edm.Int32" />
         <Property Name="minimumSize" Type="Edm.Int32" />
       </ComplexType>
+      <ComplexType Name="socialIdentitySource" BaseType="graph.identitySource">
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="socialIdentitySourceType" Type="graph.socialIdentitySourceType" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="spaApplication">
         <Property Name="redirectUris" Type="Collection(Edm.String)" Nullable="false" />
       </ComplexType>
@@ -12295,6 +12420,7 @@
       <ComplexType Name="strongAuthenticationRequirements">
         <Property Name="perUserMfaState" Type="graph.perUserMfaState" />
       </ComplexType>
+      <ComplexType Name="subjectSet" Abstract="true" />
       <ComplexType Name="suggestedEnrollmentLimit">
         <Property Name="suggestedDailyLimit" Type="Edm.Int32" Nullable="false" />
       </ComplexType>
@@ -12402,6 +12528,7 @@
         <Property Name="initiator" Type="graph.identitySet" />
         <Property Name="tabId" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="targetAgentIdentitySponsorsOrOwners" BaseType="graph.userSet" />
       <ComplexType Name="targetResource">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="groupType" Type="graph.groupType" />
@@ -13777,12 +13904,27 @@
         <Property Name="isRoleScopesVisible" Type="Edm.Boolean" />
         <Property Name="modifiedBy" Type="Edm.String" />
         <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="uniqueName" Type="Edm.String" />
         <NavigationProperty Name="accessPackageAssignmentPolicies" Type="Collection(graph.accessPackageAssignmentPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackageCatalog" Type="graph.accessPackageCatalog" />
         <NavigationProperty Name="accessPackageResourceRoleScopes" Type="Collection(graph.accessPackageResourceRoleScope)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackagesIncompatibleWith" Type="Collection(graph.accessPackage)" />
         <NavigationProperty Name="incompatibleAccessPackages" Type="Collection(graph.accessPackage)" />
         <NavigationProperty Name="incompatibleGroups" Type="Collection(graph.group)" ContainsTarget="true" />
+        <Annotation Term="Org.OData.Core.V1.AlternateKeys">
+          <Collection>
+            <Record Type="Org.OData.Core.V1.AlternateKey">
+              <PropertyValue Property="Key">
+                <Collection>
+                  <Record Type="Org.OData.Core.V1.PropertyRef">
+                    <PropertyValue Property="Alias" String="uniqueName" />
+                    <PropertyValue Property="Name" PropertyPath="uniqueName" />
+                  </Record>
+                </Collection>
+              </PropertyValue>
+            </Record>
+          </Collection>
+        </Annotation>
       </EntityType>
       <EntityType Name="accessPackageAssignment" BaseType="graph.entity">
         <Property Name="accessPackageId" Type="Edm.String" />
@@ -13803,6 +13945,7 @@
       </EntityType>
       <EntityType Name="accessPackageAssignmentPolicy" BaseType="graph.entity">
         <Property Name="accessPackageId" Type="Edm.String" />
+        <Property Name="accessPackageNotificationSettings" Type="graph.accessPackageNotificationSettings" />
         <Property Name="accessReviewSettings" Type="graph.assignmentReviewSettings" />
         <Property Name="canExtend" Type="Edm.Boolean" />
         <Property Name="createdBy" Type="Edm.String" />
@@ -13829,6 +13972,7 @@
         <Property Name="customExtensionCalloutInstances" Type="Collection(graph.customExtensionCalloutInstance)" />
         <Property Name="customExtensionHandlerInstances" Type="Collection(graph.customExtensionHandlerInstance)" />
         <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="history" Type="Collection(graph.requestActivity)" />
         <Property Name="isValidationOnly" Type="Edm.Boolean" />
         <Property Name="justification" Type="Edm.String" />
         <Property Name="requestState" Type="Edm.String" />
@@ -13873,12 +14017,28 @@
         <Property Name="isExternallyVisible" Type="Edm.Boolean" />
         <Property Name="modifiedBy" Type="Edm.String" />
         <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="privilegeLevel" Type="graph.privilegeLevel" Nullable="false" />
+        <Property Name="uniqueName" Type="Edm.String" />
         <NavigationProperty Name="accessPackageCustomWorkflowExtensions" Type="Collection(graph.customCalloutExtension)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackageResourceRoles" Type="Collection(graph.accessPackageResourceRole)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackageResources" Type="Collection(graph.accessPackageResource)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackageResourceScopes" Type="Collection(graph.accessPackageResourceScope)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackages" Type="Collection(graph.accessPackage)" ContainsTarget="true" />
         <NavigationProperty Name="customAccessPackageWorkflowExtensions" Type="Collection(graph.customAccessPackageWorkflowExtension)" ContainsTarget="true" />
+        <Annotation Term="Org.OData.Core.V1.AlternateKeys">
+          <Collection>
+            <Record Type="Org.OData.Core.V1.AlternateKey">
+              <PropertyValue Property="Key">
+                <Collection>
+                  <Record Type="Org.OData.Core.V1.PropertyRef">
+                    <PropertyValue Property="Alias" String="uniqueName" />
+                    <PropertyValue Property="Name" PropertyPath="uniqueName" />
+                  </Record>
+                </Collection>
+              </PropertyValue>
+            </Record>
+          </Collection>
+        </Annotation>
       </EntityType>
       <EntityType Name="accessPackageResource" BaseType="graph.entity">
         <Property Name="addedBy" Type="Edm.String" />
@@ -13894,6 +14054,7 @@
         <NavigationProperty Name="accessPackageResourceEnvironment" Type="graph.accessPackageResourceEnvironment" />
         <NavigationProperty Name="accessPackageResourceRoles" Type="Collection(graph.accessPackageResourceRole)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackageResourceScopes" Type="Collection(graph.accessPackageResourceScope)" ContainsTarget="true" />
+        <NavigationProperty Name="externalOriginResourceConnector" Type="graph.externalOriginResourceConnector" />
       </EntityType>
       <EntityType Name="accessPackageResourceEnvironment" BaseType="graph.entity">
         <Property Name="connectionInfo" Type="graph.connectionInfo" />
@@ -13925,6 +14086,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="originId" Type="Edm.String" />
         <Property Name="originSystem" Type="Edm.String" />
+        <Property Name="type" Type="graph.roleType" />
         <NavigationProperty Name="accessPackageResource" Type="graph.accessPackageResource" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="accessPackageResourceRoleScope" BaseType="graph.entity">
@@ -13954,8 +14116,27 @@
         <Property Name="objectId" Type="Edm.String" />
         <Property Name="onPremisesSecurityIdentifier" Type="Edm.String" />
         <Property Name="principalName" Type="Edm.String" />
+        <Property Name="subjectLifecycle" Type="graph.accessPackageSubjectLifecycle" />
         <Property Name="type" Type="Edm.String" />
         <NavigationProperty Name="connectedOrganization" Type="graph.connectedOrganization" />
+        <Annotation Term="Org.OData.Core.V1.AlternateKeys">
+          <Collection>
+            <Record Type="Org.OData.Core.V1.AlternateKey">
+              <PropertyValue Property="Key">
+                <Collection>
+                  <Record Type="Org.OData.Core.V1.PropertyRef">
+                    <PropertyValue Property="Alias" String="objectId" />
+                    <PropertyValue Property="Name" PropertyPath="objectId" />
+                  </Record>
+                </Collection>
+              </PropertyValue>
+            </Record>
+          </Collection>
+        </Annotation>
+      </EntityType>
+      <EntityType Name="accessPackageSuggestion" BaseType="graph.entity">
+        <Property Name="reasons" Type="Collection(graph.accessPackageSuggestionReason)" Nullable="false" />
+        <NavigationProperty Name="accessPackage" Type="graph.availableAccessPackage" />
       </EntityType>
       <EntityType Name="accessReview" BaseType="graph.entity">
         <Property Name="businessFlowTemplateId" Type="Edm.String" Nullable="false" />
@@ -15628,6 +15809,11 @@
         <Property Name="guestUserRoleId" Type="Edm.Guid" />
         <Property Name="permissionGrantPolicyIdsAssignedToDefaultUserRole" Type="Collection(Edm.String)" />
       </EntityType>
+      <EntityType Name="availableAccessPackage" BaseType="graph.entity">
+        <Property Name="description" Type="Edm.String" />
+        <Property Name="displayName" Type="Edm.String" />
+        <NavigationProperty Name="resourceRoleScopes" Type="Collection(graph.accessPackageResourceRoleScope)" />
+      </EntityType>
       <EntityType Name="azureADAuthentication" BaseType="graph.entity">
         <Property Name="attainments" Type="Collection(graph.serviceLevelAgreementAttainment)" Nullable="false" />
       </EntityType>
@@ -16225,6 +16411,13 @@
         <Property Name="defaultDomainName" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
       </EntityType>
+      <EntityType Name="controlConfiguration" BaseType="graph.entity" Abstract="true">
+        <Property Name="createdBy" Type="Edm.String" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="isEnabled" Type="Edm.Boolean" />
+        <Property Name="modifiedBy" Type="Edm.String" />
+        <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+      </EntityType>
       <EntityType Name="conversation" BaseType="graph.entity">
         <Property Name="hasAttachments" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastDeliveredDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
@@ -16323,6 +16516,9 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="endpointConfiguration" Type="graph.customExtensionEndpointConfiguration" />
       </EntityType>
+      <EntityType Name="customDataProvidedResource" BaseType="graph.accessPackageResource">
+        <Property Name="notificationEndpointConfiguration" Type="graph.customExtensionEndpointConfiguration" />
+      </EntityType>
       <EntityType Name="customExtensionHandler" BaseType="graph.entity">
         <Property Name="stage" Type="graph.accessPackageCustomExtensionStage" />
         <NavigationProperty Name="customExtension" Type="graph.customAccessPackageWorkflowExtension" />
@@ -18090,6 +18286,10 @@
         <Property Name="licenseType" Type="graph.licenseType" Nullable="false" />
         <Property Name="onboardedToMicrosoftManagedPlatform" Type="Edm.Boolean" Nullable="false" />
       </EntityType>
+      <EntityType Name="endUserSettings" BaseType="graph.controlConfiguration">
+        <Property Name="relatedPeopleInsightLevel" Type="graph.accessPackageSuggestionRelatedPeopleInsightLevel" />
+        <Property Name="showApproverDetailsToMembers" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="enrollmentConfigurationAssignment" BaseType="graph.entity">
         <Property Name="source" Type="graph.deviceAndAppManagementAssignmentSource" Nullable="false" />
         <Property Name="sourceId" Type="Edm.String" />
@@ -18139,8 +18339,14 @@
         <NavigationProperty Name="accessPackageResourceRoleScopes" Type="Collection(graph.accessPackageResourceRoleScope)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackageResources" Type="Collection(graph.accessPackageResource)" ContainsTarget="true" />
         <NavigationProperty Name="accessPackages" Type="Collection(graph.accessPackage)" ContainsTarget="true" />
+        <NavigationProperty Name="accessPackageSuggestions" Type="Collection(graph.accessPackageSuggestion)" ContainsTarget="true" />
+        <NavigationProperty Name="assignmentRequests" Type="Collection(graph.accessPackageAssignmentRequest)" ContainsTarget="true" />
+        <NavigationProperty Name="availableAccessPackages" Type="Collection(graph.availableAccessPackage)" ContainsTarget="true" />
         <NavigationProperty Name="connectedOrganizations" Type="Collection(graph.connectedOrganization)" ContainsTarget="true" />
+        <NavigationProperty Name="controlConfigurations" Type="Collection(graph.controlConfiguration)" ContainsTarget="true" />
+        <NavigationProperty Name="externalOriginResourceConnectors" Type="Collection(graph.externalOriginResourceConnector)" ContainsTarget="true" />
         <NavigationProperty Name="settings" Type="graph.entitlementManagementSettings" ContainsTarget="true" />
+        <NavigationProperty Name="subjects" Type="Collection(graph.accessPackageSubject)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="entitlementManagementSettings" BaseType="graph.entity">
         <Property Name="daysUntilExternalUserDeletedAfterBlocked" Type="Edm.Int32" />
@@ -18153,6 +18359,10 @@
         <Property Name="id" Type="Edm.String" Nullable="false" />
       </EntityType>
       <EntityType Name="entra" BaseType="graph.entity" />
+      <EntityType Name="entraIdProtectionRiskyUserApproval" BaseType="graph.controlConfiguration">
+        <Property Name="isApprovalRequired" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="minimumRiskLevel" Type="graph.riskLevel" Nullable="false" />
+      </EntityType>
       <EntityType Name="event" BaseType="graph.outlookItem" OpenType="true">
         <Property Name="allowNewTimeProposals" Type="Edm.Boolean" />
         <Property Name="attendees" Type="Collection(graph.attendee)" />
@@ -18234,6 +18444,16 @@
         <Property Name="allowDeletedIdentitiesDataRemoval" Type="Edm.Boolean" Nullable="false" />
         <Property Name="allowExternalIdentitiesToLeave" Type="Edm.Boolean" Nullable="false" />
       </EntityType>
+      <EntityType Name="externalOriginResourceConnector" BaseType="graph.entity">
+        <Property Name="connectionInfo" Type="graph.connectionInfo" Nullable="false" />
+        <Property Name="connectorType" Type="graph.connectorType" Nullable="false" />
+        <Property Name="createdBy" Type="Edm.String" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="description" Type="Edm.String" />
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="modifiedBy" Type="Edm.String" />
+        <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+      </EntityType>
       <EntityType Name="federatedIdentityCredential" BaseType="graph.entity">
         <Property Name="audiences" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="claimsMatchingExpression" Type="graph.federatedIdentityExpression" />
@@ -18736,6 +18956,8 @@
       <EntityType Name="identityGovernance">
         <NavigationProperty Name="accessReviews" Type="graph.accessReviewSet" ContainsTarget="true" />
         <NavigationProperty Name="appConsent" Type="graph.appConsentApprovalRoute" ContainsTarget="true" />
+        <NavigationProperty Name="catalogs" Type="Collection(graph.accessPackageCatalog)" ContainsTarget="true" />
+        <NavigationProperty Name="entitlementManagement" Type="graph.entitlementManagement" ContainsTarget="true" />
         <NavigationProperty Name="privilegedAccess" Type="graph.privilegedAccessRoot" ContainsTarget="true" />
         <NavigationProperty Name="roleManagementAlerts" Type="graph.roleManagementAlert" ContainsTarget="true" />
         <NavigationProperty Name="termsOfUse" Type="graph.termsOfUseContainer" ContainsTarget="true" />
@@ -18846,6 +19068,10 @@
         <Property Name="inheritableScopes" Type="graph.inheritableScopes" />
         <Property Name="resourceAppId" Type="Edm.String" Nullable="false" />
       </EntityType>
+      <EntityType Name="insiderRiskyUserApproval" BaseType="graph.controlConfiguration">
+        <Property Name="isApprovalRequired" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="minimumRiskLevel" Type="graph.purviewInsiderRiskManagementLevel" Nullable="false" />
+      </EntityType>
       <EntityType Name="insightsSettings" BaseType="graph.entity">
         <Property Name="disabledForGroup" Type="Edm.String" />
         <Property Name="isEnabledInOrganization" Type="Edm.Boolean" />
@@ -23258,6 +23484,7 @@
         <Property Name="givenName" Type="Edm.String" />
         <Property Name="hireDate" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="identities" Type="Collection(graph.objectIdentity)" />
+        <Property Name="identityGovernance" Type="graph.identityGovernanceUserSettings" />
         <Property Name="identityParentId" Type="Edm.String" />
         <Property Name="imAddresses" Type="Collection(Edm.String)" />
         <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
@@ -28412,6 +28639,9 @@
         <Parameter Name="scopeType" Type="Edm.String" Nullable="false" Unicode="false" />
         <Parameter Name="scopeId" Type="Edm.String" Nullable="false" Unicode="false" />
       </Action>
+      <Action Name="refresh" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.accessPackageResource" />
+      </Action>
       <Action Name="refresh" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.unifiedRoleManagementAlert" />
       </Action>
@@ -29685,6 +29915,11 @@
         <Parameter Name="on" Type="graph.accessPackageAssignmentRequestFilterByCurrentUserOptions" Nullable="false" />
         <ReturnType Type="Collection(graph.accessPackageAssignmentRequest)" />
       </Function>
+      <Function Name="filterByCurrentUser" IsBound="true">
+        <Parameter Name="bindingParameter" Type="Collection(graph.accessPackageSuggestion)" />
+        <Parameter Name="on" Type="graph.accessPackageSuggestionFilterByCurrentUserOptions" />
+        <ReturnType Type="Collection(graph.accessPackageSuggestion)" />
+      </Function>
       <Function Name="filterByCurrentUser" IsBound="true">
         <Parameter Name="bindingParameter" Type="Collection(graph.accessReviewInstance)" />
         <Parameter Name="on" Type="graph.accessReviewInstanceFilterByCurrentUserOptions" Nullable="false" />
@@ -38274,6 +38509,28 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.controlConfiguration">
+        <Annotation Term="Org.OData.Capabilities.V1.UpdateRestrictions">
+          <Record>
+            <PropertyValue Property="UpdateMethod">
+              <EnumMember>Org.OData.Capabilities.V1.HttpMethod/PUT</EnumMember>
+            </PropertyValue>
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Core.V1.Revisions">
+          <Collection>
+            <Record>
+              <PropertyValue Property="Date" Date="2024-09-27" />
+              <PropertyValue Property="Description" String="Controls configurations preview." />
+              <PropertyValue Property="Kind">
+                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
+              </PropertyValue>
+              <PropertyValue Property="RemovalDate" Date="2025-09-27" />
+              <PropertyValue Property="Version" String="PrivatePreview:ControlConfigurations" />
+            </Record>
+          </Collection>
+        </Annotation>
+      </Annotations>
       <Annotations Target="microsoft.graph.conversation/threads">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
           <Record>
@@ -47395,6 +47652,21 @@
       <Annotations Target="microsoft.graph.enterpriseCodeSigningCertificate/uploadDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date time of CodeSigning Cert when it is uploaded (using ISO 8601 format, in UTC time). Uploading a valid cert file through the Intune admin console will automatically populate this value in the HTTP response. Supports: $filter, $select, $top, $OrderBy, $skip. $Search is not supported." />
       </Annotations>
+      <Annotations Target="microsoft.graph.entitlementManagement/controlConfigurations">
+        <Annotation Term="Org.OData.Core.V1.Revisions">
+          <Collection>
+            <Record>
+              <PropertyValue Property="Date" Date="2024-08-01" />
+              <PropertyValue Property="Description" String="Controls preview." />
+              <PropertyValue Property="Kind">
+                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
+              </PropertyValue>
+              <PropertyValue Property="RemovalDate" Date="2025-08-01" />
+              <PropertyValue Property="Version" String="PrivatePreview:ControlConfigurations" />
+            </Record>
+          </Collection>
+        </Annotation>
+      </Annotations>
       <Annotations Target="microsoft.graph.errorCode/deleted">
         <Annotation Term="Org.OData.Core.V1.Description" String="The resource has been deleted." />
       </Annotations>
diff --git a/schemas/beta-Fairfax.csdl b/schemas/beta-Fairfax.csdl
index a952a02e..7a15ef3b 100644
--- a/schemas/beta-Fairfax.csdl
+++ b/schemas/beta-Fairfax.csdl
@@ -25800,6 +25800,7 @@
       <EntityType Name="peopleAdminSettings" BaseType="graph.entity">
         <NavigationProperty Name="itemInsights" Type="graph.insightsSettings" ContainsTarget="true" />
         <NavigationProperty Name="namePronunciation" Type="graph.namePronunciationSettings" ContainsTarget="true" />
+        <NavigationProperty Name="photoUpdateSettings" Type="graph.photoUpdateSettings" ContainsTarget="true" />
         <NavigationProperty Name="profileCardProperties" Type="Collection(graph.profileCardProperty)" ContainsTarget="true" />
         <NavigationProperty Name="profilePropertySettings" Type="Collection(graph.profilePropertySetting)" ContainsTarget="true" />
         <NavigationProperty Name="profileSources" Type="Collection(graph.profileSource)" ContainsTarget="true" />
@@ -25952,6 +25953,10 @@
       <EntityType Name="phoneUserConversationMember" BaseType="graph.conversationMember">
         <Property Name="phoneNumber" Type="Edm.String" />
       </EntityType>
+      <EntityType Name="photoUpdateSettings" BaseType="graph.entity">
+        <Property Name="allowedRoles" Type="Collection(Edm.String)" />
+        <Property Name="source" Type="graph.photoUpdateSource" Nullable="false" />
+      </EntityType>
       <EntityType Name="pinnedChatMessageInfo" BaseType="graph.entity">
         <NavigationProperty Name="message" Type="graph.chatMessage" />
       </EntityType>
@@ -71801,6 +71806,13 @@
       <Annotations Target="microsoft.graph.payloadCompatibleAssignmentFilter/payloadType">
         <Annotation Term="Org.OData.Core.V1.Description" String="PayloadType of the Assignment Filter." />
       </Annotations>
+      <Annotations Target="microsoft.graph.peopleAdminSettings/photoUpdateSettings">
+        <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
+          <Record>
+            <PropertyValue Property="Deletable" Bool="true" />
+          </Record>
+        </Annotation>
+      </Annotations>
       <Annotations Target="microsoft.graph.perfectForwardSecrecyGroup">
         <Annotation Term="Org.OData.Core.V1.Description" String="Forward Secrecy Group values for Windows10 VPN policies with IKEv2 connection type." />
       </Annotations>
diff --git a/schemas/beta-Prod.csdl b/schemas/beta-Prod.csdl
index 9fdf04dc..8db24478 100644
--- a/schemas/beta-Prod.csdl
+++ b/schemas/beta-Prod.csdl
@@ -89194,6 +89194,34 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.networkaccess.threatIntelligenceFqdnDestination">
+        <Annotation Term="Org.OData.Core.V1.Revisions">
+          <Collection>
+            <Record>
+              <PropertyValue Property="Date" Date="2026-04-26" />
+              <PropertyValue Property="Kind">
+                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
+              </PropertyValue>
+              <PropertyValue Property="RemovalDate" Date="2027-06-26" />
+              <PropertyValue Property="Version" String="2025-01/PrivatePreview:NetworkAccess" />
+            </Record>
+          </Collection>
+        </Annotation>
+      </Annotations>
+      <Annotations Target="microsoft.graph.networkaccess.threatIntelligenceMatchingConditions">
+        <Annotation Term="Org.OData.Core.V1.Revisions">
+          <Collection>
+            <Record>
+              <PropertyValue Property="Date" Date="2026-04-26" />
+              <PropertyValue Property="Kind">
+                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
+              </PropertyValue>
+              <PropertyValue Property="RemovalDate" Date="2027-06-26" />
+              <PropertyValue Property="Version" String="2025-01/PrivatePreview:NetworkAccess" />
+            </Record>
+          </Collection>
+        </Annotation>
+      </Annotations>
       <Annotations Target="microsoft.graph.networkaccess.tlsDetails">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -111815,6 +111843,12 @@
         <Parameter Name="bindingParameter" Type="microsoft.graph.networkaccess.reports" />
         <Parameter Name="startDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Parameter Name="endDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Parameter Name="aiAgentId" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
+        <Parameter Name="aiAgentName" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
         <ReturnType Type="Collection(microsoft.graph.networkaccess.destination)" />
       </Function>
       <Function Name="deviceReport" IsBound="true">
@@ -111827,6 +111861,15 @@
         <Parameter Name="applicationId" Type="Edm.String" Unicode="false">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
+        <Parameter Name="aiAgentId" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
+        <Parameter Name="aiAgentName" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
+        <Parameter Name="cloudApplicationName" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
         <ReturnType Type="Collection(microsoft.graph.networkaccess.device)" />
       </Function>
       <Function Name="entitiesSummaries" IsBound="true">
@@ -111948,6 +111991,15 @@
         <Parameter Name="applicationId" Type="Edm.String" Unicode="false">
           <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
         </Parameter>
+        <Parameter Name="aiAgentId" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
+        <Parameter Name="aiAgentName" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
+        <Parameter Name="cloudApplicationName" Type="Edm.String" Unicode="false">
+          <Annotation Term="Org.OData.Core.V1.OptionalParameter" />
+        </Parameter>
         <ReturnType Type="Collection(microsoft.graph.networkaccess.user)" />
       </Function>
       <Function Name="webCategoryReport" IsBound="true">
diff --git a/schemas/v1.0-Bleu.csdl b/schemas/v1.0-Bleu.csdl
index 176e006c..46336b9b 100644
--- a/schemas/v1.0-Bleu.csdl
+++ b/schemas/v1.0-Bleu.csdl
@@ -6,12 +6,18 @@
         <Member Name="target" Value="1" />
         <Member Name="createdBy" Value="2" />
         <Member Name="unknownFutureValue" Value="99" />
+        <Member Name="targetManager" Value="100" />
+        <Member Name="targetAgentIdentitySponsorOrOwner" Value="101" />
       </EnumType>
       <EnumType Name="accessPackageAssignmentRequestFilterByCurrentUserOptions">
         <Member Name="target" Value="1" />
         <Member Name="createdBy" Value="2" />
         <Member Name="approver" Value="3" />
         <Member Name="unknownFutureValue" Value="99" />
+        <Member Name="targetOrRequestor" Value="100" />
+        <Member Name="targetManager" Value="101" />
+        <Member Name="requestForOthers" Value="102" />
+        <Member Name="targetAgentIdentitySponsorOrOwner" Value="103" />
       </EnumType>
       <EnumType Name="accessPackageAssignmentState">
         <Member Name="delivering" Value="0" />
@@ -151,6 +157,7 @@
         <Member Name="allDirectoryServicePrincipals" Value="6" />
         <Member Name="allConfiguredConnectedOrganizationUsers" Value="7" />
         <Member Name="allExternalUsers" Value="8" />
+        <Member Name="allDirectoryAgentIdentities" Value="9" />
         <Member Name="unknownFutureValue" Value="10" />
       </EnumType>
       <EnumType Name="allowInvitesFrom">
@@ -256,6 +263,11 @@
         <Member Name="failed" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="appManagementRestrictionState">
+        <Member Name="enabled" Value="1" />
+        <Member Name="disabled" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="approvalFilterByCurrentUserOptions">
         <Member Name="target" Value="0" />
         <Member Name="createdBy" Value="1" />
@@ -654,6 +666,10 @@
         <Member Name="waitingForCallback" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="dayOfWeek">
         <Member Name="sunday" Value="0" />
         <Member Name="monday" Value="1" />
@@ -2157,6 +2173,10 @@
         <Member Name="mediumHigh" Value="4" />
         <Member Name="high" Value="5" />
       </EnumType>
+      <EnumType Name="socialIdentitySourceType">
+        <Member Name="facebook" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="stateManagementSetting">
         <Member Name="notConfigured" Value="0" />
         <Member Name="blocked" Value="1" />
@@ -2900,6 +2920,7 @@
       <ComplexType Name="accessPackageAssignmentApprovalSettings">
         <Property Name="isApprovalRequiredForAdd" Type="Edm.Boolean" />
         <Property Name="isApprovalRequiredForUpdate" Type="Edm.Boolean" />
+        <Property Name="isRequestorJustificationRequired" Type="Edm.Boolean" />
         <Property Name="stages" Type="Collection(graph.accessPackageApprovalStage)" />
       </ComplexType>
       <ComplexType Name="accessPackageAssignmentRequestCallbackData" BaseType="graph.customExtensionData">
@@ -2922,6 +2943,7 @@
         <Property Name="allowCustomAssignmentSchedule" Type="Edm.Boolean" />
         <Property Name="isApprovalRequiredForAdd" Type="Edm.Boolean" />
         <Property Name="isApprovalRequiredForUpdate" Type="Edm.Boolean" />
+        <Property Name="isRequestorJustificationRequired" Type="Edm.Boolean" />
         <Property Name="policyDescription" Type="Edm.String" />
         <Property Name="policyDisplayName" Type="Edm.String" />
         <Property Name="policyId" Type="Edm.String" />
@@ -2943,12 +2965,19 @@
         <Property Name="removeAccessWhenTargetLeavesAllowedTargets" Type="Edm.Boolean" />
         <Property Name="requestAccessForAllowedTargets" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="accessPackageDynamicApprovalStage" BaseType="graph.accessPackageApprovalStage" />
       <ComplexType Name="accessPackageLocalizedText">
         <Property Name="languageCode" Type="Edm.String" Nullable="false" />
         <Property Name="text" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="accessPackageNotificationSettings">
+        <Property Name="isAssignmentNotificationDisabled" Type="Edm.Boolean" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="accessPackageRequestApprovalStageCallbackConfiguration" BaseType="graph.customExtensionCallbackConfiguration" />
       <ComplexType Name="accessPackageResourceAttribute">
         <Property Name="destination" Type="graph.accessPackageResourceAttributeDestination" />
+        <Property Name="isEditable" Type="Edm.Boolean" />
+        <Property Name="isPersistedOnAssignmentRemoval" Type="Edm.Boolean" />
         <Property Name="name" Type="Edm.String" />
         <Property Name="source" Type="graph.accessPackageResourceAttributeSource" />
       </ComplexType>
@@ -3119,11 +3148,16 @@
         <Property Name="decryptionKey" Type="Edm.String" />
         <Property Name="downloadUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
       <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
       <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
@@ -3155,6 +3189,9 @@
         <Property Name="service" Type="Edm.String" />
         <Property Name="servicePlanId" Type="Edm.Guid" />
       </ComplexType>
+      <ComplexType Name="assignmentRequestApprovalStageCallbackData" BaseType="graph.accessPackageAssignmentRequestCallbackData">
+        <Property Name="approvalStage" Type="graph.accessPackageApprovalStage" />
+      </ComplexType>
       <ComplexType Name="attachmentItem">
         <Property Name="attachmentType" Type="graph.attachmentType" />
         <Property Name="contentType" Type="Edm.String" />
@@ -3298,6 +3335,7 @@
       <ComplexType Name="azureADJoinPolicy">
         <Property Name="allowedToJoin" Type="graph.deviceRegistrationMembership" />
         <Property Name="isAdminConfigurable" Type="Edm.Boolean" />
+        <Property Name="localAdmins" Type="graph.localAdminSettings" />
       </ComplexType>
       <ComplexType Name="azureAdPopTokenAuthentication" BaseType="graph.customExtensionAuthenticationConfiguration" />
       <ComplexType Name="azureADRegistrationPolicy">
@@ -3682,7 +3720,12 @@
       <ComplexType Name="currencyColumn">
         <Property Name="locale" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
       <ComplexType Name="customExtensionAuthenticationConfiguration" Abstract="true" />
       <ComplexType Name="customExtensionCallbackConfiguration">
         <Property Name="timeoutDuration" Type="Edm.Duration" />
@@ -3700,6 +3743,13 @@
       </ComplexType>
       <ComplexType Name="customExtensionData" Abstract="true" />
       <ComplexType Name="customExtensionEndpointConfiguration" Abstract="true" />
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="customTimeZone" BaseType="graph.timeZoneBase">
         <Property Name="bias" Type="Edm.Int32" />
@@ -4146,6 +4196,18 @@
       <ComplexType Name="hyperlinkOrPictureColumn">
         <Property Name="isPicture" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -4355,9 +4417,11 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="keyValue">
         <Property Name="key" Type="Edm.String" />
@@ -4395,6 +4459,10 @@
       <ComplexType Name="localAdminPasswordSettings">
         <Property Name="isEnabled" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="localAdminSettings">
+        <Property Name="enableGlobalAdmins" Type="Edm.Boolean" />
+        <Property Name="registeringUsers" Type="graph.deviceRegistrationMembership" />
+      </ComplexType>
       <ComplexType Name="localeInfo">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="locale" Type="Edm.String" />
@@ -4848,9 +4916,11 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="passwordProfile">
         <Property Name="forceChangePasswordNextSignIn" Type="Edm.Boolean" />
@@ -5363,6 +5433,10 @@
         <Property Name="maximumSize" Type="Edm.Int32" />
         <Property Name="minimumSize" Type="Edm.Int32" />
       </ComplexType>
+      <ComplexType Name="socialIdentitySource" BaseType="graph.identitySource">
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="socialIdentitySourceType" Type="graph.socialIdentitySourceType" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="spaApplication">
         <Property Name="redirectUris" Type="Collection(Edm.String)" Nullable="false" />
       </ComplexType>
@@ -5491,6 +5565,7 @@
         <Property Name="initiator" Type="graph.identitySet" />
         <Property Name="tabId" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="targetAgentIdentitySponsorsOrOwners" BaseType="graph.subjectSet" />
       <ComplexType Name="targetApplicationOwners" BaseType="graph.subjectSet" />
       <ComplexType Name="targetManager" BaseType="graph.subjectSet">
         <Property Name="managerLevel" Type="Edm.Int32" />
@@ -5503,6 +5578,7 @@
         <Property Name="type" Type="Edm.String" />
         <Property Name="userPrincipalName" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="targetUserSponsors" BaseType="graph.subjectSet" />
       <ComplexType Name="teamArchivedEventMessageDetail" BaseType="graph.eventMessageDetail">
         <Property Name="initiator" Type="graph.identitySet" />
         <Property Name="teamId" Type="Edm.String" />
@@ -6067,6 +6143,20 @@
         <NavigationProperty Name="incompatibleAccessPackages" Type="Collection(graph.accessPackage)" />
         <NavigationProperty Name="incompatibleGroups" Type="Collection(graph.group)" ContainsTarget="true" />
         <NavigationProperty Name="resourceRoleScopes" Type="Collection(graph.accessPackageResourceRoleScope)" ContainsTarget="true" />
+        <Annotation Term="Org.OData.Core.V1.AlternateKeys">
+          <Collection>
+            <Record Type="Org.OData.Core.V1.AlternateKey">
+              <PropertyValue Property="Key">
+                <Collection>
+                  <Record Type="Org.OData.Core.V1.PropertyRef">
+                    <PropertyValue Property="Alias" String="uniqueName" />
+                    <PropertyValue Property="Name" PropertyPath="uniqueName" />
+                  </Record>
+                </Collection>
+              </PropertyValue>
+            </Record>
+          </Collection>
+        </Annotation>
       </EntityType>
       <EntityType Name="accessPackageAssignment" BaseType="graph.entity">
         <Property Name="customExtensionCalloutInstances" Type="Collection(graph.customExtensionCalloutInstance)" />
@@ -6086,6 +6176,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="expiration" Type="graph.expirationPattern" />
         <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="notificationSettings" Type="graph.accessPackageNotificationSettings" />
         <Property Name="requestApprovalSettings" Type="graph.accessPackageAssignmentApprovalSettings" />
         <Property Name="requestorSettings" Type="graph.accessPackageAssignmentRequestorSettings" />
         <Property Name="reviewSettings" Type="graph.accessPackageAssignmentReviewSettings" />
@@ -6100,6 +6191,7 @@
         <Property Name="completedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="customExtensionCalloutInstances" Type="Collection(graph.customExtensionCalloutInstance)" />
+        <Property Name="justification" Type="Edm.String" />
         <Property Name="requestType" Type="graph.accessPackageRequestType" />
         <Property Name="schedule" Type="graph.entitlementManagementSchedule" />
         <Property Name="state" Type="graph.accessPackageRequestState" />
@@ -6132,9 +6224,23 @@
         <Property Name="state" Type="graph.accessPackageCatalogState" />
         <NavigationProperty Name="accessPackages" Type="Collection(graph.accessPackage)" ContainsTarget="true" />
         <NavigationProperty Name="customWorkflowExtensions" Type="Collection(graph.customCalloutExtension)" ContainsTarget="true" />
-        <NavigationProperty Name="resourceRoles" Type="Collection(graph.accessPackageResourceRole)" />
+        <NavigationProperty Name="resourceRoles" Type="Collection(graph.accessPackageResourceRole)" ContainsTarget="true" />
         <NavigationProperty Name="resources" Type="Collection(graph.accessPackageResource)" ContainsTarget="true" />
-        <NavigationProperty Name="resourceScopes" Type="Collection(graph.accessPackageResourceScope)" />
+        <NavigationProperty Name="resourceScopes" Type="Collection(graph.accessPackageResourceScope)" ContainsTarget="true" />
+        <Annotation Term="Org.OData.Core.V1.AlternateKeys">
+          <Collection>
+            <Record Type="Org.OData.Core.V1.AlternateKey">
+              <PropertyValue Property="Key">
+                <Collection>
+                  <Record Type="Org.OData.Core.V1.PropertyRef">
+                    <PropertyValue Property="Alias" String="uniqueName" />
+                    <PropertyValue Property="Name" PropertyPath="uniqueName" />
+                  </Record>
+                </Collection>
+              </PropertyValue>
+            </Record>
+          </Collection>
+        </Annotation>
       </EntityType>
       <EntityType Name="accessPackageMultipleChoiceQuestion" BaseType="graph.accessPackageQuestion">
         <Property Name="choices" Type="Collection(graph.accessPackageAnswerChoice)" />
@@ -8075,6 +8181,7 @@
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
         <Property Name="hideFromAddressLists" Type="Edm.Boolean" />
         <Property Name="hideFromOutlookClients" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
@@ -12614,6 +12721,9 @@
       <Action Name="recoverPasscode" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.managedDevice" />
       </Action>
+      <Action Name="refresh" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.accessPackageResource" />
+      </Action>
       <Action Name="remoteLock" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.managedDevice" />
       </Action>
@@ -12740,6 +12850,12 @@
       <Action Name="restoreVersion" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.listItemVersion" />
       </Action>
+      <Action Name="resume" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.accessPackageAssignmentRequest" />
+        <Parameter Name="source" Type="Edm.String" Unicode="false" />
+        <Parameter Name="type" Type="Edm.String" Unicode="false" />
+        <Parameter Name="data" Type="graph.customExtensionData" />
+      </Action>
       <Action Name="retire" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.managedDevice" />
       </Action>
@@ -18334,6 +18450,9 @@
       <Annotations Target="microsoft.graph.groupAssignmentTarget/groupId">
         <Annotation Term="Org.OData.Core.V1.Description" String="The group Id that is the target of the assignment." />
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.identityContainer/conditionalAccess">
         <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
           <Record>
diff --git a/schemas/v1.0-Delos.csdl b/schemas/v1.0-Delos.csdl
index d6163d95..f5e83f7b 100644
--- a/schemas/v1.0-Delos.csdl
+++ b/schemas/v1.0-Delos.csdl
@@ -108,6 +108,11 @@
         <Member Name="failed" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="appManagementRestrictionState">
+        <Member Name="enabled" Value="1" />
+        <Member Name="disabled" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="attachmentType">
         <Member Name="file" Value="0" />
         <Member Name="item" Value="1" />
@@ -264,6 +269,10 @@
         <Member Name="application" Value="3" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="dayOfWeek">
         <Member Name="sunday" Value="0" />
         <Member Name="monday" Value="1" />
@@ -1750,11 +1759,16 @@
         <Property Name="decryptionKey" Type="Edm.String" />
         <Property Name="downloadUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
       <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
       <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
@@ -1918,7 +1932,19 @@
       <ComplexType Name="crossTenantUserSyncInbound">
         <Property Name="isSyncAllowed" Type="Edm.Boolean" />
       </ComplexType>
-      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="customTimeZone" BaseType="graph.timeZoneBase">
         <Property Name="bias" Type="Edm.Int32" />
@@ -2139,6 +2165,18 @@
       <ComplexType Name="groupAssignmentTarget" BaseType="graph.deviceAndAppManagementAssignmentTarget">
         <Property Name="groupId" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -2201,6 +2239,11 @@
         <Property Name="fallbackIdentityProvider" Type="graph.b2bIdentityProvidersType" />
         <Property Name="primaryIdentityProviderPrecedenceOrder" Type="Collection(graph.b2bIdentityProvidersType)" />
       </ComplexType>
+      <ComplexType Name="invitedUserMessageInfo">
+        <Property Name="ccRecipients" Type="Collection(graph.recipient)" />
+        <Property Name="customizedMessageBody" Type="Edm.String" />
+        <Property Name="messageLanguage" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="iosDeviceType">
         <Property Name="iPad" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iPhoneAndIPod" Type="Edm.Boolean" Nullable="false" />
@@ -2296,9 +2339,11 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="keyValue">
         <Property Name="key" Type="Edm.String" />
@@ -2650,9 +2695,11 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="passwordProfile">
         <Property Name="forceChangePasswordNextSignIn" Type="Edm.Boolean" />
@@ -4427,6 +4474,7 @@
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
         <Property Name="hideFromAddressLists" Type="Edm.Boolean" />
         <Property Name="hideFromOutlookClients" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
         <Property Name="isSubscribedByMail" Type="Edm.Boolean" />
@@ -4555,6 +4603,18 @@
         <Property Name="signingCertificateUpdateStatus" Type="graph.signingCertificateUpdateStatus" />
         <Property Name="signOutUri" Type="Edm.String" />
       </EntityType>
+      <EntityType Name="invitation" BaseType="graph.entity">
+        <Property Name="invitedUserDisplayName" Type="Edm.String" />
+        <Property Name="invitedUserEmailAddress" Type="Edm.String" Nullable="false" />
+        <Property Name="invitedUserMessageInfo" Type="graph.invitedUserMessageInfo" />
+        <Property Name="invitedUserType" Type="Edm.String" />
+        <Property Name="inviteRedeemUrl" Type="Edm.String" />
+        <Property Name="inviteRedirectUrl" Type="Edm.String" Nullable="false" />
+        <Property Name="resetRedemption" Type="Edm.Boolean" />
+        <Property Name="sendInvitationMessage" Type="Edm.Boolean" />
+        <Property Name="status" Type="Edm.String" />
+        <NavigationProperty Name="invitedUser" Type="graph.user" />
+      </EntityType>
       <EntityType Name="iosCertificateProfile" BaseType="graph.deviceConfiguration" Abstract="true" />
       <EntityType Name="iosCompliancePolicy" BaseType="graph.deviceCompliancePolicy">
         <Property Name="deviceThreatProtectionEnabled" Type="Edm.Boolean" Nullable="false" />
@@ -8172,6 +8232,9 @@
         </EntitySet>
         <EntitySet Name="groupSettings" EntityType="microsoft.graph.groupSetting" />
         <EntitySet Name="groupSettingTemplates" EntityType="microsoft.graph.groupSettingTemplate" />
+        <EntitySet Name="invitations" EntityType="microsoft.graph.invitation">
+          <NavigationPropertyBinding Path="invitedUser" Target="users" />
+        </EntitySet>
         <EntitySet Name="oauth2PermissionGrants" EntityType="microsoft.graph.oAuth2PermissionGrant" />
         <EntitySet Name="organization" EntityType="microsoft.graph.organization">
           <NavigationPropertyBinding Path="certificateBasedAuthConfiguration" Target="certificateBasedAuthConfiguration" />
@@ -12382,6 +12445,9 @@
       <Annotations Target="microsoft.graph.groupAssignmentTarget/groupId">
         <Annotation Term="Org.OData.Core.V1.Description" String="The group Id that is the target of the assignment." />
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.importedWindowsAutopilotDeviceIdentity">
         <Annotation Term="Org.OData.Core.V1.Description" String="Imported windows autopilot devices." />
       </Annotations>
diff --git a/schemas/v1.0-Fairfax.csdl b/schemas/v1.0-Fairfax.csdl
index 69289fc5..2e9bf030 100644
--- a/schemas/v1.0-Fairfax.csdl
+++ b/schemas/v1.0-Fairfax.csdl
@@ -296,6 +296,11 @@
         <Member Name="failed" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="appManagementRestrictionState">
+        <Member Name="enabled" Value="1" />
+        <Member Name="disabled" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="approvalFilterByCurrentUserOptions">
         <Member Name="target" Value="0" />
         <Member Name="createdBy" Value="1" />
@@ -1065,6 +1070,10 @@
         <Member Name="waitingForCallback" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="dayOfWeek">
         <Member Name="sunday" Value="0" />
         <Member Name="monday" Value="1" />
@@ -5027,11 +5036,16 @@
         <Property Name="decryptionKey" Type="Edm.String" />
         <Property Name="downloadUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
       <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
       <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
@@ -5265,6 +5279,7 @@
       <ComplexType Name="azureADJoinPolicy">
         <Property Name="allowedToJoin" Type="graph.deviceRegistrationMembership" />
         <Property Name="isAdminConfigurable" Type="Edm.Boolean" />
+        <Property Name="localAdmins" Type="graph.localAdminSettings" />
       </ComplexType>
       <ComplexType Name="azureAdPopTokenAuthentication" BaseType="graph.customExtensionAuthenticationConfiguration" />
       <ComplexType Name="azureADRegistrationPolicy">
@@ -5849,7 +5864,12 @@
       <ComplexType Name="currencyColumn">
         <Property Name="locale" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
       <ComplexType Name="customExtensionAuthenticationConfiguration" Abstract="true" />
       <ComplexType Name="customExtensionCallbackConfiguration" Abstract="true">
         <Property Name="timeoutDuration" Type="Edm.Duration" />
@@ -5881,6 +5901,13 @@
         <Property Name="clientConfiguration" Type="graph.customExtensionClientConfiguration" />
       </ComplexType>
       <ComplexType Name="customMetadataDictionary" BaseType="graph.Dictionary" OpenType="true" />
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="customTimeZone" BaseType="graph.timeZoneBase">
         <Property Name="bias" Type="Edm.Int32" />
@@ -6388,6 +6415,18 @@
       <ComplexType Name="hyperlinkOrPictureColumn">
         <Property Name="isPicture" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -6623,9 +6662,11 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="keyValue">
         <Property Name="key" Type="Edm.String" />
@@ -6663,6 +6704,10 @@
       <ComplexType Name="localAdminPasswordSettings">
         <Property Name="isEnabled" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="localAdminSettings">
+        <Property Name="enableGlobalAdmins" Type="Edm.Boolean" />
+        <Property Name="registeringUsers" Type="graph.deviceRegistrationMembership" />
+      </ComplexType>
       <ComplexType Name="localeInfo">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="locale" Type="Edm.String" />
@@ -7217,9 +7262,11 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="passwordProfile">
         <Property Name="forceChangePasswordNextSignIn" Type="Edm.Boolean" />
@@ -11513,6 +11560,7 @@
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
         <Property Name="hideFromAddressLists" Type="Edm.Boolean" />
         <Property Name="hideFromOutlookClients" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
@@ -27188,6 +27236,9 @@
           </Collection>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.identityContainer/conditionalAccess">
         <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
           <Record>
diff --git a/schemas/v1.0-GovSG.csdl b/schemas/v1.0-GovSG.csdl
index 35970f13..573fdf6c 100644
--- a/schemas/v1.0-GovSG.csdl
+++ b/schemas/v1.0-GovSG.csdl
@@ -21,6 +21,11 @@
         <Member Name="asymmetricKeyLifetime" Value="0" />
         <Member Name="unknownFutureValue" Value="99" />
       </EnumType>
+      <EnumType Name="appManagementRestrictionState">
+        <Member Name="enabled" Value="1" />
+        <Member Name="disabled" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="authenticationProtocol">
         <Member Name="wsFed" Value="0" />
         <Member Name="saml" Value="1" />
@@ -46,6 +51,10 @@
         <Member Name="application" Value="3" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="federatedIdpMfaBehavior">
         <Member Name="acceptIfMfaDoneByFederatedIdp" Value="0" />
         <Member Name="enforceMfaByFederatedIdp" Value="1" />
@@ -130,11 +139,16 @@
         <Property Name="preAuthorizedApplications" Type="Collection(graph.preAuthorizedApplication)" />
         <Property Name="requestedAccessTokenVersion" Type="Edm.Int32" />
       </ComplexType>
-      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
       <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
       <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
@@ -197,7 +211,19 @@
       <ComplexType Name="crossTenantUserSyncInbound">
         <Property Name="isSyncAllowed" Type="Edm.Boolean" />
       </ComplexType>
-      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="defaultInvitationRedemptionIdentityProviderConfiguration" BaseType="graph.invitationRedemptionIdentityProviderConfiguration" />
       <ComplexType Name="defaultUserRolePermissions">
@@ -224,6 +250,18 @@
         <Property Name="name" Type="Edm.String" />
         <Property Name="type" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -265,9 +303,11 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="keyValue">
         <Property Name="key" Type="Edm.String" />
@@ -384,9 +424,11 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="passwordProfile">
         <Property Name="forceChangePasswordNextSignIn" Type="Edm.Boolean" />
@@ -930,6 +972,7 @@
         <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="groupTypes" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
         <Property Name="licenseProcessingState" Type="graph.licenseProcessingState" />
@@ -2121,6 +2164,9 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.oAuth2PermissionGrant">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
           <Record>
diff --git a/schemas/v1.0-Mooncake.csdl b/schemas/v1.0-Mooncake.csdl
index 897164bf..f140a5e1 100644
--- a/schemas/v1.0-Mooncake.csdl
+++ b/schemas/v1.0-Mooncake.csdl
@@ -250,6 +250,11 @@
         <Member Name="failed" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="appManagementRestrictionState">
+        <Member Name="enabled" Value="1" />
+        <Member Name="disabled" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="approvalFilterByCurrentUserOptions">
         <Member Name="target" Value="0" />
         <Member Name="createdBy" Value="1" />
@@ -711,6 +716,10 @@
         <Member Name="waitingForCallback" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="dayOfWeek">
         <Member Name="sunday" Value="0" />
         <Member Name="monday" Value="1" />
@@ -3217,11 +3226,16 @@
         <Property Name="decryptionKey" Type="Edm.String" />
         <Property Name="downloadUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
       <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
       <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
@@ -3392,6 +3406,7 @@
       <ComplexType Name="azureADJoinPolicy">
         <Property Name="allowedToJoin" Type="graph.deviceRegistrationMembership" />
         <Property Name="isAdminConfigurable" Type="Edm.Boolean" />
+        <Property Name="localAdmins" Type="graph.localAdminSettings" />
       </ComplexType>
       <ComplexType Name="azureAdPopTokenAuthentication" BaseType="graph.customExtensionAuthenticationConfiguration" />
       <ComplexType Name="azureADRegistrationPolicy">
@@ -3778,7 +3793,12 @@
       <ComplexType Name="currencyColumn">
         <Property Name="locale" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
       <ComplexType Name="customExtensionAuthenticationConfiguration" Abstract="true" />
       <ComplexType Name="customExtensionCallbackConfiguration" Abstract="true">
         <Property Name="timeoutDuration" Type="Edm.Duration" />
@@ -3806,6 +3826,13 @@
       </ComplexType>
       <ComplexType Name="customExtensionData" Abstract="true" />
       <ComplexType Name="customExtensionEndpointConfiguration" Abstract="true" />
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="customTimeZone" BaseType="graph.timeZoneBase">
         <Property Name="bias" Type="Edm.Int32" />
@@ -4254,6 +4281,18 @@
       <ComplexType Name="hyperlinkOrPictureColumn">
         <Property Name="isPicture" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -4458,9 +4497,11 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="keyValue">
         <Property Name="key" Type="Edm.String" />
@@ -4498,6 +4539,10 @@
       <ComplexType Name="localAdminPasswordSettings">
         <Property Name="isEnabled" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="localAdminSettings">
+        <Property Name="enableGlobalAdmins" Type="Edm.Boolean" />
+        <Property Name="registeringUsers" Type="graph.deviceRegistrationMembership" />
+      </ComplexType>
       <ComplexType Name="localeInfo">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="locale" Type="Edm.String" />
@@ -4898,9 +4943,11 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="passwordProfile">
         <Property Name="forceChangePasswordNextSignIn" Type="Edm.Boolean" />
@@ -8289,6 +8336,7 @@
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
         <Property Name="hideFromAddressLists" Type="Edm.Boolean" />
         <Property Name="hideFromOutlookClients" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
@@ -18907,6 +18955,9 @@
       <Annotations Target="microsoft.graph.groupAssignmentTarget/groupId">
         <Annotation Term="Org.OData.Core.V1.Description" String="The group Id that is the target of the assignment." />
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.identityContainer/conditionalAccess">
         <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
           <Record>
diff --git a/schemas/v1.0-Prod.csdl b/schemas/v1.0-Prod.csdl
index 2c642057..1a820489 100644
--- a/schemas/v1.0-Prod.csdl
+++ b/schemas/v1.0-Prod.csdl
@@ -1328,6 +1328,10 @@
         <Member Name="waitingForCallback" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="dataPolicyOperationStatus">
         <Member Name="notStarted" Value="0" />
         <Member Name="running" Value="1" />
@@ -6476,11 +6480,16 @@
         <Property Name="decryptionKey" Type="Edm.String" />
         <Property Name="downloadUrl" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
       <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
       <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
@@ -7574,7 +7583,12 @@
       <ComplexType Name="currencyColumn">
         <Property Name="locale" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration" />
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
       <ComplexType Name="customExtensionAuthenticationConfiguration" Abstract="true" />
       <ComplexType Name="customExtensionBehaviorOnError" Abstract="true" />
       <ComplexType Name="customExtensionCallbackConfiguration" Abstract="true">
@@ -7608,6 +7622,13 @@
         <Property Name="clientConfiguration" Type="graph.customExtensionClientConfiguration" />
       </ComplexType>
       <ComplexType Name="customMetadataDictionary" BaseType="graph.Dictionary" OpenType="true" />
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="customTimeZone" BaseType="graph.timeZoneBase">
         <Property Name="bias" Type="Edm.Int32" />
@@ -8358,6 +8379,18 @@
       <ComplexType Name="hyperlinkOrPictureColumn">
         <Property Name="isPicture" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -8619,6 +8652,7 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
@@ -9242,6 +9276,7 @@
         <Property Name="accidentalDeletionPrevention" Type="graph.onPremisesAccidentalDeletionPrevention" />
       </ComplexType>
       <ComplexType Name="onPremisesDirectorySynchronizationFeature">
+        <Property Name="allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled" Type="Edm.Boolean" />
         <Property Name="blockCloudObjectTakeoverThroughHardMatchEnabled" Type="Edm.Boolean" />
         <Property Name="blockSoftMatchEnabled" Type="Edm.Boolean" />
         <Property Name="bypassDirSyncOverridesEnabled" Type="Edm.Boolean" />
@@ -9394,6 +9429,7 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
@@ -15097,6 +15133,7 @@
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
         <Property Name="hideFromAddressLists" Type="Edm.Boolean" />
         <Property Name="hideFromOutlookClients" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
@@ -19356,6 +19393,12 @@
         <NavigationProperty Name="associatedTeams" Type="Collection(graph.associatedTeamInfo)" ContainsTarget="true" />
         <NavigationProperty Name="installedApps" Type="Collection(graph.userScopeTeamsAppInstallation)" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="verifiableCredentialAuthenticationMethodTarget" BaseType="graph.authenticationMethodTarget">
+        <Property Name="verifiedIdProfiles" Type="Collection(Edm.Guid)" Nullable="false" />
+      </EntityType>
+      <EntityType Name="verifiableCredentialsAuthenticationMethodConfiguration" BaseType="graph.authenticationMethodConfiguration">
+        <NavigationProperty Name="includeTargets" Type="Collection(graph.verifiableCredentialAuthenticationMethodTarget)" ContainsTarget="true" />
+      </EntityType>
       <EntityType Name="verifiedIdProfile" BaseType="graph.entity">
         <Property Name="description" Type="Edm.String" Nullable="false" />
         <Property Name="faceCheckConfiguration" Type="graph.faceCheckConfiguration" Nullable="false" />
@@ -34527,6 +34570,9 @@
           </Collection>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.identityContainer/conditionalAccess">
         <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
           <Record>
diff --git a/schemas/v1.0-USNat.csdl b/schemas/v1.0-USNat.csdl
index 4cb96257..9e9d39a5 100644
--- a/schemas/v1.0-USNat.csdl
+++ b/schemas/v1.0-USNat.csdl
@@ -218,6 +218,11 @@
         <Member Name="reportOnlyNotApplied" Value="8" />
         <Member Name="reportOnlyInterrupted" Value="9" />
       </EnumType>
+      <EnumType Name="appManagementRestrictionState">
+        <Member Name="enabled" Value="1" />
+        <Member Name="disabled" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="approvalFilterByCurrentUserOptions">
         <Member Name="target" Value="0" />
         <Member Name="createdBy" Value="1" />
@@ -717,6 +722,10 @@
         <Member Name="waitingForCallback" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="dayOfWeek">
         <Member Name="sunday" Value="0" />
         <Member Name="monday" Value="1" />
@@ -2321,10 +2330,17 @@
         <Property Name="id" Type="Edm.String" />
         <Property Name="result" Type="graph.appliedConditionalAccessPolicyResult" />
       </ComplexType>
-      <ComplexType Name="appManagementConfiguration">
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
+      <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="description" Type="Edm.String" />
@@ -2515,6 +2531,7 @@
       <ComplexType Name="azureADJoinPolicy">
         <Property Name="allowedToJoin" Type="graph.deviceRegistrationMembership" />
         <Property Name="isAdminConfigurable" Type="Edm.Boolean" />
+        <Property Name="localAdmins" Type="graph.localAdminSettings" />
       </ComplexType>
       <ComplexType Name="azureAdPopTokenAuthentication" BaseType="graph.customExtensionAuthenticationConfiguration" />
       <ComplexType Name="azureADRegistrationPolicy">
@@ -2944,6 +2961,12 @@
         <Property Name="applicationMode" Type="graph.applicationMode" />
         <Property Name="id" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
       <ComplexType Name="customExtensionAuthenticationConfiguration" Abstract="true" />
       <ComplexType Name="customExtensionCallbackConfiguration" Abstract="true">
         <Property Name="timeoutDuration" Type="Edm.Duration" />
@@ -2971,6 +2994,13 @@
       </ComplexType>
       <ComplexType Name="customExtensionData" Abstract="true" />
       <ComplexType Name="customExtensionEndpointConfiguration" Abstract="true" />
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="customTimeZone" BaseType="graph.timeZoneBase">
         <Property Name="bias" Type="Edm.Int32" />
@@ -3360,6 +3390,18 @@
       <ComplexType Name="hyperlinkOrPictureColumn">
         <Property Name="isPicture" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -3483,9 +3525,11 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="keyValue">
         <Property Name="key" Type="Edm.String" />
@@ -3530,6 +3574,10 @@
       <ComplexType Name="localAdminPasswordSettings">
         <Property Name="isEnabled" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="localAdminSettings">
+        <Property Name="enableGlobalAdmins" Type="Edm.Boolean" />
+        <Property Name="registeringUsers" Type="graph.deviceRegistrationMembership" />
+      </ComplexType>
       <ComplexType Name="localeInfo">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="locale" Type="Edm.String" />
@@ -3952,9 +4000,11 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="passwordProfile">
         <Property Name="forceChangePasswordNextSignIn" Type="Edm.Boolean" />
@@ -5609,7 +5659,7 @@
       </EntityType>
       <EntityType Name="appManagementPolicy" BaseType="graph.policyBase">
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
-        <Property Name="restrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="restrictions" Type="graph.customAppManagementConfiguration" />
         <NavigationProperty Name="appliesTo" Type="Collection(graph.directoryObject)" />
       </EntityType>
       <EntityType Name="appRoleAssignment" BaseType="graph.directoryObject">
@@ -6742,6 +6792,7 @@
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
         <Property Name="hideFromAddressLists" Type="Edm.Boolean" />
         <Property Name="hideFromOutlookClients" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
@@ -8263,9 +8314,9 @@
         <NavigationProperty Name="includeTargets" Type="Collection(graph.authenticationMethodTarget)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="tenantAppManagementPolicy" BaseType="graph.policyBase">
-        <Property Name="applicationRestrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="applicationRestrictions" Type="graph.appManagementApplicationConfiguration" />
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
-        <Property Name="servicePrincipalRestrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="servicePrincipalRestrictions" Type="graph.appManagementServicePrincipalConfiguration" />
       </EntityType>
       <EntityType Name="tenantRelationship" />
       <EntityType Name="termsOfUseContainer" BaseType="graph.entity">
@@ -15139,6 +15190,9 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.identityContainer/conditionalAccess">
         <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
           <Record>
diff --git a/schemas/v1.0-USSec.csdl b/schemas/v1.0-USSec.csdl
index 38494064..3b78ff90 100644
--- a/schemas/v1.0-USSec.csdl
+++ b/schemas/v1.0-USSec.csdl
@@ -204,6 +204,11 @@
         <Member Name="reportOnlyNotApplied" Value="8" />
         <Member Name="reportOnlyInterrupted" Value="9" />
       </EnumType>
+      <EnumType Name="appManagementRestrictionState">
+        <Member Name="enabled" Value="1" />
+        <Member Name="disabled" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="approvalFilterByCurrentUserOptions">
         <Member Name="target" Value="0" />
         <Member Name="createdBy" Value="1" />
@@ -703,6 +708,10 @@
         <Member Name="waitingForCallback" Value="5" />
         <Member Name="unknownFutureValue" Value="6" />
       </EnumType>
+      <EnumType Name="customSecurityAttributeComparisonOperator">
+        <Member Name="equals" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="dayOfWeek">
         <Member Name="sunday" Value="0" />
         <Member Name="monday" Value="1" />
@@ -2314,10 +2323,17 @@
         <Property Name="id" Type="Edm.String" />
         <Property Name="result" Type="graph.appliedConditionalAccessPolicyResult" />
       </ComplexType>
-      <ComplexType Name="appManagementConfiguration">
+      <ComplexType Name="appManagementApplicationConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="appManagementConfiguration" Abstract="true">
         <Property Name="keyCredentials" Type="Collection(graph.keyCredentialConfiguration)" />
         <Property Name="passwordCredentials" Type="Collection(graph.passwordCredentialConfiguration)" />
       </ComplexType>
+      <ComplexType Name="appManagementPolicyActorExemptions">
+        <Property Name="customSecurityAttributes" Type="Collection(graph.customSecurityAttributeExemption)" />
+      </ComplexType>
+      <ComplexType Name="appManagementServicePrincipalConfiguration" BaseType="graph.appManagementConfiguration" />
       <ComplexType Name="appRole">
         <Property Name="allowedMemberTypes" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="description" Type="Edm.String" />
@@ -2505,6 +2521,7 @@
       <ComplexType Name="azureADJoinPolicy">
         <Property Name="allowedToJoin" Type="graph.deviceRegistrationMembership" />
         <Property Name="isAdminConfigurable" Type="Edm.Boolean" />
+        <Property Name="localAdmins" Type="graph.localAdminSettings" />
       </ComplexType>
       <ComplexType Name="azureAdPopTokenAuthentication" BaseType="graph.customExtensionAuthenticationConfiguration" />
       <ComplexType Name="azureADRegistrationPolicy">
@@ -2917,6 +2934,12 @@
       <ComplexType Name="currencyColumn">
         <Property Name="locale" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="customAppManagementApplicationConfiguration">
+        <Property Name="identifierUris" Type="graph.identifierUriConfiguration" />
+      </ComplexType>
+      <ComplexType Name="customAppManagementConfiguration" BaseType="graph.appManagementConfiguration">
+        <Property Name="applicationRestrictions" Type="graph.customAppManagementApplicationConfiguration" />
+      </ComplexType>
       <ComplexType Name="customExtensionAuthenticationConfiguration" Abstract="true" />
       <ComplexType Name="customExtensionCallbackConfiguration" Abstract="true">
         <Property Name="timeoutDuration" Type="Edm.Duration" />
@@ -2945,6 +2968,13 @@
       <ComplexType Name="customExtensionData" Abstract="true" />
       <ComplexType Name="customExtensionEndpointConfiguration" Abstract="true" />
       <ComplexType Name="customMetadataDictionary" BaseType="graph.Dictionary" OpenType="true" />
+      <ComplexType Name="customSecurityAttributeExemption" Abstract="true">
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="operator" Type="graph.customSecurityAttributeComparisonOperator" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="customSecurityAttributeStringValueExemption" BaseType="graph.customSecurityAttributeExemption">
+        <Property Name="value" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="customSecurityAttributeValue" OpenType="true" />
       <ComplexType Name="customTimeZone" BaseType="graph.timeZoneBase">
         <Property Name="bias" Type="Edm.Int32" />
@@ -3247,6 +3277,18 @@
       <ComplexType Name="hyperlinkOrPictureColumn">
         <Property Name="isPicture" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="identifierUriConfiguration">
+        <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
+      </ComplexType>
+      <ComplexType Name="identifierUriRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="excludeAppsReceivingV2Tokens" Type="Edm.Boolean" />
+        <Property Name="excludeSaml" Type="Edm.Boolean" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="identity" OpenType="true">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="id" Type="Edm.String" />
@@ -3374,9 +3416,11 @@
         <Property Name="usage" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="keyValue">
         <Property Name="key" Type="Edm.String" />
@@ -3414,6 +3458,10 @@
       <ComplexType Name="localAdminPasswordSettings">
         <Property Name="isEnabled" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="localAdminSettings">
+        <Property Name="enableGlobalAdmins" Type="Edm.Boolean" />
+        <Property Name="registeringUsers" Type="graph.deviceRegistrationMembership" />
+      </ComplexType>
       <ComplexType Name="localeInfo">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="locale" Type="Edm.String" />
@@ -3802,9 +3850,11 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
       </ComplexType>
       <ComplexType Name="passwordProfile">
         <Property Name="forceChangePasswordNextSignIn" Type="Edm.Boolean" />
@@ -5531,7 +5581,7 @@
       </EntityType>
       <EntityType Name="appManagementPolicy" BaseType="graph.policyBase">
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
-        <Property Name="restrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="restrictions" Type="graph.customAppManagementConfiguration" />
         <NavigationProperty Name="appliesTo" Type="Collection(graph.directoryObject)" />
       </EntityType>
       <EntityType Name="appRoleAssignment" BaseType="graph.directoryObject">
@@ -6595,6 +6645,7 @@
         <Property Name="hasMembersWithLicenseErrors" Type="Edm.Boolean" />
         <Property Name="hideFromAddressLists" Type="Edm.Boolean" />
         <Property Name="hideFromOutlookClients" Type="Edm.Boolean" />
+        <Property Name="infoCatalogs" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isAssignableToRole" Type="Edm.Boolean" />
         <Property Name="isManagementRestricted" Type="Edm.Boolean" />
@@ -8064,9 +8115,9 @@
         <NavigationProperty Name="includeTargets" Type="Collection(graph.authenticationMethodTarget)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="tenantAppManagementPolicy" BaseType="graph.policyBase">
-        <Property Name="applicationRestrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="applicationRestrictions" Type="graph.appManagementApplicationConfiguration" />
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
-        <Property Name="servicePrincipalRestrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="servicePrincipalRestrictions" Type="graph.appManagementServicePrincipalConfiguration" />
       </EntityType>
       <EntityType Name="tenantDataSecurityAndGovernance" BaseType="graph.dataSecurityAndGovernance">
         <NavigationProperty Name="protectionScopes" Type="graph.tenantProtectionScopeContainer" ContainsTarget="true" Nullable="false" />
@@ -14919,6 +14970,9 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.identifierUriRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.identityContainer/conditionalAccess">
         <Annotation Term="Org.OData.Capabilities.V1.DeleteRestrictions">
           <Record>