Merge pull request #25637 from microsoftgraph/main

Merge to publish.

api-reference/beta/api/accesspackage-delete-accesspackageresourcerolescopes.md

@@ -1,6 +1,6 @@
 ---
 title: "Remove resourceRoleScope from an access package"
-description: "Remove a resourceRoleScope from an access package."
+description: "Remove an accessPackageResourceRoleScope from an accessPackage list of resource role scopes."
 ms.localizationpriority: medium
 author: "markwahl-msft"
 ms.subservice: "entra-id-governance"
@@ -13,7 +13,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Remove a [accessPackageResourceRoleScope](../resources/accesspackageresourcerolescope.md) from an [accessPackage](../resources/accesspackage.md) list of resource role scopes.
+Remove an [accessPackageResourceRoleScope](../resources/accesspackageresourcerolescope.md) from an [accessPackage](../resources/accesspackage.md) list of resource role scopes.
 
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 

api-reference/beta/api/entitlementmanagement-post-accesspackagecatalogs.md

@@ -1,6 +1,6 @@
 ---
 title: "Create accessPackageCatalog"
-description: "Create a new accessPackageCatalog."
+description: "Create a new accessPackageCatalog object."
 ms.localizationpriority: medium
 author: "markwahl-msft"
 ms.subservice: "entra-id-governance"

api-reference/beta/api/group-list-owners.md

@@ -14,7 +14,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Retrieve a list of the group's owners. The owners are a set of users who are allowed to modify the group object. Owners are currently not available in Microsoft Graph for groups that were created in Exchange or groups that are synchronized from an on-premises environment.
+Retrieve a list of the group's owners. The owners are a set of users who are allowed to modify the group object. Owners are currently not available in Microsoft Graph for groups that were created in Exchange, distribution groups, or groups that are synchronized from an on-premises environment.
 
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 

api-reference/beta/api/onlinemeeting-update.md

@@ -63,6 +63,7 @@ The last column indicates whether updating this property takes effect for an in-
 | allowAttendeeToEnableCamera | Boolean                                                    | Indicates whether attendees can turn on their camera.                               | Yes                                 |
 | allowAttendeeToEnableMic    | Boolean                                                    | Indicates whether attendees can turn on their microphone.                           | Yes                                 |
 | allowBreakoutRooms          | Boolean                                                    | Indicates whether breakout rooms are enabled for the meeting.                       | No                                  |
+| allowedLobbyAdmitters       | [allowedLobbyAdmitterRoles](../resources/onlinemeetingbase.md#allowedlobbyadmitterroles-values) | Specifies the users who can admit from the lobby. Possible values are: `organizerAndCoOrganizersAndPresenters`, `organizerAndCoOrganizers`, `unknownFutureValue`. | Yes                                 |
 | allowedPresenters           | onlineMeetingPresenters                                    | Specifies who can be a presenter in a meeting.                                      | Yes                                 |
 | allowLiveShare              | Boolean                                                    | Indicates whether live share is enabled for the meeting.                            | No                                  |
 | allowMeetingChat            | meetingChatMode                                            | Specifies the mode of meeting chat.                                                 | Yes                                 |
@@ -71,7 +72,7 @@ The last column indicates whether updating this property takes effect for an in-
 | allowWhiteboard             | Boolean                                                    | Indicates whether whiteboard is enabled for the meeting.                            | No                                  |
 | endDateTime                 | DateTime                                                   | The meeting end time in UTC.                                                        | No                                  |
 | isEntryExitAnnounced        | Boolean                                                    | Whether or not to announce when callers join or leave.                              | Yes                                 |
-| lobbyBypassSettings         | [lobbyBypassSettings](../resources/lobbyBypassSettings.md) | Specifies which participants can bypass the meeting lobby.                          | Yes                                 |
+| lobbyBypassSettings         | [lobbyBypassSettings](../resources/lobbybypasssettings.md) | Specifies which participants can bypass the meeting lobby.                          | Yes                                 |
 | participants                | [meetingParticipants](../resources/meetingparticipants.md) | The participants associated with the online meeting. Only attendees can be updated. | No                                  |
 | recordAutomatically         | Boolean                                                    | Indicates whether to record the meeting automatically.                              | No                                  |
 | startDateTime               | DateTime                                                   | The meeting start time in UTC.                                                      | No                                  |

api-reference/beta/api/profile-delete.md

@@ -1,6 +1,6 @@
 ---
 title: "Delete profile"
-description: "Delete profile."
+description: "Delete a profile object from a user's account."
 ms.localizationpriority: medium
 author: "kevinbellinger"
 ms.subservice: "people"
@@ -13,7 +13,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Deletes a [profile](../resources/profile.md) object from a user's account.
+Delete a [profile](../resources/profile.md) object from a user's account.
 
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 

api-reference/beta/api/range-boundingrect.md

@@ -1,19 +1,20 @@
 ---
-title: "Range: BoundingRect"
-description: "."
+title: "range: boundingRect"
+description: "Get the smallest range object that encompasses the given ranges."
 author: "lumine2008"
 ms.localizationpriority: medium
 ms.subservice: "excel"
 doc_type: apiPageType
 ---
 
-# Range: BoundingRect
+# range: boundingRect
 
 Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Gets the smallest range object that encompasses the given ranges. For example, the GetBoundingRect of "B2:C5" and "D10:E15" is "B2:E16".
+Get the smallest range object that encompasses the given ranges. For example, the GetBoundingRect of *B2:C5* and *D10:E15* is *B2:E16*.
+
 ## Permissions
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
@@ -35,7 +36,7 @@ GET /me/drive/root:/{item-path}:/workbook/tables/{id|name}/columns/{id|name}/ran
 | Name       | Description|
 |:---------------|:----------|
 |Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
-| Workbook-Session-Id  | Workbook session Id that determines if changes are persisted or not. Optional.|
+| Workbook-Session-Id  | Workbook session ID that determines if changes are persisted or not. Optional.|
 
 ## Request body
 In the request body, provide a JSON object with the following parameters.

api-reference/beta/api/range-lastcell.md

@@ -1,19 +1,19 @@
 ---
-title: "Range: LastCell"
-description: "."
+title: "range: lastCell"
+description: "Get the last cell within the range."
 author: "lumine2008"
 ms.localizationpriority: medium
 ms.subservice: "excel"
 doc_type: apiPageType
 ---
 
-# Range: LastCell
+# range: lastCell
 
 Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Gets the last cell within the range. For example, the last cell of "B2:D5" is "D5".
+Get the last cell within the range. For example, the last cell of *B2:D5* is *D5*.
 
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
@@ -38,7 +38,7 @@ GET /me/drive/root:/{item-path}:/workbook/tables/{id|name}/columns/{id|name}/ran
 | Name       | Description|
 |:---------------|:----------|
 |Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
-| Workbook-Session-Id  | Workbook session Id that determines if changes are persisted or not. Optional.|
+| Workbook-Session-Id  | Workbook session ID that determines if changes are persisted or not. Optional.|
 
 ## Request body
 

api-reference/beta/api/range-lastcolumn.md

@@ -1,19 +1,19 @@
 ---
-title: "Range: LastColumn"
-description: "."
+title: "range: lastColumn"
+description: "Get the last column within the range."
 author: "lumine2008"
 ms.localizationpriority: medium
 ms.subservice: "excel"
 doc_type: apiPageType
 ---
 
-# Range: LastColumn
+# range: lastColumn
 
 Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Gets the last column within the range. For example, the last column of "B2:D5" is "D2:D5".
+Gets the last column within the range. For example, the last column of *B2:D5* is *D2:D5*.
 
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
@@ -38,7 +38,7 @@ GET /me/drive/root:/{item-path}:/workbook/tables/{id|name}/columns/{id|name}/ran
 | Name       | Description|
 |:---------------|:----------|
 |Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
-| Workbook-Session-Id  | Workbook session Id that determines if changes are persisted or not. Optional.|
+| Workbook-Session-Id  | Workbook session ID that determines if changes are persisted or not. Optional.|
 
 ## Request body
 

api-reference/beta/api/range-lastrow.md

@@ -1,19 +1,19 @@
 ---
-title: "Range: LastRow"
-description: "."
+title: "range: lastRow"
+description: "Get the last row within the range."
 author: "lumine2008"
 ms.localizationpriority: medium
 ms.subservice: "excel"
 doc_type: apiPageType
 ---
 
-# Range: LastRow
+# range: lastRow
 
 Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Gets the last row within the range. For example, the last row of "B2:D5" is "B5:D5".
+Get the last row within the range. For example, the last row of *B2:D5* is *B5:D5*.
 
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
@@ -38,7 +38,7 @@ GET /me/drive/root:/{item-path}:/workbook/tables/{id|name}/columns/{id|name}/ran
 | Name       | Description|
 |:---------------|:----------|
 |Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
-| Workbook-Session-Id  | Workbook session Id that determines if changes are persisted or not. Optional.|
+| Workbook-Session-Id  | Workbook session ID that determines if changes are persisted or not. Optional.|
 
 ## Request body
 

api-reference/beta/api/riskyusers-confirmcompromised.md

@@ -1,6 +1,6 @@
 ---
 title: "riskyUser: confirmCompromised"
-description: Confirm a riskyUser object as compromised.
+description: "Confirm one or more riskyUser objects as compromised."
 author: tracyshi
 ms.localizationpriority: medium
 ms.subservice: entra-sign-in

api-reference/beta/includes/rbac-for-apis/epm-rbac-servicenow-apis-read.md

@@ -4,4 +4,5 @@ ms.topic: include
 ms.author: mrudulahg01
 ---
 
-The calling user must have one of the following roles.  <br/><ul><li> Microsoft Entra Permissions Management Admin *(x_mioms_mepm.Microsoft_Entra_Permissions_Admin)*</li><li> Microsoft Entra Permissions Management Requestor *(x_mioms_mepm.Microsoft_Entra_Permissions_Requestor)*</li><li> Microsoft Azure application developer, Microsoft Azure tenant administrator</li><li> Microsoft Entra Permissions Management Service Principal Permissions: *Approver and Viewer for all*</li></ul>
+> [!IMPORTANT]
+> The calling user must have one of the following roles.  <br/><ul><li> Microsoft Entra Permissions Management Admin *(x_mioms_mepm.Microsoft_Entra_Permissions_Admin)*</li><li> Microsoft Entra Permissions Management Requestor *(x_mioms_mepm.Microsoft_Entra_Permissions_Requestor)*</li><li> Microsoft Azure application developer, Microsoft Azure tenant administrator</li><li> Microsoft Entra Permissions Management Service Principal Permissions: *Approver and Viewer for all*</li></ul>

api-reference/beta/includes/rbac-for-apis/epm-rbac-servicenow-apis-write.md

@@ -4,4 +4,5 @@ ms.topic: include
 ms.author: mrudulahg01
 ---
 
-The calling user must have one of the following roles.  <br/><ul><li> Microsoft Entra Permissions Management Admin *(x_mioms_mepm.Microsoft_Entra_Permissions_Admin)*</li><li> Microsoft Entra Permissions Management Requestor *(x_mioms_mepm.Microsoft_Entra_Permissions_Requestor)*</li><li> Microsoft Azure application developer, Microsoft Azure tenant administrator</li><li> Microsoft Entra Permissions Management Service Principal Permissions: *Approver and Viewer for all*</li></ul>
+> [!IMPORTANT]
+> The calling user must have one of the following roles.  <br/><ul><li> Microsoft Entra Permissions Management Admin *(x_mioms_mepm.Microsoft_Entra_Permissions_Admin)*</li><li> Microsoft Entra Permissions Management Requestor *(x_mioms_mepm.Microsoft_Entra_Permissions_Requestor)*</li><li> Microsoft Azure application developer, Microsoft Azure tenant administrator</li><li> Microsoft Entra Permissions Management Service Principal Permissions: *Approver and Viewer for all*</li></ul>

api-reference/beta/includes/rbac-for-apis/rbac-access-reviews-apis-read.md

@@ -3,8 +3,8 @@ author: jyothig123
 ms.topic: include
 ---
 
-In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
-
-|Read access reviews of a group or app  |Read access reviews of a Microsoft Entra role  |
-|---------|---------|
-|The creator of the access review schedule definition <br/> Global Reader <br/> Security Reader <br/>  User Administrator <br/> Identity Governance Administrator </br> Security Administrator  | Security Reader <br/>  Identity Governance Administrator <br/> Privileged Role Administrator </br> Security Administrator        |
+> [!IMPORTANT]
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
+> - To read access reviews of a group or app: the creator of the access review; *Global Reader*, *Security Reader*, *User Administrator*, *Identity Governance Administrator*, *Security Administrator*
+>
+> - To read access reviews of a Microsoft Entra role: *Security Reader*, *Identity Governance Administrator*, *Privileged Role Administrator*, *Security Administrator*

api-reference/beta/includes/rbac-for-apis/rbac-access-reviews-apis-write.md

@@ -3,8 +3,7 @@ author: jyothig123
 ms.topic: include
 ---
 
-In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
-
-|Write access reviews of a group or app  |Write access reviews of a Microsoft Entra role  |
-|---------|---------|
-|User Administrator <br/> Identity Governance Administrator  | Identity Governance Administrator </br> Privileged Role Administrator |
+> [!IMPORTANT]
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
+> - To write access reviews of a group or app: *User Administrator*, *Identity Governance Administrator*
+> - To write access reviews of a Microsoft Entra role: *Identity Governance Administrator*, *Privileged Role Administrator*

api-reference/beta/includes/rbac-for-apis/rbac-app-auth-method-default-policy-api-update.md

@@ -4,4 +4,5 @@ ms.topic: include
 ms.author: saumadan
 ---
 
-In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Security Administrator* is the least privileged role supported for this operation.
+> [!IMPORTANT]
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Security Administrator* is the least privileged role supported for this operation.

api-reference/beta/includes/rbac-for-apis/rbac-app-auth-method-policy-apis.md

@@ -4,4 +4,5 @@ ms.topic: include
 ms.author: saumadan
 ---
 
-In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. **Application Administrator* or *Cloud Application Administrator* are the least privileged roles supported for this operation.
+> [!IMPORTANT]
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. **Application Administrator* and *Cloud Application Administrator* are the least privileged roles supported for this operation.