Microsoft Graph identity.conditionalAccessRoot API
The identity.conditionalAccessRoot API from Microsoft Graph — 25 operation(s) for identity.conditionalaccessroot.
Microsoft Graph identity.conditionalAccessRoot API is one of 564 APIs that Microsoft Graph publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
The published artifact set on APIs.io includes an OpenAPI specification and API documentation.
This API exposes 45 operations across 25 paths, and defines 72 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.
Requests are made against a single base URL, https://graph.microsoft.com/v1.0.
45 operations
25 paths
72 schemas
7 DELETE23 GET7 PATCH8 POST
Metadata
The identity and technical contract details declared by the specification.
Paths & Operations 45
Across 25 paths, the API surfaces 45 operations — 7 DELETE, 23 GET, 7 PATCH, 8 POST. Each is listed below with its method, path, parameters, and response codes.
identity.conditionalAccessRoot 45
GET
/identity/conditionalAccess/authenticationContextClassReferences
Microsoft Graph List authenticationContextClassReferences
POST
/identity/conditionalAccess/authenticationContextClassReferences
Microsoft Graph Create new navigation property to authenticationContextClassReferences for identity
GET
/identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id}
Microsoft Graph Get authenticationContextClassReference
PATCH
/identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id}
Microsoft Graph Create or Update authenticationContextClassReference
DELETE
/identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id}
Microsoft Graph Delete authenticationContextClassReference
GET
/identity/conditionalAccess/authenticationContextClassReferences/$count
Microsoft Graph Get the number of the resource
GET
/identity/conditionalAccess/authenticationStrength
Microsoft Graph Get authenticationStrength from identity
PATCH
/identity/conditionalAccess/authenticationStrength
Microsoft Graph Update the navigation property authenticationStrength in identity
DELETE
/identity/conditionalAccess/authenticationStrength
Microsoft Graph Delete navigation property authenticationStrength for identity
GET
/identity/conditionalAccess/authenticationStrength/authenticationMethodModes
Microsoft Graph List authenticationMethodModes
POST
/identity/conditionalAccess/authenticationStrength/authenticationMethodModes
Microsoft Graph Create new navigation property to authenticationMethodModes for identity
GET
/identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id}
Microsoft Graph Get authenticationMethodModes from identity
PATCH
/identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id}
Microsoft Graph Update the navigation property authenticationMethodModes in identity
DELETE
/identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id}
Microsoft Graph Delete navigation property authenticationMethodModes for identity
GET
/identity/conditionalAccess/authenticationStrength/authenticationMethodModes/$count
Microsoft Graph Get the number of the resource
GET
/identity/conditionalAccess/authenticationStrength/policies
Microsoft Graph Get policies from identity
POST
/identity/conditionalAccess/authenticationStrength/policies
Microsoft Graph Create new navigation property to policies for identity
GET
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}
Microsoft Graph Get policies from identity
PATCH
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}
Microsoft Graph Update the navigation property policies in identity
DELETE
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}
Microsoft Graph Delete navigation property policies for identity
GET
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations
Microsoft Graph List combinationConfigurations
POST
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations
Microsoft Graph Create authenticationCombinationConfiguration
GET
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id}
Microsoft Graph Get authenticationCombinationConfiguration
PATCH
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id}
Microsoft Graph Update authenticationCombinationConfiguration
DELETE
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id}
Microsoft Graph Delete authenticationCombinationConfiguration
GET
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/$count
Microsoft Graph Get the number of the resource
POST
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/updateAllowedCombinations
Microsoft Graph Invoke action updateAllowedCombinations
GET
/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/usage()
Microsoft Graph Invoke function usage
GET
/identity/conditionalAccess/authenticationStrength/policies/$count
Microsoft Graph Get the number of the resource
POST
/identity/conditionalAccess/evaluate
Microsoft Graph Invoke action evaluate
GET
/identity/conditionalAccess/namedLocations
Microsoft Graph List namedLocations
POST
/identity/conditionalAccess/namedLocations
Microsoft Graph Create namedLocation
GET
/identity/conditionalAccess/namedLocations/{namedLocation-id}
Microsoft Graph Get countryNamedLocation
PATCH
/identity/conditionalAccess/namedLocations/{namedLocation-id}
Microsoft Graph Update countryNamedLocation
DELETE
/identity/conditionalAccess/namedLocations/{namedLocation-id}
Microsoft Graph Delete countryNamedLocation
GET
/identity/conditionalAccess/namedLocations/$count
Microsoft Graph Get the number of the resource
GET
/identity/conditionalAccess/policies
Microsoft Graph List policies
POST
/identity/conditionalAccess/policies
Microsoft Graph Create conditionalAccessPolicy
GET
/identity/conditionalAccess/policies/{conditionalAccessPolicy-id}
Microsoft Graph Get conditionalAccessPolicy
PATCH
/identity/conditionalAccess/policies/{conditionalAccessPolicy-id}
Microsoft Graph Update conditionalaccesspolicy
DELETE
/identity/conditionalAccess/policies/{conditionalAccessPolicy-id}
Microsoft Graph Delete conditionalAccessPolicy
GET
/identity/conditionalAccess/policies/$count
Microsoft Graph Get the number of the resource
GET
/identity/conditionalAccess/templates
Microsoft Graph List conditionalAccessTemplates
GET
/identity/conditionalAccess/templates/{conditionalAccessTemplate-id}
Microsoft Graph Get conditionalAccessTemplate
GET
/identity/conditionalAccess/templates/$count
Microsoft Graph Get the number of the resource
Schemas 72
The contract defines 72 schemas that model the data the API accepts and returns. The most detailed are microsoft.graph.deviceInfo (30 properties), microsoft.graph.conditionalAccessConditionSet (13 properties), microsoft.graph.signInConditions (11 properties), microsoft.graph.conditionalAccessUsers (9 properties). Each schema is shown below with its type and property counts.
ODataCountResponse
integer
microsoft.graph.conditionalAccessLocations
object
3 properties
1 required
microsoft.graph.conditionalAccessGuestsOrExternalUsers
object
3 properties
1 required
microsoft.graph.whatIfAnalysisReasons
string
microsoft.graph.authenticationStrengthPolicyType
string
microsoft.graph.conditionalAccessAuthenticationFlows
object
2 properties
1 required
microsoft.graph.authenticationCombinationConfigurationCollectionResponse
object
microsoft.graph.ODataErrors.InnerError
object
4 properties
1 required
microsoft.graph.signInFrequencyInterval
string
microsoft.graph.conditionalAccessSessionControls
object
7 properties
1 required
microsoft.graph.conditionalAccessPolicyCollectionResponse
object
microsoft.graph.persistentBrowserSessionMode
string
microsoft.graph.conditionalAccessPolicyState
string
microsoft.graph.conditionalAccessFilter
object
3 properties
1 required
microsoft.graph.namedLocation
microsoft.graph.authenticationStrengthPolicy
microsoft.graph.riskLevel
string
microsoft.graph.conditionalAccessPolicy
microsoft.graph.conditionalAccessPlatforms
object
3 properties
1 required
microsoft.graph.ODataErrors.ErrorDetails
object
3 properties
2 required
microsoft.graph.signInFrequencySessionControl
microsoft.graph.conditionalAccessInsiderRiskLevels
string
microsoft.graph.conditionalAccessSessionControl
object
2 properties
1 required
microsoft.graph.authenticationCombinationConfiguration
microsoft.graph.secureSignInSessionControl
microsoft.graph.conditionalAccessApplications
object
6 properties
1 required
microsoft.graph.authenticationMethodModes
string
microsoft.graph.authenticationStrengthRoot
microsoft.graph.conditionalAccessUsers
object
9 properties
1 required
microsoft.graph.conditionalAccessGrantControl
string
microsoft.graph.conditionalAccessTransferMethods
string
microsoft.graph.signinFrequencyType
string
microsoft.graph.authenticationMethodModeDetail
microsoft.graph.authenticationFlow
object
2 properties
1 required
microsoft.graph.updateAllowedCombinationsResult
object
5 properties
1 required
microsoft.graph.baseAuthenticationMethod
string
microsoft.graph.insiderRiskLevel
string
microsoft.graph.namedLocationCollectionResponse
object
microsoft.graph.conditionalAccessExternalTenantsMembershipKind
string
microsoft.graph.conditionalAccessDevicePlatform
string
microsoft.graph.entity
object
2 properties
1 required
microsoft.graph.cloudAppSecuritySessionControlType
string
microsoft.graph.cloudAppSecuritySessionControl
microsoft.graph.conditionalAccessExternalTenants
object
2 properties
1 required
microsoft.graph.applicationEnforcedRestrictionsSessionControl
microsoft.graph.filterMode
string
microsoft.graph.persistentBrowserSessionControl
microsoft.graph.conditionalAccessTemplateCollectionResponse
object
microsoft.graph.signInContext
object
1 property
1 required
microsoft.graph.signInConditions
object
11 properties
1 required
microsoft.graph.signInFrequencyAuthenticationType
string
microsoft.graph.authenticationMethodModeDetailCollectionResponse
object
microsoft.graph.conditionalAccessPolicyDetail
object
4 properties
1 required
microsoft.graph.templateScenarios
string
microsoft.graph.whatIfAnalysisResult
microsoft.graph.conditionalAccessDevices
object
2 properties
1 required
microsoft.graph.ODataErrors.MainError
object
5 properties
2 required
microsoft.graph.signInIdentity
object
1 property
1 required
microsoft.graph.authenticationStrengthRequirements
string
microsoft.graph.conditionalAccessConditionSet
object
13 properties
1 required
microsoft.graph.deviceInfo
object
30 properties
1 required
microsoft.graph.ODataErrors.ODataError
object
1 property
1 required
microsoft.graph.conditionalAccessGrantControls
object
6 properties
1 required
microsoft.graph.conditionalAccessTemplate
microsoft.graph.conditionalAccessClientApplications
object
4 properties
1 required
microsoft.graph.authenticationStrengthPolicyCollectionResponse
object
microsoft.graph.conditionalAccessGuestOrExternalUserTypes
string
microsoft.graph.conditionalAccessClientApp
string
microsoft.graph.authenticationContextClassReferenceCollectionResponse
object
microsoft.graph.authenticationStrengthUsage
object
3 properties
1 required
microsoft.graph.authenticationContextClassReference
BaseCollectionPaginationCountResponse
object
2 properties
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
More from Microsoft Graph 12
Other APIs Microsoft Graph publishes across the network.
Microsoft Graph Admin.admin API
Microsoft Graph admin.adminMicrosoft365Apps API
Microsoft Graph admin.adminReportSettings API
Microsoft Graph Admin Consent Policy API
Microsoft Graph Admin.edge API
Microsoft Graph admin.peopleAdminSettings API
Microsoft Graph admin.serviceAnnouncement API
Microsoft Graph Admin.sharepoint API
Microsoft Graph Administration API
Microsoft Graph Administrative Units API
Microsoft Graph Agreement Acceptances API
Microsoft Graph Agreement File Localizations API
Where this information came from
This is an independent, third-party profile of Microsoft Graph identity.conditionalAccessRoot API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.