Auflisten von policyDeletableItem-Objekten

Namespace: microsoft.graph

Rufen Sie eine Liste der policyDeletableItem-Objekte und ihrer Eigenschaften ab, wobei es sich möglicherweise um einen der folgenden gelöschten Richtlinientypen handelt:

• crossTenantAccessPolicyConfigurationPartner
• crossTenantIdentitySyncPolicyPartner
• conditionalAccessPolicy
• namedLocation

Diese API ist in den folgenden nationalen Cloudbereitstellungen verfügbar.

Berechtigungen

Wählen Sie die Berechtigungen aus, die für diese API als am wenigsten privilegiert markiert sind. Verwenden Sie eine höhere Berechtigung oder Berechtigungen nur, wenn Ihre App dies erfordert. Ausführliche Informationen zu delegierten Berechtigungen und Anwendungsberechtigungen finden Sie unter Berechtigungstypen. Weitere Informationen zu diesen Berechtigungen finden Sie in der Berechtigungsreferenz.

Berechtigungen zum Abrufen von mandantenübergreifenden Zugriffsrichtlinienobjekten

Berechtigungen zum Abrufen von Richtlinienobjekten für bedingten Zugriff

HTTP-Anforderung

Listen Sie gelöschte crossTenantAccessPolicyConfigurationPartner-Objekte auf:

GET /policies/deletedItems/crossTenantPartners

Listen Sie gelöschte crossTenantIdentitySyncPolicyPartner-Objekte auf:

GET /policies/deletedItems/crossTenantSyncPolicyPartners

Liste gelöschte conditionalAccessPolicy-Objekte auf:

GET /identity/conditionalAccess/deletedItems/policies

Listen Sie gelöschte NamedLocation-Objekte auf:

GET /identity/conditionalAccess/deletedItems/namedLocations

Optionale Abfrageparameter

Diese Methode unterstützt einige der OData-Abfrageparameter zur Anpassung der Antwort. Allgemeine Informationen finden Sie unter OData-Abfrageparameter.

Anforderungsheader

Anforderungstext

Geben Sie keinen Anforderungstext für diese Methode an.

Antwort

Bei erfolgreicher Ausführung gibt diese Methode einen 200 OK Antwortcode und eine Auflistung von policyDeletableItem-Objekten im Antworttext zurück. Die @odata.context Eigenschaft im Anforderungstext gibt an, welcher Richtlinientyp zurückgegeben wird.

Beispiele

Beispiel 1: Abrufen gelöschter crossTenantAccessPolicyConfigurationPartner-Objekte

Anforderung

Das folgende Beispiel zeigt eine Anforderung an crossTenantAccessPolicyConfigurationPartner.

GET https://graph.microsoft.com/beta/policies/deletedItems/crossTenantPartners/

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Policies.DeletedItems.CrossTenantPartners.GetAsync();

// Code snippets are only available for the latest major version. Current major version is $v0.*

// Dependencies
import (
	  "context"
	  msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
	  //other-imports
)


// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
crossTenantPartners, err := graphClient.Policies().DeletedItems().CrossTenantPartners().Get(context.Background(), nil)

// Code snippets are only available for the latest version. Current version is 6.x

GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);

CrossTenantAccessPolicyConfigurationPartnerCollectionResponse result = graphClient.policies().deletedItems().crossTenantPartners().get();

const options = {
	authProvider,
};

const client = Client.init(options);

let crossTenantPartners = await client.api('/policies/deletedItems/crossTenantPartners/')
	.version('beta')
	.get();

<?php
use Microsoft\Graph\Beta\GraphServiceClient;


$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);


$result = $graphServiceClient->policies()->deletedItems()->crossTenantPartners()->get()->wait();

Import-Module Microsoft.Graph.Beta.Identity.SignIns

Get-MgBetaPolicyDeletedItemCrossTenantPartner

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.policies.deleted_items.cross_tenant_partners.get()

Antwort

Das folgende Beispiel zeigt die Antwort.

Hinweis: Das hier gezeigte Antwortobjekt kann zur besseren Lesbarkeit gekürzt werden.

HTTP/1.1 200 OK
Content-Type: application/json

{
  "value": [
    {
      "tenantId": "01d0e717-bc90-46ba-94a9-71b4a811fddb",
      "deletedDateTime": "2025-06-18T22:58:04Z",
      "displayName": null,
      "isServiceProvider": null,
      "isInMultiTenantOrganization": false,
      "blockServiceProviderOutboundAccess": null,
      "inboundTrust": null,
      "b2bCollaborationOutbound": null,
      "b2bCollaborationInbound": null,
      "b2bDirectConnectOutbound": null,
      "b2bDirectConnectInbound": null,
      "tenantRestrictions": null,
      "invitationRedemptionIdentityProviderConfiguration": null,
      "crossCloudMeetingConfiguration": {
        "inboundAllowed": null,
        "outboundAllowed": null
      },
      "automaticUserConsentSettings": {
        "inboundAllowed": null,
        "outboundAllowed": null
      },
      "protectedContentSharing": {
        "inboundAllowed": null,
        "outboundAllowed": null
      }
    },
    {
      "tenantId": "809cbbd2-2325-4c17-bd51-f8f098db19c8",
      "deletedDateTime": "2025-06-18T22:53:31Z",
      "displayName": null,
      "isServiceProvider": null,
      "isInMultiTenantOrganization": false,
      "blockServiceProviderOutboundAccess": null,
      "inboundTrust": null,
      "b2bCollaborationOutbound": null,
      "b2bCollaborationInbound": null,
      "b2bDirectConnectOutbound": null,
      "b2bDirectConnectInbound": null,
      "tenantRestrictions": null,
      "invitationRedemptionIdentityProviderConfiguration": null,
      "crossCloudMeetingConfiguration": {
        "inboundAllowed": null,
        "outboundAllowed": null
      },
      "automaticUserConsentSettings": {
        "inboundAllowed": null,
        "outboundAllowed": null
      },
      "protectedContentSharing": {
        "inboundAllowed": null,
        "outboundAllowed": null
      }
    }
  ]
}

Beispiel 2: Abrufen gelöschter crossTenantIdentitySyncPolicyPartner-Objekte

Anforderung

Das folgende Beispiel zeigt eine Anforderung für crossTenantIdentitySyncPolicyPartner.

GET https://graph.microsoft.com/beta/policies/deletedItems/crossTenantSyncPolicyPartners/

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Policies.DeletedItems.CrossTenantSyncPolicyPartners.GetAsync();

// Code snippets are only available for the latest major version. Current major version is $v0.*

// Dependencies
import (
	  "context"
	  msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
	  //other-imports
)


// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
crossTenantSyncPolicyPartners, err := graphClient.Policies().DeletedItems().CrossTenantSyncPolicyPartners().Get(context.Background(), nil)

// Code snippets are only available for the latest version. Current version is 6.x

GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);

CrossTenantIdentitySyncPolicyPartnerCollectionResponse result = graphClient.policies().deletedItems().crossTenantSyncPolicyPartners().get();

const options = {
	authProvider,
};

const client = Client.init(options);

let crossTenantSyncPolicyPartners = await client.api('/policies/deletedItems/crossTenantSyncPolicyPartners/')
	.version('beta')
	.get();

<?php
use Microsoft\Graph\Beta\GraphServiceClient;


$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);


$result = $graphServiceClient->policies()->deletedItems()->crossTenantSyncPolicyPartners()->get()->wait();

Import-Module Microsoft.Graph.Beta.Identity.SignIns

Get-MgBetaPolicyDeletedItemCrossTenantSyncPolicyPartner

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.policies.deleted_items.cross_tenant_sync_policy_partners.get()

Antwort

Das folgende Beispiel zeigt die Antwort.

Hinweis: Das hier gezeigte Antwortobjekt kann zur besseren Lesbarkeit gekürzt werden.

HTTP/1.1 200 OK
Content-Type: application/json

{
  "value": [
    {
      "tenantId": "01d0e717-bc90-46ba-94a9-71b4a811fddb",
      "displayName": null,
      "deletedDateTime": "2025-06-18T23:11:01Z",
      "externalCloudAuthorizedApplicationId": null,
      "groupSyncInbound": null,
      "userSyncInbound": null
    }
  ]
}

Beispiel 3: Abrufen gelöschter conditionalAccessPolicy-Objekte

Anforderung

Das folgende Beispiel zeigt eine Anforderung für eine conditionalAccessPolicy.

GET https://graph.microsoft.com/beta/identity/conditionalAccess/deletedItems/policies

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.ConditionalAccess.DeletedItems.Policies.GetAsync();

// Code snippets are only available for the latest major version. Current major version is $v0.*

// Dependencies
import (
	  "context"
	  msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
	  //other-imports
)


// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
policies, err := graphClient.Identity().ConditionalAccess().DeletedItems().Policies().Get(context.Background(), nil)

// Code snippets are only available for the latest version. Current version is 6.x

GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);

ConditionalAccessPolicyCollectionResponse result = graphClient.identity().conditionalAccess().deletedItems().policies().get();

const options = {
	authProvider,
};

const client = Client.init(options);

let policies = await client.api('/identity/conditionalAccess/deletedItems/policies')
	.version('beta')
	.get();

<?php
use Microsoft\Graph\Beta\GraphServiceClient;


$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);


$result = $graphServiceClient->identity()->conditionalAccess()->deletedItems()->policies()->get()->wait();

Import-Module Microsoft.Graph.Beta.Identity.SignIns

Get-MgBetaIdentityConditionalAccessDeletedItemPolicy

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.identity.conditional_access.deleted_items.policies.get()

Antwort

Das folgende Beispiel zeigt die Antwort.

Hinweis: Das hier gezeigte Antwortobjekt kann zur besseren Lesbarkeit gekürzt werden.

HTTP/1.1 200 OK
Content-Type: application/json

{
    "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/deletedItems/policies",
    "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET identity/conditionalAccess/deletedItems/policies?$select=conditions,createdDateTime",
    "value": [
        {
            "id": "1a71ea59-9583-4f16-9de4-47ecb42adfc6",
            "templateId": null,
            "displayName": "Demo",
            "createdDateTime": "2024-06-26T22:13:41.3634477Z",
            "modifiedDateTime": "2025-01-22T17:30:09.4040798Z",
            "state": "disabled",
            "deletedDateTime": "2025-09-12T17:01:05Z",
            "partialEnablementStrategy": null,
            "sessionControls": null,
            "conditions": {
                "userRiskLevels": [],
                "signInRiskLevels": [],
                "clientAppTypes": [
                    "all"
                ],
                "platforms": null,
                "times": null,
                "deviceStates": null,
                "devices": null,
                "applications": {
                    "includeApplications": [
                        "None"
                    ],
                    "excludeApplications": [],
                    "includeUserActions": [],
                    "includeAuthenticationContextClassReferences": [],
                    "applicationFilter": null
                },
                "users": {
                    "includeUsers": [
                        "None"
                    ],
                    "excludeUsers": [],
                    "includeGroups": [],
                    "excludeGroups": [],
                    "includeRoles": [],
                    "excludeRoles": [],
                    "includeGuestsOrExternalUsers": null,
                    "excludeGuestsOrExternalUsers": null
                },
                "locations": {
                    "includeLocations": [
                        "41f20046-7b5b-4721-b049-eccd63d614ef"
                    ],
                    "excludeLocations": []
                },
                "clientApplications": {
                    "includeServicePrincipals": [
                        "ServicePrincipalsInMyTenant"
                    ],
                    "excludeServicePrincipals": []
                }
            },
            "grantControls": {
                "operator": "OR",
                "builtInControls": [
                    "block"
                ],
                "customAuthenticationFactors": [],
                "termsOfUse": [],
                "authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/deletedItems/policies('1a71ea59-9583-4f16-9de4-47ecb42adfc6')/grantControls/authenticationStrength/$entity",
                "authenticationStrength": null
            }
        }
    ]
}

Beispiel 4: Abrufen gelöschter NamedLocation-Objekte

Anforderung

Das folgende Beispiel zeigt eine Anforderung für einen namedLocation.

GET https://graph.microsoft.com/beta/identity/conditionalAccess/deletedItems/namedLocations

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.ConditionalAccess.DeletedItems.NamedLocations.GetAsync();

// Code snippets are only available for the latest major version. Current major version is $v0.*

// Dependencies
import (
	  "context"
	  msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
	  //other-imports
)


// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
namedLocations, err := graphClient.Identity().ConditionalAccess().DeletedItems().NamedLocations().Get(context.Background(), nil)

// Code snippets are only available for the latest version. Current version is 6.x

GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);

NamedLocationCollectionResponse result = graphClient.identity().conditionalAccess().deletedItems().namedLocations().get();

const options = {
	authProvider,
};

const client = Client.init(options);

let namedLocations = await client.api('/identity/conditionalAccess/deletedItems/namedLocations')
	.version('beta')
	.get();

<?php
use Microsoft\Graph\Beta\GraphServiceClient;


$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);


$result = $graphServiceClient->identity()->conditionalAccess()->deletedItems()->namedLocations()->get()->wait();

Import-Module Microsoft.Graph.Beta.Identity.SignIns

Get-MgBetaIdentityConditionalAccessDeletedItemNamedLocation

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.identity.conditional_access.deleted_items.named_locations.get()

Antwort

Das folgende Beispiel zeigt die Antwort.

Hinweis: Das hier gezeigte Antwortobjekt kann zur besseren Lesbarkeit gekürzt werden.

HTTP/1.1 200 OK
Content-Type: application/json

{
    "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/deletedItems/namedLocations",
    "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET identity/conditionalAccess/deletedItems/namedLocations?$select=createdDateTime,displayName",
    "value": [
        {
            "@odata.type": "#microsoft.graph.countryNamedLocation",
            "id": "1a4c0633-332f-4691-a27a-fd8334938a62",
            "displayName": "Calvin Test USA",
            "modifiedDateTime": "2025-09-05T22:12:01.4444669Z",
            "createdDateTime": "2025-09-05T22:12:01.4444669Z",
            "deletedDateTime": "2025-09-08T16:03:43Z",
            "countriesAndRegions": [
                "US"
            ],
            "includeUnknownCountriesAndRegions": false,
            "countryLookupMethod": "clientIpAddress"
        },
        {
            "@odata.type": "#microsoft.graph.ipNamedLocation",
            "id": "003fe866-1f11-4356-8ddc-22e52f491cc5",
            "displayName": "Pallav IP Test",
            "modifiedDateTime": "2025-09-10T15:36:17.992593Z",
            "createdDateTime": "2025-09-10T15:35:45.6440841Z",
            "deletedDateTime": "2025-09-12T16:56:35Z",
            "isTrusted": false,
            "ipRanges": [
                {
                    "@odata.type": "#microsoft.graph.iPv4CidrRange",
                    "cidrAddress": "127.30.27.128/30"
                }
            ]
        }
    ]
}