DSCResources/MSFT_IntuneDeviceCompliancePolicyAndroidWorkProfile/MSFT_IntuneDeviceCompliancePolicyAndroidWorkProfile.schema.mof
|
[ClassVersion("1.0.0.0")]
class MSFT_DeviceManagementConfigurationPolicyAssignments { [Write, Description("The type of the target assignment."), ValueMap{"#microsoft.graph.groupAssignmentTarget","#microsoft.graph.allLicensedUsersAssignmentTarget","#microsoft.graph.allDevicesAssignmentTarget","#microsoft.graph.exclusionGroupAssignmentTarget","#microsoft.graph.configurationManagerCollectionAssignmentTarget"}, Values{"#microsoft.graph.groupAssignmentTarget","#microsoft.graph.allLicensedUsersAssignmentTarget","#microsoft.graph.allDevicesAssignmentTarget","#microsoft.graph.exclusionGroupAssignmentTarget","#microsoft.graph.configurationManagerCollectionAssignmentTarget"}] String dataType; [Write, Description("The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude."), ValueMap{"none","include","exclude"}, Values{"none","include","exclude"}] String deviceAndAppManagementAssignmentFilterType; [Write, Description("The Id of the filter for the target assignment.")] String deviceAndAppManagementAssignmentFilterId; [Write, Description("The group Id that is the target of the assignment.")] String groupId; [Write, Description("The group Display Name that is the target of the assignment.")] String groupDisplayName; [Write, Description("The collection Id that is the target of the assignment.(ConfigMgr)")] String collectionId; }; [ClassVersion("1.0.0.0")] class MSFT_scheduledActionConfigurations { [Write, Description("The unique identifier of the action configuration.")] String id; [Write, Description("Number of hours to wait till the action will be enforced. Valid values 0 to 8760.")] Uint32 gracePeriodHours; [Write, Description("The action to take."), ValueMap{"notification", "block", "retire", "remoteLock", "pushNotification"}, Values{"notification", "block", "retire", "remoteLock", "pushNotification"}] String actionType; [Write, Description("The notification Message template to use.")] String notificationTemplateId; [Write, Description("A list of group IDs to specify who to CC this notification message to.")] String notificationMessageCCList[]; }; [ClassVersion("1.0.0.0"), FriendlyName("IntuneDeviceCompliancePolicyAndroidWorkProfile")] class MSFT_IntuneDeviceCompliancePolicyAndroidWorkProfile : OMI_BaseResource { [Key, Description("Display name of the AndroidWorkProfile device compliance policy.")] String DisplayName; [Write, Description("Description of the AndroidWorkProfile device compliance policy.")] String Description; [Write, Description("Assignments of the Intune Policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[]; [Write, Description("The password complexity types that can be set on Android. One of: NONE, LOW, MEDIUM, HIGH. This is an API targeted to Android 11+."), ValueMap{"none", "low", "medium", "high"}, Values{"none", "low", "medium", "high"}] String RequiredPasswordComplexity; [Write, Description("Setting securityBlockDeviceAdministratorManagedDevices to true enhances security by preventing devices managed through the legacy device administrator method from accessing corporate resources.")] Boolean SecurityBlockDeviceAdministratorManagedDevices; [Write, Description("Specify applications that users are prohibited from installing or using on their devices.")] String RestrictedApps[]; [Write, Description("Specifies Android Work Profile password type."), ValueMap{"deviceDefault", "lowSecurityBiometric", "required", "atLeastNumeric", "numericComplex", "atLeastAlphabetic", "atLeastAlphanumeric", "alphanumericWithSymbols"}, Values{"deviceDefault", "lowSecurityBiometric", "required", "atLeastNumeric", "numericComplex", "atLeastAlphabetic", "atLeastAlphanumeric", "alphanumericWithSymbols"}] String WorkProfilePasswordRequiredType; [Write, Description("Specifies Android Work Profile password complexity."), ValueMap{"None", "Low", "Medium", "High"}, Values{"None", "Low", "Medium", "High"}] String WorkProfileRequiredPasswordComplexity; [Write, Description("Specifies if Android Work Profile password is required.")] Boolean WorkProfileRequirePassword; [Write, Description("Specifies the number of previous passwords that cannot be reused in an Android Work Profile compliance policy.")] Uint32 WorkProfilePreviousPasswordBlockCount; [Write, Description("Defines the duration of inactivity (in minutes) after which the screen is locked.")] Uint32 WorkProfileInactiveBeforeScreenLockInMinutes; [Write, Description("Specifies the minimum number of characters required in a password for an Android Work Profile.")] Uint32 WorkProfilePasswordMinimumLength; [Write, Description("Specifies the number of days before a password expires for an Android Work Profile.")] Uint32 WorkProfilePasswordExpirationInDays; [Write, Description("Specifies the non-compliance actions."), EmbeddedInstance("MSFT_scheduledActionConfigurations")] String ScheduledActionsForRule[]; [Write, Description("PasswordRequired of the AndroidWorkProfile device compliance policy.")] Boolean PasswordRequired; [Write, Description("PasswordMinimumLength of the AndroidWorkProfile device compliance policy.")] Uint32 PasswordMinimumLength; [Write, Description("PasswordRequiredType of the AndroidWorkProfile device compliance policy."), ValueMap{"deviceDefault", "alphabetic", "alphanumeric", "alphanumericWithSymbols", "lowSecurityBiometric", "numeric", "numericComplex", "any"}, Values{"deviceDefault", "alphabetic", "alphanumeric", "alphanumericWithSymbols", "lowSecurityBiometric", "numeric", "numericComplex", "any"}] String PasswordRequiredType; [Write, Description("PasswordMinutesOfInactivityBeforeLock of the AndroidWorkProfile device compliance policy.")] Uint32 PasswordMinutesOfInactivityBeforeLock; [Write, Description("PasswordExpirationDays of the AndroidWorkProfile device compliance policy.")] Uint32 PasswordExpirationDays; [Write, Description("PasswordPreviousPasswordBlockCount of the AndroidWorkProfile device compliance policy.")] Uint32 PasswordPreviousPasswordBlockCount; [Write, Description("PasswordSignInFailureCountBeforeFactoryReset of the AndroidWorkProfile device compliance policy.")] Uint32 PasswordSignInFailureCountBeforeFactoryReset; [Write, Description("SecurityPreventInstallAppsFromUnknownSources of the AndroidWorkProfile device compliance policy.")] Boolean SecurityPreventInstallAppsFromUnknownSources; [Write, Description("SecurityDisableUsbDebugging of the AndroidWorkProfile device compliance policy.")] Boolean SecurityDisableUsbDebugging; [Write, Description("SecurityRequireVerifyApps of the AndroidWorkProfile device compliance policy.")] Boolean SecurityRequireVerifyApps; [Write, Description("DeviceThreatProtectionEnabled of the AndroidWorkProfile device compliance policy.")] Boolean DeviceThreatProtectionEnabled; [Write, Description("DeviceThreatProtectionRequiredSecurityLevel of the AndroidWorkProfile device compliance policy."), ValueMap{"unavailable", "secured", "low", "medium", "high", "notSet"}, Values{"unavailable", "secured", "low", "medium", "high", "notSet"}] String DeviceThreatProtectionRequiredSecurityLevel; [Write, Description("AdvancedThreatProtectionRequiredSecurityLevel of the AndroidWorkProfile device compliance policy."), ValueMap{"unavailable", "secured", "low", "medium", "high", "notSet"}, Values{"unavailable", "secured", "low", "medium", "high", "notSet"}] String AdvancedThreatProtectionRequiredSecurityLevel; [Write, Description("SecurityBlockJailbrokenDevices of the AndroidWorkProfile device compliance policy.")] Boolean SecurityBlockJailbrokenDevices; [Write, Description("OsMinimumVersion of the AndroidWorkProfile device compliance policy.")] String OsMinimumVersion; [Write, Description("OsMaximumVersion of the AndroidWorkProfile device compliance policy.")] String OsMaximumVersion; [Write, Description("MinAndroidSecurityPatchLevel of the AndroidWorkProfile device compliance policy.")] String MinAndroidSecurityPatchLevel; [Write, Description("StorageRequireEncryption of the AndroidWorkProfile device compliance policy.")] Boolean StorageRequireEncryption; [Write, Description("SecurityRequireSafetyNetAttestationBasicIntegrity of the AndroidWorkProfile device compliance policy.")] Boolean SecurityRequireSafetyNetAttestationBasicIntegrity; [Write, Description("SecurityRequireSafetyNetAttestationCertifiedDevice of the AndroidWorkProfile device compliance policy.")] Boolean SecurityRequireSafetyNetAttestationCertifiedDevice; [Write, Description("SecurityRequireGooglePlayServices of the AndroidWorkProfile device compliance policy.")] Boolean SecurityRequireGooglePlayServices; [Write, Description("SecurityRequireUpToDateSecurityProviders of the AndroidWorkProfile device compliance policy.")] Boolean SecurityRequireUpToDateSecurityProviders; [Write, Description("SecurityRequireCompanyPortalAppIntegrity of the AndroidWorkProfile device compliance policy.")] Boolean SecurityRequireCompanyPortalAppIntegrity; [Write, Description("Require a specific SafetyNet evaluation type for compliance."), ValueMap{"basic","hardwareBacked"}, Values{"basic","hardwareBacked"}] String SecurityRequiredAndroidSafetyNetEvaluationType; [Write, Description("RoleScopeTagIds of the AndroidWorkProfile device compliance policy.")] String RoleScopeTagIds; [Write, Description("Present ensures the policy exists, absent ensures it is removed."), ValueMap{"Present","Absent"}, Values{"Present","Absent"}] string Ensure; [Write, Description("Credentials of the Intune Admin"), EmbeddedInstance("MSFT_Credential")] string Credential; [Write, Description("Id of the Azure Active Directory application to authenticate with.")] String ApplicationId; [Write, Description("Id of the Azure Active Directory tenant used for authentication.")] String TenantId; [Write, Description("Secret of the Azure Active Directory tenant used for authentication."), EmbeddedInstance("MSFT_Credential")] String ApplicationSecret; [Write, Description("Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication.")] String CertificateThumbprint; [Write, Description("Managed ID being used for authentication.")] Boolean ManagedIdentity; [Write, Description("Access token used for authentication.")] String AccessTokens[]; }; |