microsoftgraph · shsagir · Jun 25, 2026 · Jun 18, 2026 · Jun 18, 2026 · Jun 18, 2026
diff --git a/.acrolinx-config.edn b/.acrolinx-config.edn
diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json
@@ -1,5 +1,15 @@
 {
     "redirections": [
+        {
+            "source_path": "api-reference/beta/resources/accessreviewdatauploadtriggercallbackdata.md",
+            "redirect_url": "/graph/api/resources/customdataprovidedresourcepayloads-data?view=graph-rest-beta",
+            "redirect_document_id": false
+        },
+        {
+            "source_path": "api-reference/beta/resources/accessreviewresourcedatauploadsessioncontextdata.md",
+            "redirect_url": "/graph/api/resources/customdataprovidedresourcepayloads-accessreviewcontextdata?view=graph-rest-beta",
+            "redirect_document_id": false
+        },
         {
             "source_path": "api-reference/beta/api/readingassignmentsubmission-get.md",
             "redirect_url": "api-reference/beta/api/reportsroot-list-readingassignmentsubmissions.md",

diff --git a/api-reference/beta/api/accesspackagesubject-update.md b/api-reference/beta/api/accesspackagesubject-update.md
@@ -24,6 +24,9 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "accesspackagesubject_update" } -->
 [!INCLUDE [permissions-table](../includes/permissions/accesspackagesubject-update-permissions.md)]
 
+[!INCLUDE [rbac-entitlement-catalog-owner-write](../includes/rbac-for-apis/rbac-entitlement-management-catalog-owner-apis-write.md)]
+
+
 ## HTTP request
 <!-- {
   "blockType": "ignored"

diff --git a/api-reference/beta/api/accessreviewinstance-filterbycurrentuser.md b/api-reference/beta/api/accessreviewinstance-filterbycurrentuser.md
@@ -197,7 +197,6 @@ GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/definition
 
 ---
 
-
 #### Response
 >**Note:** The response object shown here might be shortened for readability.
 <!-- {
@@ -275,7 +274,6 @@ GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/definition
 
 ---
 
-
 #### Response
 >**Note:** The response object shown here might be shortened for readability.
 <!-- {

diff --git a/api-reference/beta/api/accessreviewinstancedecisionitem-filterbycurrentuser.md b/api-reference/beta/api/accessreviewinstancedecisionitem-filterbycurrentuser.md
@@ -467,7 +467,6 @@ GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/definition
 
 ---
 
-
 #### Response
 >**Note:** The response object shown here might be shortened for readability.
 <!-- {

diff --git a/api-reference/beta/api/adminwindowsupdates-list-updatableassets-azureaddevice.md b/api-reference/beta/api/adminwindowsupdates-list-updatableassets-azureaddevice.md
@@ -116,18 +116,39 @@ Content-Type: application/json
       "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",
       "id": "983f03cd-03cd-983f-cd03-3f98cd033f98",
       "errors": [],
-      "enrollments": [
-        {
-          "@odata.type": "microsoft.graph.windowsUpdates.updateManagementEnrollment",
-          "updateCategory": "feature"
+      "enrollment": {
+        "feature": {
+          "enrollmentState": "enrolled", 
+          "lastModifiedDateTime": "2024-01-31T23:34:50.3183446Z"
+        },
+        "quality": {
+          "enrollmentState": "notEnrolled", 
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
+        }, 
+        "driver": {
+          "enrollmentState": "enrolling", 
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
         }
-      ]
+      }
     },
     {
       "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",
       "id": "90b91efa-6d46-42cd-ad4d-381831773a85",
       "errors": [],
-      "enrollments": []
+      "enrollment": {
+        "feature": {
+          "enrollmentState": "enrolled", 
+          "lastModifiedDateTime": "2024-01-31T23:34:50.3183446Z"
+        },
+        "quality": {
+          "enrollmentState": "notEnrolled", 
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
+        }, 
+        "driver": {
+          "enrollmentState": "enrolling", 
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
+        }
+      }
     },
     {
       "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",
@@ -137,9 +158,21 @@ Content-Type: application/json
           "@odata.type": "microsoft.graph.windowsUpdates.azureADDeviceRegistrationError"
         }
       ],
-      "enrollments": []
+      "enrollment": {
+        "feature": {
+          "enrollmentState": "enrolled", 
+          "lastModifiedDateTime": "2024-01-31T23:34:50.3183446Z"
+        },
+        "quality": {
+          "enrollmentState": "notEnrolled", 
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
+        }, 
+        "driver": {
+          "enrollmentState": "notEnrolled", 
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
+        }
+      }
     }
   ]
 }
 ```
-
diff --git a/api-reference/beta/api/adminwindowsupdates-list-updatableassets.md b/api-reference/beta/api/adminwindowsupdates-list-updatableassets.md
@@ -118,14 +118,21 @@ Content-Type: application/json
       "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",
       "id": "983f03cd-03cd-983f-cd03-3f98cd033f98",
       "errors": [],
-      "enrollments": [
-        {
-          "@odata.type": "microsoft.graph.windowsUpdates.updateManagementEnrollment",
-          "updateCategory": "feature"
+      "enrollment": {
+        "feature": {
+          "enrollmentState": "enrolled",
+          "lastModifiedDateTime": "2024-01-31T23:34:50.3183446Z"
+        },
+        "quality": {
+          "enrollmentState": "notEnrolled",
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
+        },
+        "driver": {
+          "enrollmentState": "enrolling",
+          "lastModifiedDateTime": "2024-03-31T23:34:50.3183446Z"
         }
-      ]
+      }
     }
   ]
 }
 ```
-
diff --git a/api-reference/beta/api/cloudpcprovisioningpolicy-apply.md b/api-reference/beta/api/cloudpcprovisioningpolicy-apply.md
@@ -5,7 +5,7 @@ author: "Guoan-Tang"
 ms.localizationpriority: medium
 ms.subservice: "cloud-pc"
 doc_type: apiPageType
-ms.date: 05/18/2026
+ms.date: 06/01/2026
 ---
 
 # cloudPcProvisioningPolicy: apply
@@ -51,8 +51,9 @@ The following table shows the parameters that you can use with this method.
 
 |Parameter|Type|Description|
 |:---|:---|:---|
+|isForceUserLogoffEnabled|Boolean|For *Frontline shared* only. Indicates whether active Cloud PC sessions are forcibly signed out when reprovisioning begins. When `true`, connected users are immediately signed out and reprovisioning starts right away; **reservePercentage** must be set to `0` when this parameter is `true`, otherwise the request fails. When `false`, reprovisioning waits until the user disconnects. The default value is `false`. Optional.|
 |policySettings|cloudPcPolicySettingType|The target property of the apply action. The possible values are: `region`, `singleSignOn`, `unknownFutureValue`. The default value is `region`. This action applies `region` as a value if this parameter is `null`.|
-|reservePercentage|Int32|For `Frontline shared` only. The percentage of Cloud PCs to keep available. Administrators can set this property to a value from 0 to 99. Cloud PCs are reprovisioned only when there are no active and connected Cloud PC users.|
+|reservePercentage|Int32|For *Frontline shared* only. The percentage of Cloud PCs to keep available. Administrators can set this property to a value from `0` to `99`. Cloud PCs are reprovisioned only when there are no active and connected Cloud PC users.|
 
 ## Response
 
@@ -144,6 +145,7 @@ POST https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/provision
 Content-Type: application/json
 
 {
+  "isForceUserLogoffEnabled": false,
   "reservePercentage": 80
 }
 ```
@@ -187,3 +189,68 @@ The following example shows the response.
 ``` http
 HTTP/1.1 204 No Content
 ```
+
+### Example 3: Reprovision frontline shared Cloud PCs and force user sign-out
+
+The following example shows how to immediately reprovision frontline shared Cloud PCs under a specified provisioning policy by forcibly signing out active sessions. When **isForceUserLogoffEnabled** is `true`, **reservePercentage** must be set to `0`.
+
+#### Request
+
+The following example shows a request.
+
+# [HTTP](#tab/http)
+<!-- {
+  "blockType": "request",
+  "name": "apply_cloudpcprovisioningpolicy_frontline_forcelogoff"
+}
+-->
+
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/provisioningPolicies/1d164206-bf41-4fd2-8424-a3192d39ffff/apply
+Content-Type: application/json
+
+{
+  "isForceUserLogoffEnabled": true,
+  "reservePercentage": 0
+}
+```
+
+# [C#](#tab/csharp)
+[!INCLUDE [sample-code](../includes/snippets/csharp/apply-cloudpcprovisioningpolicy-frontline-forcelogoff-csharp-snippets.md)]
+[!INCLUDE [sdk-documentation](../includes/snippets/snippets-sdk-documentation-link.md)]
+
+# [Go](#tab/go)
+[!INCLUDE [sample-code](../includes/snippets/go/apply-cloudpcprovisioningpolicy-frontline-forcelogoff-go-snippets.md)]
+[!INCLUDE [sdk-documentation](../includes/snippets/snippets-sdk-documentation-link.md)]
+
+# [Java](#tab/java)
+[!INCLUDE [sample-code](../includes/snippets/java/apply-cloudpcprovisioningpolicy-frontline-forcelogoff-java-snippets.md)]
+[!INCLUDE [sdk-documentation](../includes/snippets/snippets-sdk-documentation-link.md)]
+
+# [JavaScript](#tab/javascript)
+[!INCLUDE [sample-code](../includes/snippets/javascript/apply-cloudpcprovisioningpolicy-frontline-forcelogoff-javascript-snippets.md)]
+[!INCLUDE [sdk-documentation](../includes/snippets/snippets-sdk-documentation-link.md)]
+
+# [PHP](#tab/php)
+[!INCLUDE [sample-code](../includes/snippets/php/apply-cloudpcprovisioningpolicy-frontline-forcelogoff-php-snippets.md)]
+[!INCLUDE [sdk-documentation](../includes/snippets/snippets-sdk-documentation-link.md)]
+
+# [Python](#tab/python)
+[!INCLUDE [sample-code](../includes/snippets/python/apply-cloudpcprovisioningpolicy-frontline-forcelogoff-python-snippets.md)]
+[!INCLUDE [sdk-documentation](../includes/snippets/snippets-sdk-documentation-link.md)]
+
+---
+
+#### Response
+
+The following example shows the response.
+
+<!-- {
+  "blockType": "response",
+  "truncated": true
+}
+-->
+
+``` http
+HTTP/1.1 204 No Content
+```
diff --git a/...eference/beta/api/cloudpcprovisioningpolicy-retrievepolicyupdatestatusresult.md b/...eference/beta/api/cloudpcprovisioningpolicy-retrievepolicyupdatestatusresult.md
@@ -0,0 +1,86 @@
+---
+title: "cloudPcProvisioningPolicy: retrievePolicyUpdateStatusResult"
+description: "Retrieve the pending apply status of a provisioning policy to determine whether unapplied changes exist for Cloud PCs."
+author: "zhuangzhuang131419"
+ms.localizationpriority: medium
+ms.subservice: "cloud-pc"
+doc_type: apiPageType
+ms.date: 06/01/2026
+---
+
+# cloudPcProvisioningPolicy: retrievePolicyUpdateStatusResult
+
+Namespace: microsoft.graph
+
+[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
+
+Retrieve the pending apply status of a [provisioning policy](../resources/cloudpcprovisioningpolicy.md) to determine whether unapplied changes exist for Cloud PCs.
+
+## Permissions
+
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
+
+<!-- { "blockType": "permissions", "name": "cloudpcprovisioningpolicy_retrievepolicyupdatestatusresult" } -->
+[!INCLUDE [permissions-table](../includes/permissions/cloudpcprovisioningpolicy-retrievepolicyupdatestatusresult-permissions.md)]
+
+## HTTP request
+
+<!-- {
+  "blockType": "ignored"
+}
+-->
+
+``` http
+GET /deviceManagement/virtualEndpoint/provisioningPolicies/{id}/retrievePolicyUpdateStatusResult
+```
+
+## Request headers
+
+|Name|Description|
+|:---|:---|
+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
+
+## Request body
+
+Don't supply a request body for this method.
+
+## Response
+
+If successful, this function returns a `200 OK` response code and a [cloudPcPolicyPendingApplyStatusResult](../resources/cloudpcpolicypendingapplystatusresult.md) in the response body.
+
+## Examples
+
+### Request
+
+The following example shows a request.
+
+<!-- {
+  "blockType": "request",
+  "name": "cloudpcprovisioningpolicy-retrievePolicyUpdateStatusResult"
+}
+-->
+
+``` http
+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/provisioningPolicies/b0c2d35f-3385-46c8-a6f5-6c3dfad7708b/retrievePolicyUpdateStatusResult
+```
+
+### Response
+
+The following example shows the response.
+
+<!-- {
+  "blockType": "response",
+  "truncated": true,
+  "@odata.type": "microsoft.graph.cloudPcPolicyPendingApplyStatusResult"
+}
+-->
+
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+
+{
+    "@odata.type": "https://graph.microsoft.com/beta/$metadata#cloudPcPolicyPendingApplyStatusResult",
+    "hasUnappliedPolicyUpdate": true
+}
+```
-Original file line number
+Diff line change
@@ Expand Up @@
     ---
     #### Response
     >**Note:** The response object shown here might be shortened for readability.
     <!-- {
@@ Expand Down Expand Up @@
     ---
     #### Response
     >**Note:** The response object shown here might be shortened for readability.
     <!-- {
@@ Expand Down @@