Edit

What's new in Microsoft Graph

Microsoft Graph provides a unified programmability model that you can use to access data in Microsoft 365, Windows, and Enterprise Mobility + Security. This article provides information about what's new in Microsoft Graph APIs, documentation, SDKs, and more.

For more detailed API-level updates, see the Microsoft Graph API changelog.

For details about previous updates to Microsoft Graph, see Microsoft Graph what's new history.

Important

Features in preview status are subject to change without notice, and might not be promoted to generally available (GA) status. Don't use preview features in production apps.

July 2026: New and generally available

Device and app management | Cloud PC

Added the cloudPcServicePlan resource type and related methods for managing Windows 365 service plans. Use the servicePlans relationship on virtualEndpoint to discover available service plans that an organization can purchase for Cloud PCs.

Files

Added the allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled property to the onPremisesDirectorySynchronizationFeature resource.

Groups

  • Added support for assigning sensitivity labels to cloud security groups via the assignedLabels property on the group resource. For more information, see Sensitivity labels for Microsoft 365 groups and cloud security groups.
  • Added the Group.ManageProtection.All delegated permission as the least privilege permission for updating the assignedLabels property on the group resource. App-only scenarios aren't supported.

Identity and access | Directory management

  • Added the remoteTenantGroup resource type and related methods to retrieve groups from remote Microsoft Entra tenants through the directory resource.
  • Added the sponsorOf relationship to the user resource type to represent the directory objects that a user sponsors.

Identity and access | Governance

Teamwork and communications | Calls and online meetings

Teamwork and communications | Messaging

  • Documented support for the optional ConsistencyLevel request header when getting hosted content for a chat message. Use ConsistencyLevel: eventual to retrieve hosted content for edited or deleted messages. Hosted content retrieval isn't supported for messages in deleted threads.
  • Added the targetedChatMessage resource type and related methods for managing targeted messages in Microsoft Teams. Targeted messages are visible only to specified recipients within group chats and channels.
    • Use the getAllTargetedMessages function to retrieve all targeted messages sent to a user across all group chats and channels.
    • Use the getAllRetainedTargetedMessages function to retrieve retained targeted messages that were deleted by the sender but preserved by retention policies.
    • Use the deleteTargetedMessage action to delete a specific targeted message from a user's storage in a channel context.

Users

  • Added the User.Create permission as the least privileged permission to create a user.
  • Added the User.ReadUpdate.All permission as the least privileged permission to update a user.

July 2026: New in preview only

Change notifications

Added the vapidPublicKey, webPushEncryptionP256dhPublicKey, and webPushEncryptionSecret properties to the subscription resource to support encrypted change notifications delivered to browser-native Web Push endpoints (Apple, Mozilla, FCM). Browser-based applications can now register with Microsoft Graph to receive change notifications through the W3C Push API channel without operating a public webhook. See RFC 8291 and RFC 8292 for the underlying encryption and authentication protocols.

Device and app management | Cloud PC

Files

  • Updated the getSharePointApiUsage method to support the optional reportType parameter for retrieving throttling metrics. Use reportType='throttlingReport' to get throttled request counts via the throttledRequests property on the sharePointApiUsageDataPoint resource, or use reportType='egressReport' (default) to get egress usage via the usageMB property.
  • Added the allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled property to the onPremisesDirectorySynchronizationFeature resource.
  • Added the getByUser method to the fileStorageContainer resource to retrieve a list of file storage containers owned by a user, with optional filtering by role (owner or principalOwner).

Groups

Added the Group.ManageProtection.All delegated permission as the least privilege permission for updating the assignedLabels property on the group resource. App-only scenarios aren't supported.

Identity and access | Directory management

Added the sponsorOf relationship to the user resource type to represent the directory objects that a user sponsors.

Identity and access | Governance

  • Added the guestSponsorTrigger resource type to initiate lifecycle workflows when guest users have fewer than the required number of sponsors.
  • Added support for automatically quarantining Lifecycle Workflows to stop a workflow from processing more users than expected. Configure thresholds using the quarantineConfiguration property on lifecycleManagementSettings, and clear a quarantine by calling clearQuarantine.

Identity and access | Identity and sign-in

  • Added the resourceAccountKeyAuthenticationMethod resource type and related methods for managing resource account key credentials on shared devices. Use these APIs to list, get, and delete resource account key authentication methods for Teams Meeting Rooms and Teams phones that authenticate silently to Microsoft Entra ID.

  • Added support for programmatic FIDO2 passkey registration. Use the creationOptions function to get WebAuthn credential creation options, then complete registration by posting the new publicKeyCredential property to the fido2AuthenticationMethod resource.

  • Added support to update and delete Microsoft 365 cross-tenant capabilities in the cross-tenant access policy. For details, see m365CapabilityBase.

  • Updated the verifiedIdProfile resource to support mobile driver's license verification and self-service Verified ID issuance through MyAccount. Profiles can specify the verification method and credential manifest used for these experiences.

  • Enhanced the verifiedIdProfile resource with expanded verification capabilities:

    • Added the methodType property to verifiedIdProfileConfiguration to specify the verification method category, including tenant custom credentials, verified employee credentials, and identity verification partners. Introduced the verifiedIdMethodType enumeration to support these scenarios.
    • Added the manifestUrl property to verifiedIdProfileConfiguration to reference the credential issuer's manifest defining the credential schema and issuer details.
    • Added the verification member to the verifiedIdUsageConfigurationPurpose enumeration to enable just-in-time identity verification scenarios, such as step-up authentication enforcement through Conditional Access policies.

Security | Alerts and incidents

Security | eDiscovery

Added the cloudNativeHtmlConversion member to the additionalDataOptions enumeration.

Mailbox import and export

  • Added the wellKnownName property to the mailboxFolder resource type to identify folders created by Outlook by using a locale-independent name.
  • Added the Delete mailboxItem method to delete an individual mailboxItem from a mailbox folder by using the mailbox import and export APIs. Use the disposalType query parameter to specify soft-delete or hard-delete semantics.

Reports

Added the getSharePointApiUsage method to the reportRoot resource to retrieve aggregated OneDrive and SharePoint API usage metrics for a tenant, including egress usage and throttling metrics.

Tasks and plans

  • Added the plannerHistoryItem resource type and List historyItems method to audit task changes within a Planner plan. Track when tasks are created, updated, deleted, or moved, and filter by occurredDateTime to retrieve changes within specific time ranges.
  • Added the plannerGoal resource type and related read methods for viewing goals in a Planner plan and understanding which goals are associated with each task.

Teamwork and communications | Graph API controls

Updated Microsoft Graph documentation for transcript APIs to add guidance on tenant administrator controls that govern transcript access and speaker attribution. For more information, see Get change notifications for transcripts and recordings using Microsoft Graph.

Teamwork and communications | Shift management

The timeZone property of the schedule resource must be set to an IANA time zone name, such as America/Chicago or Europe/London. For more information, see Create or replace schedule.

Users

Application permissions for the user: translateExchangeIds API are supported only for request URLs that identify a user in the path.

June 2026: New and generally available

Applications | Service principal

Evaluate applications in the Microsoft Entra application gallery by using the applicationTemplate resource type, including the riskScore and riskFactors properties for risk assessment.

Files | Reports

  • Added the getSharePointApiUsage method to the reportRoot resource to retrieve aggregated OneDrive and SharePoint API usage metrics for a tenant, including egress usage and throttling metrics.
  • Upsert (create or update) up to 40 permissions on a fileStorageContainer in a single request. The limit increased from 10 to 40 permission objects per request.

Groups

  • Added the accessType, isFavorite, unseenConversationsCount, and unseenMessagesCount properties to the group resource. Use these properties to manage access settings and track conversation activity for Microsoft 365 groups. Added the groupAccessType enumeration type to support the accessType property on the group resource.

Identity and access | Directory management

  • Added the deviceRegistrationPolicy resource type and related methods to manage the policy that controls device registration quota restrictions, additional authentication, and authorization policies for your Microsoft Entra tenant.
  • Added the Get and Update methods to the accessPackageSubject resource type to manage the subject lifecycle of external directory users in Microsoft Entra entitlement management.
  • Added the type property to the accessPackageResourceRole resource to indicate whether an Azure resource role is active or eligible, enabling PIM-based role assignments for Azure resources in access packages.
  • Added the accessPackageSuggestion resource type and related methods for discovering suggested access packages based on related people insights and assignment history. Use the filterByCurrentUser function to retrieve personalized suggestions.
  • Added the approverInformationVisibility property to the accessPackageApprovalStage resource to control whether approver information is visible to requestors.
  • Added the endUserSettings resource type and related methods for configuring access package suggestion behavior, including related people insight levels and approver detail visibility.
  • Added workflow preview operations to the workflow resource type in Lifecycle Workflows, enabling you to validate tasks and run workflows in preview mode without affecting production users.
  • Added the customDataProvidedResourceUploadSession resource type and related methods for uploading external access data (Bring Your Own Data) for access reviews.
  • Added the customDataProvidedResource resource type, an access package resource that represents an external application whose access data is provided through the Bring Your Own Data (BYOD) flow for catalog user access reviews.

Identity and access | Identity and sign-in

  • Added the onVerifiedIdClaimValidationCustomExtension and onVerifiedIdClaimValidationListener resource types and associated methods to support custom logic for claim validation from Verified ID credential presentations during authentication flows through Microsoft Entra custom authentication extensions in External ID.
  • Added claim validation and match-confidence capabilities to Verified ID profiles, enabling stronger claim verification and more flexible matching.
  • Enhanced the x509CertificateAuthenticationMethodConfiguration resource type with the following capabilities for certificate-based authentication (CBA):
    • Scoping CBA to specific certificate authorities and restricting which groups of users can authenticate using certificates from those CAs.
    • Controlling whether issuer hints are sent to the client to filter the certificates shown in the certificate picker.
  • Updated the targetedAuthenticationMethod property of the authenticationMethodsRegistrationCampaignIncludeTarget resource to support Fido2 in addition to microsoftAuthenticator for authentication method registration campaigns. Organizations can now use registration campaigns to nudge users to register and sign in with phishing-resistant passkeys (FIDO2).

Mailbox import and export

People and workplace intelligence | Places

  • Added the servicePlans property to the desk resource to manage the service plans associated with workspace desks.
  • Added the placeId property to the place resource to provide a stable identifier across place types.

Security | Alerts and incidents

Teamwork and communications | Messaging

Added the chatMessageBody resource type to support Teams-specific message content formats, including markdown.

Contribute to Microsoft Graph

Are there scenarios you'd like Microsoft Graph to support?

  • Suggest and vote for new features by using the Microsoft Graph Feedback Portal. Some new features originate as popular requests from the developer community. The Microsoft Graph team regularly evaluates customer needs and releases new features to the beta (https://graph.microsoft.com/beta) and v1.0 (https://graph.microsoft.com/v1.0) endpoints.

  • Join the weekly Microsoft 365 platform community call and become an active member of the Microsoft Graph community. To discover the full calendar of developer calls, visit the Microsoft 365 and Power Platform community page.

  • Join our research panel to provide your input on our developer experiences.

Related content

  • Last updated on