Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Namespace: microsoft.graph
Important
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Password credential configuration object that contains properties to configure restrictions such as blocking or restricting lifetimes of password secrets.
Methods
None.
Properties
| Property | Type | Description |
|---|---|---|
| maxLifetime | Duration | String value that indicates the maximum lifetime for password expiration, defined as an ISO 8601 duration. For example, P4DT12H30M5S represents four days, 12 hours, 30 minutes, and five seconds. This property is required when restrictionType is set to passwordLifetime. |
| restrictForAppsCreatedAfterDateTime | DateTimeOffset | Specifies the date from which the policy restriction applies to newly created applications. For existing applications, the enforcement date can be retroactively applied. |
| restrictionType | appCredentialRestrictionType | A unique identifier key for passwordCredentialConfiguration. This value also represents the type of restriction being applied. The possible values are: passwordAddition, passwordLifetime, symmetricKeyAddition, symmetricKeyLifetime, customPasswordAddition, and unknownFutureValue. Each value of restrictionType can be used only once per policy. |
| state | appManagementRestrictionState | Indicates whether the restriction is evaluated. The possible values are: enabled, disabled, unknownFutureValue. If enabled, the restriction is evaluated. If disabled, the restriction isn't evaluated or enforced. |
| excludeActors | appManagementPolicyActorExemptions | Collection of custom security attribute exemptions. If an actor user or service principal has the custom security attribute defined in this section, they're exempted from the restriction. This means that calls the user or service principal makes to create or update apps are exempt from this policy enforcement. |
Relationships
None.
JSON representation
The following JSON representation shows the resource.
{
"@odata.type": "#microsoft.graph.passwordCredentialConfiguration",
"restrictionType": "String (identifier)",
"state": "String",
"restrictForAppsCreatedAfterDateTime": "String (DateTime)",
"maxLifetime": "String (duration)",
"excludeActors": {
"@odata.type": "microsoft.graph.appManagementPolicyActorExemptions"
}
}