Skip to main content

device_registration_policy

Creates, updates, deletes, gets or lists a device_registration_policy resource.

Overview

Namedevice_registration_policy
TypeResource
Identra_id.policies.device_registration_policy

Fields

The following fields are returned by SELECT queries:

Retrieved navigation property

NameDatatypeDescription
idstringThe unique identifier for an entity. Read-only.
azureADJoinSpecifies the authorization policy for controlling registration of new devices using Microsoft Entra join within your organization. Required. For more information, see What is a device identity?.
azureADRegistrationSpecifies the authorization policy for controlling registration of new devices using Microsoft Entra registered within your organization. Required. For more information, see What is a device identity?.
descriptionstringThe description of the device registration policy. Always set to Tenant-wide policy that manages intial provisioning controls using quota restrictions, additional authentication and authorization checks. Read-only.
displayNamestringThe name of the device registration policy. Always set to Device Registration Policy. Read-only.
localAdminPasswordSpecifies the setting for Local Admin Password Solution (LAPS) within your organization.
multiFactorAuthConfigurationstring (notRequired, required, unknownFutureValue) (title: multiFactorAuthConfiguration)
userDeviceQuotanumber (int32)Specifies the maximum number of devices that a user can have within your organization before blocking new device registrations. The default value is set to 50. If this property isn't specified during the policy update operation, it's automatically reset to 0 to indicate that users aren't allowed to join any devices.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectRead the properties and relationships of a deviceRegistrationPolicy object. Represents deviceRegistrationPolicy quota restrictions, additional authentication, and authorization policies to register device identities to your organization.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription

SELECT examples

Read the properties and relationships of a deviceRegistrationPolicy object. Represents deviceRegistrationPolicy quota restrictions, additional authentication, and authorization policies to register device identities to your organization.

SELECT
id,
azureADJoin,
azureADRegistration,
description,
displayName,
localAdminPassword,
multiFactorAuthConfiguration,
userDeviceQuota
FROM entra_id.policies.device_registration_policy
;