From 64085681b68bcc315059d8ab06ff8ffc2031289c Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Fri, 15 May 2026 04:21:17 +0300
Subject: [PATCH] Schema sync 2026-05-15 from 1.4.563.0

---
 schemas/beta-Bleu.csdl     | 12 +++++++
 schemas/beta-Delos.csdl    | 25 ++++++++++++++
 schemas/beta-Fairfax.csdl  |  2 ++
 schemas/beta-GovSG.csdl    |  3 ++
 schemas/beta-Mooncake.csdl |  1 +
 schemas/beta-Prod.csdl     | 67 +++++++++++++++-----------------------
 schemas/beta-USNat.csdl    |  5 ++-
 schemas/beta-USSec.csdl    |  5 ++-
 8 files changed, 78 insertions(+), 42 deletions(-)

diff --git a/schemas/beta-Bleu.csdl b/schemas/beta-Bleu.csdl
index 75c75320..b6264233 100644
--- a/schemas/beta-Bleu.csdl
+++ b/schemas/beta-Bleu.csdl
@@ -8113,6 +8113,10 @@
         <Property Name="authenticationStrengthResult" Type="graph.authenticationStrengthResult" />
         <Property Name="displayName" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="authenticationStrengthUsage">
+        <NavigationProperty Name="mfa" Type="Collection(graph.conditionalAccessPolicy)" />
+        <NavigationProperty Name="none" Type="Collection(graph.conditionalAccessPolicy)" />
+      </ComplexType>
       <ComplexType Name="authorizationInfo">
         <Property Name="certificateUserIds" Type="Collection(Edm.String)" />
       </ComplexType>
@@ -8528,6 +8532,7 @@
         <Property Name="customAuthenticationFactors" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="operator" Type="Edm.String" />
         <Property Name="termsOfUse" Type="Collection(Edm.String)" Nullable="false" />
+        <NavigationProperty Name="authenticationStrength" Type="graph.authenticationStrengthPolicy" ContainsTarget="true" />
       </ComplexType>
       <ComplexType Name="conditionalAccessGuestsOrExternalUsers">
         <Property Name="externalTenants" Type="graph.conditionalAccessExternalTenants" />
@@ -10450,6 +10455,7 @@
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
         <Property Name="certificateBasedApplicationConfigurationIds" Type="Collection(Edm.String)" />
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
@@ -11349,6 +11355,7 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
@@ -22667,6 +22674,7 @@
         <Property Name="azureResourceId" Type="Edm.String" />
         <Property Name="clientAppUsed" Type="Edm.String" />
         <Property Name="clientCredentialType" Type="graph.clientCredentialType" />
+        <Property Name="clientSessionId" Type="Edm.String" />
         <Property Name="conditionalAccessAudiences" Type="Collection(Edm.String)" />
         <Property Name="conditionalAccessStatus" Type="graph.conditionalAccessStatus" />
         <Property Name="correlationId" Type="Edm.String" />
@@ -30628,6 +30636,10 @@
         <Parameter Name="bindingParameter" Type="Collection(graph.recommendation)" />
         <ReturnType Type="Collection(graph.tenantSecureScore)" />
       </Function>
+      <Function Name="usage" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.authenticationStrengthPolicy" />
+        <ReturnType Type="graph.authenticationStrengthUsage" />
+      </Function>
       <Function Name="userExperienceAnalyticsSummarizedDeviceScopes" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.deviceManagement" />
         <ReturnType Type="graph.userExperienceAnalyticsDeviceScopeSummary" />
diff --git a/schemas/beta-Delos.csdl b/schemas/beta-Delos.csdl
index b2024e8f..362fea69 100644
--- a/schemas/beta-Delos.csdl
+++ b/schemas/beta-Delos.csdl
@@ -7266,6 +7266,7 @@
       </ComplexType>
       <ComplexType Name="identifierUriConfiguration">
         <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
       </ComplexType>
       <ComplexType Name="identifierUriRestriction">
         <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
@@ -7364,6 +7365,11 @@
         <Property Name="fallbackIdentityProvider" Type="graph.b2bIdentityProvidersType" />
         <Property Name="primaryIdentityProviderPrecedenceOrder" Type="Collection(graph.b2bIdentityProvidersType)" />
       </ComplexType>
+      <ComplexType Name="invitedUserMessageInfo">
+        <Property Name="ccRecipients" Type="Collection(graph.recipient)" />
+        <Property Name="customizedMessageBody" Type="Edm.String" />
+        <Property Name="messageLanguage" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="iosAvailableUpdateVersion">
         <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
         <Property Name="postingDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
@@ -7603,6 +7609,7 @@
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
         <Property Name="certificateBasedApplicationConfigurationIds" Type="Collection(Edm.String)" />
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
@@ -8274,6 +8281,7 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
@@ -13856,6 +13864,19 @@
       <EntityType Name="intuneBrandingProfileAssignment" BaseType="graph.entity">
         <Property Name="target" Type="graph.deviceAndAppManagementAssignmentTarget" />
       </EntityType>
+      <EntityType Name="invitation" BaseType="graph.entity">
+        <Property Name="invitedUserDisplayName" Type="Edm.String" />
+        <Property Name="invitedUserEmailAddress" Type="Edm.String" Nullable="false" />
+        <Property Name="invitedUserMessageInfo" Type="graph.invitedUserMessageInfo" />
+        <Property Name="invitedUserType" Type="Edm.String" />
+        <Property Name="inviteRedeemUrl" Type="Edm.String" />
+        <Property Name="inviteRedirectUrl" Type="Edm.String" Nullable="false" />
+        <Property Name="resetRedemption" Type="Edm.Boolean" />
+        <Property Name="sendInvitationMessage" Type="Edm.Boolean" />
+        <Property Name="status" Type="Edm.String" />
+        <NavigationProperty Name="invitedUser" Type="graph.user" />
+        <NavigationProperty Name="invitedUserSponsors" Type="Collection(graph.directoryObject)" />
+      </EntityType>
       <EntityType Name="iosCertificateProfile" BaseType="graph.deviceConfiguration" Abstract="true" />
       <EntityType Name="iosCertificateProfileBase" BaseType="graph.iosCertificateProfile" Abstract="true">
         <Property Name="certificateValidityPeriodScale" Type="graph.certificateValidityPeriodScale" Nullable="false" />
@@ -22573,6 +22594,10 @@
           <NavigationPropertyBinding Path="transitiveMemberOf" Target="directoryObjects" />
           <NavigationPropertyBinding Path="transitiveMembers" Target="directoryObjects" />
         </EntitySet>
+        <EntitySet Name="invitations" EntityType="microsoft.graph.invitation">
+          <NavigationPropertyBinding Path="invitedUser" Target="users" />
+          <NavigationPropertyBinding Path="invitedUserSponsors" Target="directoryObjects" />
+        </EntitySet>
         <EntitySet Name="oauth2PermissionGrants" EntityType="microsoft.graph.oAuth2PermissionGrant" />
         <EntitySet Name="organization" EntityType="microsoft.graph.organization">
           <NavigationPropertyBinding Path="certificateBasedAuthConfiguration" Target="certificateBasedAuthConfiguration" />
diff --git a/schemas/beta-Fairfax.csdl b/schemas/beta-Fairfax.csdl
index 7a15ef3b..5952c017 100644
--- a/schemas/beta-Fairfax.csdl
+++ b/schemas/beta-Fairfax.csdl
@@ -1694,6 +1694,7 @@
         <Member Name="usGovernment" Value="13" />
         <Member Name="unknownFutureValue" Value="14" />
         <Member Name="mexico" Value="15" />
+        <Member Name="australiaNewZealand" Value="16" />
       </EnumType>
       <EnumType Name="cloudPcImportedSnapshotState">
         <Member Name="notUsed" Value="0" />
@@ -27441,6 +27442,7 @@
         <Property Name="azureResourceId" Type="Edm.String" />
         <Property Name="clientAppUsed" Type="Edm.String" />
         <Property Name="clientCredentialType" Type="graph.clientCredentialType" />
+        <Property Name="clientSessionId" Type="Edm.String" />
         <Property Name="conditionalAccessAudiences" Type="Collection(Edm.String)" />
         <Property Name="conditionalAccessStatus" Type="graph.conditionalAccessStatus" />
         <Property Name="correlationId" Type="Edm.String" />
diff --git a/schemas/beta-GovSG.csdl b/schemas/beta-GovSG.csdl
index ec4b1f8e..920aca66 100644
--- a/schemas/beta-GovSG.csdl
+++ b/schemas/beta-GovSG.csdl
@@ -381,6 +381,7 @@
       </ComplexType>
       <ComplexType Name="identifierUriConfiguration">
         <Property Name="nonDefaultUriAddition" Type="graph.identifierUriRestriction" />
+        <Property Name="uriAdditionWithoutUniqueTenantIdentifier" Type="graph.identifierUriRestriction" />
       </ComplexType>
       <ComplexType Name="identifierUriRestriction">
         <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
@@ -432,6 +433,7 @@
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
         <Property Name="certificateBasedApplicationConfigurationIds" Type="Collection(Edm.String)" />
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
@@ -565,6 +567,7 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
diff --git a/schemas/beta-Mooncake.csdl b/schemas/beta-Mooncake.csdl
index d1b4e6ae..f2c85b16 100644
--- a/schemas/beta-Mooncake.csdl
+++ b/schemas/beta-Mooncake.csdl
@@ -22436,6 +22436,7 @@
         <Property Name="azureResourceId" Type="Edm.String" />
         <Property Name="clientAppUsed" Type="Edm.String" />
         <Property Name="clientCredentialType" Type="graph.clientCredentialType" />
+        <Property Name="clientSessionId" Type="Edm.String" />
         <Property Name="conditionalAccessAudiences" Type="Collection(Edm.String)" />
         <Property Name="conditionalAccessStatus" Type="graph.conditionalAccessStatus" />
         <Property Name="correlationId" Type="Edm.String" />
diff --git a/schemas/beta-Prod.csdl b/schemas/beta-Prod.csdl
index 8db24478..0e9cd458 100644
--- a/schemas/beta-Prod.csdl
+++ b/schemas/beta-Prod.csdl
@@ -2,11 +2,6 @@
 <edmx:Edmx Version="4.0" xmlns:edmx="http://docs.oasis-open.org/odata/ns/edmx">
   <edmx:DataServices>
     <Schema Namespace="microsoft.graph" Alias="graph" xmlns="http://docs.oasis-open.org/odata/ns/edm">
-      <EnumType Name="accessDriftReportResourceType">
-        <Member Name="application" Value="0" />
-        <Member Name="group" Value="1" />
-        <Member Name="unknownFutureValue" Value="2" />
-      </EnumType>
       <EnumType Name="accessEntityType">
         <Member Name="user" Value="0" />
         <Member Name="group" Value="1" />
@@ -2340,6 +2335,7 @@
         <Member Name="usGovernment" Value="13" />
         <Member Name="unknownFutureValue" Value="14" />
         <Member Name="mexico" Value="15" />
+        <Member Name="australiaNewZealand" Value="16" />
       </EnumType>
       <EnumType Name="cloudPcImportedSnapshotState">
         <Member Name="notUsed" Value="0" />
@@ -9385,6 +9381,13 @@
         <Member Name="installingDependencies" Value="5001" />
         <Member Name="contentDownloaded" Value="5002" />
       </EnumType>
+      <EnumType Name="retentionPeriodChangeStatus">
+        <Member Name="none" Value="0" />
+        <Member Name="inProgress" Value="1" />
+        <Member Name="failed" Value="2" />
+        <Member Name="completed" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
       <EnumType Name="retrievalDataSource">
         <Member Name="sharePoint" Value="0" />
         <Member Name="oneDriveBusiness" Value="1" />
@@ -12211,7 +12214,6 @@
         <Property Name="catalogId" Type="Edm.String" />
         <Property Name="reportFormat" Type="Edm.String" />
         <Property Name="resourceIds" Type="Collection(Edm.String)" />
-        <Property Name="resourceType" Type="graph.accessDriftReportResourceType" Nullable="false" />
       </ComplexType>
       <ComplexType Name="accessPackageAnswer" Abstract="true">
         <Property Name="answeredQuestion" Type="graph.accessPackageQuestion" />
@@ -18778,6 +18780,7 @@
         <Property Name="writebackConfiguration" Type="graph.onPremisesWritebackConfiguration" />
       </ComplexType>
       <ComplexType Name="onPremisesDirectorySynchronizationFeature">
+        <Property Name="allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled" Type="Edm.Boolean" />
         <Property Name="blockCloudObjectTakeoverThroughHardMatchEnabled" Type="Edm.Boolean" />
         <Property Name="blockSoftMatchEnabled" Type="Edm.Boolean" />
         <Property Name="bypassDirSyncOverridesEnabled" Type="Edm.Boolean" />
@@ -20408,6 +20411,11 @@
         <Property Name="isMetadataUpdateAllowed" Type="Edm.Boolean" />
         <Property Name="isRecordLocked" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="retentionPeriodChange">
+        <Property Name="effectiveFromDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="status" Type="graph.retentionPeriodChangeStatus" Nullable="false" />
+        <Property Name="targetRetentionPeriodInDays" Type="Edm.Int32" />
+      </ComplexType>
       <ComplexType Name="retentionSetting">
         <Property Name="interval" Type="Edm.String" />
         <Property Name="period" Type="Edm.Duration" />
@@ -23281,12 +23289,6 @@
         <Property Name="userId" Type="Edm.String" />
         <NavigationProperty Name="user" Type="graph.user" />
       </EntityType>
-      <EntityType Name="accessDriftReport" BaseType="graph.entity">
-        <Property Name="downloadUri" Type="Edm.String" Nullable="false" />
-        <Property Name="expiresAt" Type="Edm.DateTimeOffset" Nullable="false" />
-        <Property Name="resourceType" Type="graph.accessDriftReportResourceType" Nullable="false" />
-        <Property Name="tenantId" Type="Edm.String" Nullable="false" />
-      </EntityType>
       <EntityType Name="accessPackage" BaseType="graph.entity">
         <Property Name="catalogId" Type="Edm.String" />
         <Property Name="createdBy" Type="Edm.String" />
@@ -35745,6 +35747,7 @@
         <Property Name="lastModifiedBy" Type="graph.identitySet" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="offboardRequestedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="pendingRetentionPeriodChange" Type="graph.retentionPeriodChange" />
         <Property Name="policyId" Type="Edm.String" />
         <Property Name="protectionSources" Type="graph.protectionSource" Nullable="false" />
         <Property Name="status" Type="graph.protectionUnitStatus" />
@@ -37414,6 +37417,7 @@
         <Property Name="azureResourceId" Type="Edm.String" />
         <Property Name="clientAppUsed" Type="Edm.String" />
         <Property Name="clientCredentialType" Type="graph.clientCredentialType" />
+        <Property Name="clientSessionId" Type="Edm.String" />
         <Property Name="conditionalAccessAudiences" Type="Collection(Edm.String)" />
         <Property Name="conditionalAccessStatus" Type="graph.conditionalAccessStatus" />
         <Property Name="correlationId" Type="Edm.String" />
@@ -46780,6 +46784,10 @@
         <Parameter Name="numBytes" Type="graph.Json" />
         <ReturnType Type="graph.workbookFunctionResult" />
       </Action>
+      <Action Name="migrate" EntitySetPath="bindingParameter" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.crossTenantMigrationJob" />
+        <ReturnType Type="graph.crossTenantMigrationJob" />
+      </Action>
       <Action Name="migrateToTemplate" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.deviceManagementIntent" />
         <Parameter Name="newTemplateId" Type="Edm.String" Unicode="false" />
@@ -49517,6 +49525,10 @@
         <Parameter Name="resources" Type="Collection(Edm.String)" Unicode="false" />
         <ReturnType Type="graph.crossTenantMigrationJob" />
       </Action>
+      <Action Name="validate" EntitySetPath="bindingParameter" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.crossTenantMigrationJob" />
+        <ReturnType Type="graph.crossTenantMigrationJob" />
+      </Action>
       <Action Name="validateAuthenticationConfiguration" IsBound="true">
         <Parameter Name="bindingParameter" Type="Collection(graph.customAuthenticationExtension)" />
         <Parameter Name="endpointConfiguration" Type="graph.customExtensionEndpointConfiguration" />
@@ -62194,34 +62206,6 @@
       <Annotations Target="microsoft.graph.cancel(microsoft.graph.bookingAppointment, Edm.String)">
         <Annotation Term="Org.OData.Core.V1.Description" String="Cancels the giving booking appointment, sending a message to the involved parties." />
       </Annotations>
-      <Annotations Target="microsoft.graph.cancel(microsoft.graph.crossTenantMigrationJob)">
-        <Annotation Term="Org.OData.Core.V1.Revisions">
-          <Collection>
-            <Record>
-              <PropertyValue Property="Date" Date="2023-11-15" />
-              <PropertyValue Property="Kind">
-                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
-              </PropertyValue>
-              <PropertyValue Property="RemovalDate" Date="2026-07-09" />
-              <PropertyValue Property="Version" String="2023-11/PrivatePreview:CrossTenantContentMigrationAPI" />
-            </Record>
-          </Collection>
-        </Annotation>
-      </Annotations>
-      <Annotations Target="microsoft.graph.cancel(microsoft.graph.crossTenantMigrationTask)">
-        <Annotation Term="Org.OData.Core.V1.Revisions">
-          <Collection>
-            <Record>
-              <PropertyValue Property="Date" Date="2023-11-15" />
-              <PropertyValue Property="Kind">
-                <EnumMember>Org.OData.Core.V1.RevisionKind/Deprecated</EnumMember>
-              </PropertyValue>
-              <PropertyValue Property="RemovalDate" Date="2026-07-09" />
-              <PropertyValue Property="Version" String="2023-11/PrivatePreview:CrossTenantContentMigrationAPI" />
-            </Record>
-          </Collection>
-        </Annotation>
-      </Annotations>
       <Annotations Target="microsoft.graph.cancelApproval(microsoft.graph.operationApprovalRequest, Edm.String, microsoft.graph.operationApprovalSource)">
         <Annotation Term="Org.OData.Core.V1.Description" String="Cancels an already approved instance of an operationApprovalRequest." />
       </Annotations>
@@ -92017,6 +92001,9 @@
           </Collection>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.protectionUnitBase/pendingRetentionPeriodChange">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.providerTenantSetting">
         <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
           <Record>
diff --git a/schemas/beta-USNat.csdl b/schemas/beta-USNat.csdl
index c6e707f7..66b659f3 100644
--- a/schemas/beta-USNat.csdl
+++ b/schemas/beta-USNat.csdl
@@ -4626,6 +4626,7 @@
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
         <Property Name="certificateBasedApplicationConfigurationIds" Type="Collection(Edm.String)" />
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
@@ -5198,6 +5199,7 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
@@ -7548,7 +7550,7 @@
       </EntityType>
       <EntityType Name="appManagementPolicy" BaseType="graph.policyBase">
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
-        <Property Name="restrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="restrictions" Type="graph.customAppManagementConfiguration" />
         <NavigationProperty Name="appliesTo" Type="Collection(graph.directoryObject)" />
       </EntityType>
       <EntityType Name="appRoleAssignment" BaseType="graph.directoryObject">
@@ -11009,6 +11011,7 @@
         <Property Name="authenticationRequirement" Type="Edm.String" />
         <Property Name="authenticationRequirementPolicies" Type="Collection(graph.authenticationRequirementPolicy)" />
         <Property Name="clientAppUsed" Type="Edm.String" />
+        <Property Name="clientSessionId" Type="Edm.String" />
         <Property Name="conditionalAccessAudiences" Type="Collection(Edm.String)" />
         <Property Name="conditionalAccessStatus" Type="graph.conditionalAccessStatus" />
         <Property Name="correlationId" Type="Edm.String" />
diff --git a/schemas/beta-USSec.csdl b/schemas/beta-USSec.csdl
index d89eb3c5..073f1c11 100644
--- a/schemas/beta-USSec.csdl
+++ b/schemas/beta-USSec.csdl
@@ -4738,6 +4738,7 @@
       </ComplexType>
       <ComplexType Name="keyCredentialConfiguration">
         <Property Name="certificateBasedApplicationConfigurationIds" Type="Collection(Edm.String)" />
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appKeyCredentialRestrictionType" />
@@ -5325,6 +5326,7 @@
         <Property Name="startDateTime" Type="Edm.DateTimeOffset" />
       </ComplexType>
       <ComplexType Name="passwordCredentialConfiguration">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
         <Property Name="maxLifetime" Type="Edm.Duration" />
         <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="restrictionType" Type="graph.appCredentialRestrictionType" />
@@ -7782,7 +7784,7 @@
       </EntityType>
       <EntityType Name="appManagementPolicy" BaseType="graph.policyBase">
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
-        <Property Name="restrictions" Type="graph.appManagementConfiguration" />
+        <Property Name="restrictions" Type="graph.customAppManagementConfiguration" />
         <NavigationProperty Name="appliesTo" Type="Collection(graph.directoryObject)" />
       </EntityType>
       <EntityType Name="appRoleAssignment" BaseType="graph.directoryObject">
@@ -11247,6 +11249,7 @@
         <Property Name="authenticationRequirement" Type="Edm.String" />
         <Property Name="authenticationRequirementPolicies" Type="Collection(graph.authenticationRequirementPolicy)" />
         <Property Name="clientAppUsed" Type="Edm.String" />
+        <Property Name="clientSessionId" Type="Edm.String" />
         <Property Name="conditionalAccessAudiences" Type="Collection(Edm.String)" />
         <Property Name="conditionalAccessStatus" Type="graph.conditionalAccessStatus" />
         <Property Name="correlationId" Type="Edm.String" />