diff --git a/schemas/beta-Bleu.csdl b/schemas/beta-Bleu.csdl
index a3a57edd..d7325d12 100644
--- a/schemas/beta-Bleu.csdl
+++ b/schemas/beta-Bleu.csdl
@@ -1958,6 +1958,12 @@
         <Member Name="pushNotification" Value="9" />
         <Member Name="remoteLock" Value="10" />
       </EnumType>
+      <EnumType Name="deviceComplianceScriptPlatformType">
+        <Member Name="windows10" Value="0" />
+        <Member Name="linux" Value="1" />
+        <Member Name="macOS" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="deviceComplianceScriptRuleDataType">
         <Member Name="none" Value="0" />
         <Member Name="boolean" Value="1" />
@@ -9623,6 +9629,7 @@
       <ComplexType Name="exclusionGroupAssignmentTarget" BaseType="graph.groupAssignmentTarget" />
       <ComplexType Name="expeditedWindowsQualityUpdateSettings">
         <Property Name="daysUntilForcedReboot" Type="Edm.Int32" Nullable="false" />
+        <Property Name="qualityUpdateCatalogItemId" Type="Edm.String" />
         <Property Name="qualityUpdateRelease" Type="Edm.String" Nullable="false" />
       </ComplexType>
       <ComplexType Name="expirationPattern">
@@ -15158,6 +15165,7 @@
         <Property Name="customData" Type="Collection(graph.keyValue)" />
         <Property Name="customKeyValueData" Type="Collection(graph.keyValuePair)" />
         <Property Name="fingerprint" Type="Edm.String" />
+        <Property Name="lockdownExclusionList" Type="Collection(Edm.String)" />
         <Property Name="microsoftTunnelSiteId" Type="Edm.String" />
         <Property Name="proxyExclusionList" Type="Collection(Edm.String)" />
         <Property Name="proxyServer" Type="graph.vpnProxyServer" />
@@ -15893,6 +15901,7 @@
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
         <Property Name="eTag" Type="Edm.String" />
         <Property Name="extendedKeyUsages" Type="Collection(graph.extendedKeyUsage)" />
+        <Property Name="geographicRegion" Type="Edm.String" />
         <Property Name="issuerCommonName" Type="Edm.String" />
         <Property Name="keyPlatform" Type="graph.cloudCertificationAuthorityKeyPlatformType" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
@@ -16808,6 +16817,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="enforceSignatureCheck" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="platform" Type="graph.deviceComplianceScriptPlatformType" />
         <Property Name="publisher" Type="Edm.String" />
         <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <Property Name="runAs32Bit" Type="Edm.Boolean" Nullable="false" />
@@ -20718,10 +20728,12 @@
         <Property Name="androidDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="grantMobileThreatDefensePartnerRole" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastHeartbeatDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="launchMobileThreatDefensePartnerOnSetupEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="microsoftDefenderForEndpointAttachEnabled" Type="Edm.Boolean" Nullable="false" />
@@ -34819,6 +34831,9 @@
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/identityCertificate">
         <Annotation Term="Org.OData.Core.V1.Description" String="Identity certificate for client authentication when authentication method is certificate." />
       </Annotations>
+      <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/lockdownExclusionList">
+        <Annotation Term="Org.OData.Core.V1.Description" String="List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected." />
+      </Annotations>
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/microsoftTunnelSiteId">
         <Annotation Term="Org.OData.Core.V1.Description" String="Microsoft Tunnel site ID." />
       </Annotations>
@@ -37069,6 +37084,9 @@
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/eTag">
         <Annotation Term="Org.OData.Core.V1.Description" String="ETag for optimistic concurrency control. Read/write." />
       </Annotations>
+      <Annotations Target="microsoft.graph.cloudCertificationAuthority/geographicRegion">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The geographic region where a cloud certification authority (CA) is hosted. Read-only." />
+      </Annotations>
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/keyPlatform">
         <Annotation Term="Org.OData.Core.V1.Description" String="Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.keyPlatform instead." />
       </Annotations>
@@ -40493,6 +40511,9 @@
           <EnumMember>Org.OData.Core.V1.Permission/Read</EnumMember>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScript/platform">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the operating system platform type that this compliance script targets." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/publisher">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name of the device compliance script publisher" />
       </Annotations>
@@ -40544,6 +40565,21 @@
       <Annotations Target="microsoft.graph.deviceComplianceScriptError/message">
         <Annotation Term="Org.OData.Core.V1.Description" String="Error message." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the platform that a device compliance script targets for evaluation." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/linux">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running Linux." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/macOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running macOS." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/windows10">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that the compliance script targets devices running Windows 10 and later." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScriptRule/dataType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Data type specified in the rule." />
       </Annotations>
@@ -42348,6 +42384,9 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagement">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement/accountMoveCompletionDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date &amp; time when tenant data moved between scaleunits." />
       </Annotations>
@@ -47559,6 +47598,9 @@
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/daysUntilForcedReboot">
         <Annotation Term="Org.OData.Core.V1.Description" String="The number of days after installation that forced reboot will happen." />
       </Annotations>
+      <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateCatalogItemId">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The unique identifier for the quality update catalog item targeted by the expedite." />
+      </Annotations>
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateRelease">
         <Annotation Term="Org.OData.Core.V1.Description" String="The release date to identify a quality update." />
       </Annotations>
@@ -57794,6 +57836,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/androidMobileApplicationManagementEnabled">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE." />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/grantMobileThreatDefensePartnerRole">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/iosDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant. When FALSE, indicates that Intune may not recieve data from Mobile Threat Defense partner prior to making device compliant. Default value is FALSE." />
       </Annotations>
@@ -57806,6 +57851,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/lastHeartbeatDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="DateTime of last Heartbeat recieved from the Mobile Threat Defense partner" />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/launchMobileThreatDefensePartnerOnSetupEnabled">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/macDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a Mac device compliant. When FALSE, indicates that Intune may mark a Mac device compliant prior to receiving data from the Mobile Threat Defense partner. Default value is FALSE." />
       </Annotations>
diff --git a/schemas/beta-Delos.csdl b/schemas/beta-Delos.csdl
index e7f43e48..b2024e8f 100644
--- a/schemas/beta-Delos.csdl
+++ b/schemas/beta-Delos.csdl
@@ -927,6 +927,11 @@
         <Member Name="months" Value="1" />
         <Member Name="years" Value="2" />
       </EnumType>
+      <EnumType Name="changeType">
+        <Member Name="created" Value="0" />
+        <Member Name="updated" Value="1" />
+        <Member Name="deleted" Value="2" />
+      </EnumType>
       <EnumType Name="changeUefiSettingsPermission">
         <Member Name="notConfiguredOnly" Value="0" />
         <Member Name="none" Value="1" />
@@ -1453,6 +1458,12 @@
         <Member Name="pushNotification" Value="9" />
         <Member Name="remoteLock" Value="10" />
       </EnumType>
+      <EnumType Name="deviceComplianceScriptPlatformType">
+        <Member Name="windows10" Value="0" />
+        <Member Name="linux" Value="1" />
+        <Member Name="macOS" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="deviceComplianceScriptRuleDataType">
         <Member Name="none" Value="0" />
         <Member Name="boolean" Value="1" />
@@ -2852,6 +2863,11 @@
         <Member Name="trial" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="lifecycleEventType">
+        <Member Name="missed" Value="0" />
+        <Member Name="subscriptionRemoved" Value="1" />
+        <Member Name="reauthorizationRequired" Value="2" />
+      </EnumType>
       <EnumType Name="localSecurityOptionsAdministratorElevationPromptBehaviorType">
         <Member Name="notConfigured" Value="0" />
         <Member Name="elevateWithoutPrompting" Value="1" />
@@ -6007,6 +6023,29 @@
       <ComplexType Name="changeAssignmentsActionResult" BaseType="graph.deviceActionResult">
         <Property Name="deviceAssignmentItems" Type="Collection(graph.deviceAssignmentItem)" />
       </ComplexType>
+      <ComplexType Name="changeNotification">
+        <Property Name="changeType" Type="graph.changeType" Nullable="false" />
+        <Property Name="clientState" Type="Edm.String" />
+        <Property Name="encryptedContent" Type="graph.changeNotificationEncryptedContent" />
+        <Property Name="id" Type="Edm.String" />
+        <Property Name="lifecycleEvent" Type="graph.lifecycleEventType" />
+        <Property Name="resource" Type="Edm.String" Nullable="false" />
+        <Property Name="resourceData" Type="graph.resourceData" />
+        <Property Name="subscriptionExpirationDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="subscriptionId" Type="Edm.Guid" Nullable="false" />
+        <Property Name="tenantId" Type="Edm.Guid" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="changeNotificationCollection">
+        <Property Name="validationTokens" Type="Collection(Edm.String)" />
+        <Property Name="value" Type="Collection(graph.changeNotification)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="changeNotificationEncryptedContent">
+        <Property Name="data" Type="Edm.String" Nullable="false" />
+        <Property Name="dataKey" Type="Edm.String" Nullable="false" />
+        <Property Name="dataSignature" Type="Edm.String" Nullable="false" />
+        <Property Name="encryptionCertificateId" Type="Edm.String" Nullable="false" />
+        <Property Name="encryptionCertificateThumbprint" Type="Edm.String" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="chromeOSDeviceProperty">
         <Property Name="name" Type="Edm.String" />
         <Property Name="updatable" Type="Edm.Boolean" Nullable="false" />
@@ -7096,6 +7135,7 @@
       <ComplexType Name="exclusionGroupAssignmentTarget" BaseType="graph.groupAssignmentTarget" />
       <ComplexType Name="expeditedWindowsQualityUpdateSettings">
         <Property Name="daysUntilForcedReboot" Type="Edm.Int32" Nullable="false" />
+        <Property Name="qualityUpdateCatalogItemId" Type="Edm.String" />
         <Property Name="qualityUpdateRelease" Type="Edm.String" Nullable="false" />
       </ComplexType>
       <ComplexType Name="expressionEvaluationDetails">
@@ -8632,6 +8672,7 @@
         <Property Name="allowedResourceActions" Type="Collection(Edm.String)" />
         <Property Name="notAllowedResourceActions" Type="Collection(Edm.String)" />
       </ComplexType>
+      <ComplexType Name="resourceData" OpenType="true" />
       <ComplexType Name="resourcePermission">
         <Property Name="type" Type="Edm.String" Nullable="false" />
         <Property Name="value" Type="Edm.String" Nullable="false" />
@@ -10778,6 +10819,7 @@
         <Property Name="customData" Type="Collection(graph.keyValue)" />
         <Property Name="customKeyValueData" Type="Collection(graph.keyValuePair)" />
         <Property Name="fingerprint" Type="Edm.String" />
+        <Property Name="lockdownExclusionList" Type="Collection(Edm.String)" />
         <Property Name="microsoftTunnelSiteId" Type="Edm.String" />
         <Property Name="proxyExclusionList" Type="Collection(Edm.String)" />
         <Property Name="proxyServer" Type="graph.vpnProxyServer" />
@@ -11265,6 +11307,7 @@
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
         <Property Name="eTag" Type="Edm.String" />
         <Property Name="extendedKeyUsages" Type="Collection(graph.extendedKeyUsage)" />
+        <Property Name="geographicRegion" Type="Edm.String" />
         <Property Name="issuerCommonName" Type="Edm.String" />
         <Property Name="keyPlatform" Type="graph.cloudCertificationAuthorityKeyPlatformType" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
@@ -11998,6 +12041,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="enforceSignatureCheck" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="platform" Type="graph.deviceComplianceScriptPlatformType" />
         <Property Name="publisher" Type="Edm.String" />
         <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <Property Name="runAs32Bit" Type="Edm.Boolean" Nullable="false" />
@@ -15437,10 +15481,12 @@
         <Property Name="androidDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="grantMobileThreatDefensePartnerRole" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastHeartbeatDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="launchMobileThreatDefensePartnerOnSetupEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="microsoftDefenderForEndpointAttachEnabled" Type="Edm.Boolean" Nullable="false" />
@@ -16411,6 +16457,20 @@
         <Property Name="skuPartNumber" Type="Edm.String" />
         <Property Name="subscriptionIds" Type="Collection(Edm.String)" />
       </EntityType>
+      <EntityType Name="subscription" BaseType="graph.entity">
+        <Property Name="applicationId" Type="Edm.String" />
+        <Property Name="changeType" Type="Edm.String" Nullable="false" />
+        <Property Name="clientState" Type="Edm.String" />
+        <Property Name="creatorId" Type="Edm.String" />
+        <Property Name="encryptionCertificate" Type="Edm.String" />
+        <Property Name="encryptionCertificateId" Type="Edm.String" />
+        <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="includeResourceData" Type="Edm.Boolean" />
+        <Property Name="latestSupportedTlsVersion" Type="Edm.String" />
+        <Property Name="lifecycleNotificationUrl" Type="Edm.String" />
+        <Property Name="notificationUrl" Type="Edm.String" Nullable="false" />
+        <Property Name="resource" Type="Edm.String" Nullable="false" />
+      </EntityType>
       <EntityType Name="symantecCodeSigningCertificate" BaseType="graph.entity">
         <Property Name="content" Type="Edm.Binary" />
         <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
@@ -21162,6 +21222,9 @@
         <Parameter Name="platformType" Type="graph.policyPlatformType" Nullable="false" />
         <ReturnType Type="Collection(graph.deviceManagementResourceAccessProfileBase)" />
       </Action>
+      <Action Name="reauthorize" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.subscription" />
+      </Action>
       <Action Name="rebootNow" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.managedDevice" />
       </Action>
@@ -22533,6 +22596,7 @@
         </EntitySet>
         <EntitySet Name="settings" EntityType="microsoft.graph.directorySetting" />
         <EntitySet Name="subscribedSkus" EntityType="microsoft.graph.subscribedSku" />
+        <EntitySet Name="subscriptions" EntityType="microsoft.graph.subscription" />
         <EntitySet Name="users" EntityType="microsoft.graph.user">
           <NavigationPropertyBinding Path="appRoleAssignedResources" Target="servicePrincipals" />
           <NavigationPropertyBinding Path="createdObjects" Target="directoryObjects" />
@@ -26548,6 +26612,9 @@
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/identityCertificate">
         <Annotation Term="Org.OData.Core.V1.Description" String="Identity certificate for client authentication when authentication method is certificate." />
       </Annotations>
+      <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/lockdownExclusionList">
+        <Annotation Term="Org.OData.Core.V1.Description" String="List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected." />
+      </Annotations>
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/microsoftTunnelSiteId">
         <Annotation Term="Org.OData.Core.V1.Description" String="Microsoft Tunnel site ID." />
       </Annotations>
@@ -28654,6 +28721,9 @@
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/eTag">
         <Annotation Term="Org.OData.Core.V1.Description" String="ETag for optimistic concurrency control. Read/write." />
       </Annotations>
+      <Annotations Target="microsoft.graph.cloudCertificationAuthority/geographicRegion">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The geographic region where a cloud certification authority (CA) is hosted. Read-only." />
+      </Annotations>
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/keyPlatform">
         <Annotation Term="Org.OData.Core.V1.Description" String="Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.keyPlatform instead." />
       </Annotations>
@@ -31950,6 +32020,9 @@
           <EnumMember>Org.OData.Core.V1.Permission/Read</EnumMember>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScript/platform">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the operating system platform type that this compliance script targets." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/publisher">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name of the device compliance script publisher" />
       </Annotations>
@@ -32001,6 +32074,21 @@
       <Annotations Target="microsoft.graph.deviceComplianceScriptError/message">
         <Annotation Term="Org.OData.Core.V1.Description" String="Error message." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the platform that a device compliance script targets for evaluation." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/linux">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running Linux." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/macOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running macOS." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/windows10">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that the compliance script targets devices running Windows 10 and later." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScriptRule/dataType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Data type specified in the rule." />
       </Annotations>
@@ -33805,6 +33893,9 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagement">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement/accountMoveCompletionDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date &amp; time when tenant data moved between scaleunits." />
       </Annotations>
@@ -38967,6 +39058,9 @@
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/daysUntilForcedReboot">
         <Annotation Term="Org.OData.Core.V1.Description" String="The number of days after installation that forced reboot will happen." />
       </Annotations>
+      <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateCatalogItemId">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The unique identifier for the quality update catalog item targeted by the expedite." />
+      </Annotations>
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateRelease">
         <Annotation Term="Org.OData.Core.V1.Description" String="The release date to identify a quality update." />
       </Annotations>
@@ -49008,6 +49102,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/androidMobileApplicationManagementEnabled">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE." />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/grantMobileThreatDefensePartnerRole">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/iosDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant. When FALSE, indicates that Intune may not recieve data from Mobile Threat Defense partner prior to making device compliant. Default value is FALSE." />
       </Annotations>
@@ -49020,6 +49117,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/lastHeartbeatDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="DateTime of last Heartbeat recieved from the Mobile Threat Defense partner" />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/launchMobileThreatDefensePartnerOnSetupEnabled">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/macDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a Mac device compliant. When FALSE, indicates that Intune may mark a Mac device compliant prior to receiving data from the Mobile Threat Defense partner. Default value is FALSE." />
       </Annotations>
@@ -52791,6 +52891,40 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
       </Annotations>
+      <Annotations Target="microsoft.graph.subscription">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ExpandRestrictions">
+          <Record>
+            <PropertyValue Property="Expandable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.NavigationRestrictions">
+          <Record>
+            <PropertyValue Property="Referenceable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectRestrictions">
+          <Record>
+            <PropertyValue Property="Selectable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
+        <Annotation Term="Org.OData.Capabilities.V1.SortRestrictions">
+          <Record>
+            <PropertyValue Property="Sortable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
+      </Annotations>
       <Annotations Target="microsoft.graph.suggestedEnrollmentLimit">
         <Annotation Term="Org.OData.Core.V1.Description" String="The suggestedEnrollmentLimit resource represents the suggested enrollment limit when given an enrollment type." />
       </Annotations>
diff --git a/schemas/beta-Fairfax.csdl b/schemas/beta-Fairfax.csdl
index dd60ecdb..a952a02e 100644
--- a/schemas/beta-Fairfax.csdl
+++ b/schemas/beta-Fairfax.csdl
@@ -2753,6 +2753,12 @@
         <Member Name="pushNotification" Value="9" />
         <Member Name="remoteLock" Value="10" />
       </EnumType>
+      <EnumType Name="deviceComplianceScriptPlatformType">
+        <Member Name="windows10" Value="0" />
+        <Member Name="linux" Value="1" />
+        <Member Name="macOS" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="deviceComplianceScriptRuleDataType">
         <Member Name="none" Value="0" />
         <Member Name="boolean" Value="1" />
@@ -12605,6 +12611,7 @@
       <ComplexType Name="exclusionGroupAssignmentTarget" BaseType="graph.groupAssignmentTarget" />
       <ComplexType Name="expeditedWindowsQualityUpdateSettings">
         <Property Name="daysUntilForcedReboot" Type="Edm.Int32" Nullable="false" />
+        <Property Name="qualityUpdateCatalogItemId" Type="Edm.String" />
         <Property Name="qualityUpdateRelease" Type="Edm.String" Nullable="false" />
       </ComplexType>
       <ComplexType Name="expirationPattern">
@@ -18916,6 +18923,7 @@
         <Property Name="customData" Type="Collection(graph.keyValue)" />
         <Property Name="customKeyValueData" Type="Collection(graph.keyValuePair)" />
         <Property Name="fingerprint" Type="Edm.String" />
+        <Property Name="lockdownExclusionList" Type="Collection(Edm.String)" />
         <Property Name="microsoftTunnelSiteId" Type="Edm.String" />
         <Property Name="proxyExclusionList" Type="Collection(Edm.String)" />
         <Property Name="proxyServer" Type="graph.vpnProxyServer" />
@@ -19872,6 +19880,7 @@
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
         <Property Name="eTag" Type="Edm.String" />
         <Property Name="extendedKeyUsages" Type="Collection(graph.extendedKeyUsage)" />
+        <Property Name="geographicRegion" Type="Edm.String" />
         <Property Name="issuerCommonName" Type="Edm.String" />
         <Property Name="keyPlatform" Type="graph.cloudCertificationAuthorityKeyPlatformType" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
@@ -21133,6 +21142,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="enforceSignatureCheck" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="platform" Type="graph.deviceComplianceScriptPlatformType" />
         <Property Name="publisher" Type="Edm.String" />
         <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <Property Name="runAs32Bit" Type="Edm.Boolean" Nullable="false" />
@@ -25293,10 +25303,12 @@
         <Property Name="androidDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="grantMobileThreatDefensePartnerRole" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastHeartbeatDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="launchMobileThreatDefensePartnerOnSetupEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="microsoftDefenderForEndpointAttachEnabled" Type="Edm.Boolean" Nullable="false" />
@@ -45472,6 +45484,9 @@
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/identityCertificate">
         <Annotation Term="Org.OData.Core.V1.Description" String="Identity certificate for client authentication when authentication method is certificate." />
       </Annotations>
+      <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/lockdownExclusionList">
+        <Annotation Term="Org.OData.Core.V1.Description" String="List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected." />
+      </Annotations>
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/microsoftTunnelSiteId">
         <Annotation Term="Org.OData.Core.V1.Description" String="Microsoft Tunnel site ID." />
       </Annotations>
@@ -48099,6 +48114,9 @@
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/eTag">
         <Annotation Term="Org.OData.Core.V1.Description" String="ETag for optimistic concurrency control. Read/write." />
       </Annotations>
+      <Annotations Target="microsoft.graph.cloudCertificationAuthority/geographicRegion">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The geographic region where a cloud certification authority (CA) is hosted. Read-only." />
+      </Annotations>
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/keyPlatform">
         <Annotation Term="Org.OData.Core.V1.Description" String="Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.keyPlatform instead." />
       </Annotations>
@@ -52236,6 +52254,9 @@
           <EnumMember>Org.OData.Core.V1.Permission/Read</EnumMember>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScript/platform">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the operating system platform type that this compliance script targets." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/publisher">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name of the device compliance script publisher" />
       </Annotations>
@@ -52287,6 +52308,21 @@
       <Annotations Target="microsoft.graph.deviceComplianceScriptError/message">
         <Annotation Term="Org.OData.Core.V1.Description" String="Error message." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the platform that a device compliance script targets for evaluation." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/linux">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running Linux." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/macOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running macOS." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/windows10">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that the compliance script targets devices running Windows 10 and later." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScriptRule/dataType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Data type specified in the rule." />
       </Annotations>
@@ -54091,6 +54127,9 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagement">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement.alertRule/threshold">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -59386,6 +59425,9 @@
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/daysUntilForcedReboot">
         <Annotation Term="Org.OData.Core.V1.Description" String="The number of days after installation that forced reboot will happen." />
       </Annotations>
+      <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateCatalogItemId">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The unique identifier for the quality update catalog item targeted by the expedite." />
+      </Annotations>
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateRelease">
         <Annotation Term="Org.OData.Core.V1.Description" String="The release date to identify a quality update." />
       </Annotations>
@@ -70479,6 +70521,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/androidMobileApplicationManagementEnabled">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE." />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/grantMobileThreatDefensePartnerRole">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/iosDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant. When FALSE, indicates that Intune may not recieve data from Mobile Threat Defense partner prior to making device compliant. Default value is FALSE." />
       </Annotations>
@@ -70491,6 +70536,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/lastHeartbeatDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="DateTime of last Heartbeat recieved from the Mobile Threat Defense partner" />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/launchMobileThreatDefensePartnerOnSetupEnabled">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/macDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a Mac device compliant. When FALSE, indicates that Intune may mark a Mac device compliant prior to receiving data from the Mobile Threat Defense partner. Default value is FALSE." />
       </Annotations>
diff --git a/schemas/beta-Mooncake.csdl b/schemas/beta-Mooncake.csdl
index 94e30ada..d1b4e6ae 100644
--- a/schemas/beta-Mooncake.csdl
+++ b/schemas/beta-Mooncake.csdl
@@ -1858,6 +1858,12 @@
         <Member Name="pushNotification" Value="9" />
         <Member Name="remoteLock" Value="10" />
       </EnumType>
+      <EnumType Name="deviceComplianceScriptPlatformType">
+        <Member Name="windows10" Value="0" />
+        <Member Name="linux" Value="1" />
+        <Member Name="macOS" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="deviceComplianceScriptRuleDataType">
         <Member Name="none" Value="0" />
         <Member Name="boolean" Value="1" />
@@ -9585,6 +9591,7 @@
       <ComplexType Name="exclusionGroupAssignmentTarget" BaseType="graph.groupAssignmentTarget" />
       <ComplexType Name="expeditedWindowsQualityUpdateSettings">
         <Property Name="daysUntilForcedReboot" Type="Edm.Int32" Nullable="false" />
+        <Property Name="qualityUpdateCatalogItemId" Type="Edm.String" />
         <Property Name="qualityUpdateRelease" Type="Edm.String" Nullable="false" />
       </ComplexType>
       <ComplexType Name="expirationPattern">
@@ -15042,6 +15049,7 @@
         <Property Name="customData" Type="Collection(graph.keyValue)" />
         <Property Name="customKeyValueData" Type="Collection(graph.keyValuePair)" />
         <Property Name="fingerprint" Type="Edm.String" />
+        <Property Name="lockdownExclusionList" Type="Collection(Edm.String)" />
         <Property Name="microsoftTunnelSiteId" Type="Edm.String" />
         <Property Name="proxyExclusionList" Type="Collection(Edm.String)" />
         <Property Name="proxyServer" Type="graph.vpnProxyServer" />
@@ -15834,6 +15842,7 @@
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
         <Property Name="eTag" Type="Edm.String" />
         <Property Name="extendedKeyUsages" Type="Collection(graph.extendedKeyUsage)" />
+        <Property Name="geographicRegion" Type="Edm.String" />
         <Property Name="issuerCommonName" Type="Edm.String" />
         <Property Name="keyPlatform" Type="graph.cloudCertificationAuthorityKeyPlatformType" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
@@ -16749,6 +16758,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="enforceSignatureCheck" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="platform" Type="graph.deviceComplianceScriptPlatformType" />
         <Property Name="publisher" Type="Edm.String" />
         <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <Property Name="runAs32Bit" Type="Edm.Boolean" Nullable="false" />
@@ -20721,10 +20731,12 @@
         <Property Name="androidDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="grantMobileThreatDefensePartnerRole" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastHeartbeatDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="launchMobileThreatDefensePartnerOnSetupEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="microsoftDefenderForEndpointAttachEnabled" Type="Edm.Boolean" Nullable="false" />
@@ -35734,6 +35746,9 @@
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/identityCertificate">
         <Annotation Term="Org.OData.Core.V1.Description" String="Identity certificate for client authentication when authentication method is certificate." />
       </Annotations>
+      <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/lockdownExclusionList">
+        <Annotation Term="Org.OData.Core.V1.Description" String="List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected." />
+      </Annotations>
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/microsoftTunnelSiteId">
         <Annotation Term="Org.OData.Core.V1.Description" String="Microsoft Tunnel site ID." />
       </Annotations>
@@ -38128,6 +38143,9 @@
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/eTag">
         <Annotation Term="Org.OData.Core.V1.Description" String="ETag for optimistic concurrency control. Read/write." />
       </Annotations>
+      <Annotations Target="microsoft.graph.cloudCertificationAuthority/geographicRegion">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The geographic region where a cloud certification authority (CA) is hosted. Read-only." />
+      </Annotations>
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/keyPlatform">
         <Annotation Term="Org.OData.Core.V1.Description" String="Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.keyPlatform instead." />
       </Annotations>
@@ -41540,6 +41558,9 @@
           <EnumMember>Org.OData.Core.V1.Permission/Read</EnumMember>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScript/platform">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the operating system platform type that this compliance script targets." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/publisher">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name of the device compliance script publisher" />
       </Annotations>
@@ -41591,6 +41612,21 @@
       <Annotations Target="microsoft.graph.deviceComplianceScriptError/message">
         <Annotation Term="Org.OData.Core.V1.Description" String="Error message." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the platform that a device compliance script targets for evaluation." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/linux">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running Linux." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/macOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running macOS." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/windows10">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that the compliance script targets devices running Windows 10 and later." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScriptRule/dataType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Data type specified in the rule." />
       </Annotations>
@@ -43395,6 +43431,9 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagement">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement/accountMoveCompletionDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date &amp; time when tenant data moved between scaleunits." />
       </Annotations>
@@ -48632,6 +48671,9 @@
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/daysUntilForcedReboot">
         <Annotation Term="Org.OData.Core.V1.Description" String="The number of days after installation that forced reboot will happen." />
       </Annotations>
+      <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateCatalogItemId">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The unique identifier for the quality update catalog item targeted by the expedite." />
+      </Annotations>
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateRelease">
         <Annotation Term="Org.OData.Core.V1.Description" String="The release date to identify a quality update." />
       </Annotations>
@@ -59417,6 +59459,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/androidMobileApplicationManagementEnabled">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE." />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/grantMobileThreatDefensePartnerRole">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/iosDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant. When FALSE, indicates that Intune may not recieve data from Mobile Threat Defense partner prior to making device compliant. Default value is FALSE." />
       </Annotations>
@@ -59429,6 +59474,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/lastHeartbeatDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="DateTime of last Heartbeat recieved from the Mobile Threat Defense partner" />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/launchMobileThreatDefensePartnerOnSetupEnabled">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/macDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a Mac device compliant. When FALSE, indicates that Intune may mark a Mac device compliant prior to receiving data from the Mobile Threat Defense partner. Default value is FALSE." />
       </Annotations>
diff --git a/schemas/beta-Prod.csdl b/schemas/beta-Prod.csdl
index 0a01502e..9fdf04dc 100644
--- a/schemas/beta-Prod.csdl
+++ b/schemas/beta-Prod.csdl
@@ -3660,6 +3660,12 @@
         <Member Name="pushNotification" Value="9" />
         <Member Name="remoteLock" Value="10" />
       </EnumType>
+      <EnumType Name="deviceComplianceScriptPlatformType">
+        <Member Name="windows10" Value="0" />
+        <Member Name="linux" Value="1" />
+        <Member Name="macOS" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="deviceComplianceScriptRuleDataType">
         <Member Name="none" Value="0" />
         <Member Name="boolean" Value="1" />
@@ -6218,6 +6224,13 @@
         <Member Name="limited" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
       </EnumType>
+      <EnumType Name="meetingEngagementType">
+        <Member Name="reaction" Value="0" />
+        <Member Name="hand" Value="1" />
+        <Member Name="camera" Value="2" />
+        <Member Name="microphone" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
       <EnumType Name="meetingLiveShareOptions">
         <Member Name="enabled" Value="0" />
         <Member Name="disabled" Value="1" />
@@ -9606,6 +9619,29 @@
         <Member Name="darkPink" Value="10" />
         <Member Name="darkYellow" Value="11" />
         <Member Name="unknownFutureValue" Value="12" />
+        <Member Name="darkRed" Value="13" />
+        <Member Name="cranberry" Value="14" />
+        <Member Name="darkOrange" Value="15" />
+        <Member Name="bronze" Value="16" />
+        <Member Name="peach" Value="17" />
+        <Member Name="gold" Value="18" />
+        <Member Name="lime" Value="19" />
+        <Member Name="forest" Value="20" />
+        <Member Name="lightGreen" Value="21" />
+        <Member Name="jade" Value="22" />
+        <Member Name="lightTeal" Value="23" />
+        <Member Name="darkTeal" Value="24" />
+        <Member Name="steel" Value="25" />
+        <Member Name="skyBlue" Value="26" />
+        <Member Name="blueGray" Value="27" />
+        <Member Name="lavender" Value="28" />
+        <Member Name="lilac" Value="29" />
+        <Member Name="plum" Value="30" />
+        <Member Name="magenta" Value="31" />
+        <Member Name="darkBrown" Value="32" />
+        <Member Name="beige" Value="33" />
+        <Member Name="charcoal" Value="34" />
+        <Member Name="silver" Value="35" />
       </EnumType>
       <EnumType Name="scheduleRequestActions">
         <Member Name="adminAssign" Value="1" />
@@ -16627,6 +16663,7 @@
       <ComplexType Name="exclusionGroupAssignmentTarget" BaseType="graph.groupAssignmentTarget" />
       <ComplexType Name="expeditedWindowsQualityUpdateSettings">
         <Property Name="daysUntilForcedReboot" Type="Edm.Int32" Nullable="false" />
+        <Property Name="qualityUpdateCatalogItemId" Type="Edm.String" />
         <Property Name="qualityUpdateRelease" Type="Edm.String" Nullable="false" />
       </ComplexType>
       <ComplexType Name="expirationPattern">
@@ -18160,6 +18197,11 @@
         <Property Name="allowAnonymousUsersToStartMeeting" Type="Edm.Boolean" Nullable="false" />
         <Property Name="autoAdmittedUsers" Type="graph.autoAdmittedUsersType" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="meetingEngagement">
+        <Property Name="dateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="engagementSubType" Type="Edm.String" />
+        <Property Name="engagementType" Type="graph.meetingEngagementType" />
+      </ComplexType>
       <ComplexType Name="meetingInfo" Abstract="true">
         <Property Name="allowConversationWithoutHost" Type="Edm.Boolean" />
       </ComplexType>
@@ -23902,6 +23944,7 @@
         <Property Name="agentDisplayName" Type="Edm.String" Nullable="false" />
         <Property Name="agentId" Type="Edm.String" Nullable="false" />
         <Property Name="blueprintId" Type="Edm.String" />
+        <Property Name="clientSessionId" Type="Edm.String" />
         <Property Name="detectedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="detectionTimingType" Type="graph.riskDetectionTimingType" Nullable="false" />
         <Property Name="identityType" Type="graph.agentIdentityType" Nullable="false" />
@@ -23911,6 +23954,9 @@
         <Property Name="riskEvidence" Type="Edm.String" />
         <Property Name="riskLevel" Type="graph.riskLevel" Nullable="false" />
         <Property Name="riskState" Type="graph.riskState" Nullable="false" />
+        <Property Name="signInClientDisplayName" Type="Edm.String" />
+        <Property Name="signInCorrelationId" Type="Edm.String" />
+        <Property Name="signInRequestId" Type="Edm.String" />
         <Property Name="source" Type="Edm.String" />
       </EntityType>
       <EntityType Name="agentUser" BaseType="graph.user" OpenType="true" />
@@ -24969,6 +25015,7 @@
         <Property Name="customData" Type="Collection(graph.keyValue)" />
         <Property Name="customKeyValueData" Type="Collection(graph.keyValuePair)" />
         <Property Name="fingerprint" Type="Edm.String" />
+        <Property Name="lockdownExclusionList" Type="Collection(Edm.String)" />
         <Property Name="microsoftTunnelSiteId" Type="Edm.String" />
         <Property Name="proxyExclusionList" Type="Collection(Edm.String)" />
         <Property Name="proxyServer" Type="graph.vpnProxyServer" />
@@ -25443,6 +25490,7 @@
       <EntityType Name="attendanceRecord" BaseType="graph.entity">
         <Property Name="attendanceIntervals" Type="Collection(graph.attendanceInterval)" />
         <Property Name="emailAddress" Type="Edm.String" />
+        <Property Name="engagements" Type="Collection(graph.meetingEngagement)" />
         <Property Name="externalRegistrationInformation" Type="graph.virtualEventExternalRegistrationInformation" />
         <Property Name="identity" Type="graph.identity" />
         <Property Name="registrantId" Type="Edm.String" />
@@ -26543,6 +26591,7 @@
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
         <Property Name="eTag" Type="Edm.String" />
         <Property Name="extendedKeyUsages" Type="Collection(graph.extendedKeyUsage)" />
+        <Property Name="geographicRegion" Type="Edm.String" />
         <Property Name="issuerCommonName" Type="Edm.String" />
         <Property Name="keyPlatform" Type="graph.cloudCertificationAuthorityKeyPlatformType" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
@@ -28387,6 +28436,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="enforceSignatureCheck" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="platform" Type="graph.deviceComplianceScriptPlatformType" />
         <Property Name="publisher" Type="Edm.String" />
         <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <Property Name="runAs32Bit" Type="Edm.Boolean" Nullable="false" />
@@ -33751,10 +33801,12 @@
         <Property Name="androidDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="grantMobileThreatDefensePartnerRole" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastHeartbeatDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="launchMobileThreatDefensePartnerOnSetupEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="microsoftDefenderForEndpointAttachEnabled" Type="Edm.Boolean" Nullable="false" />
@@ -39746,6 +39798,8 @@
       </EntityType>
       <EntityType Name="virtualEventRegistrationConfiguration" BaseType="graph.entity">
         <Property Name="capacity" Type="Edm.Int32" />
+        <Property Name="isManualApprovalEnabled" Type="Edm.Boolean" />
+        <Property Name="isWaitlistEnabled" Type="Edm.Boolean" />
         <Property Name="registrationWebUrl" Type="Edm.String" />
         <NavigationProperty Name="questions" Type="Collection(graph.virtualEventRegistrationQuestionBase)" ContainsTarget="true" />
       </EntityType>
@@ -39779,17 +39833,17 @@
         <Property Name="coOrganizers" Type="Collection(graph.communicationsUserIdentity)" />
         <Property Name="invitedAttendees" Type="Collection(graph.identity)" />
         <Property Name="isInviteOnly" Type="Edm.Boolean" />
+        <NavigationProperty Name="registrationConfiguration" Type="graph.virtualEventTownhallRegistrationConfiguration" ContainsTarget="true" />
+        <NavigationProperty Name="registrations" Type="Collection(graph.virtualEventRegistration)" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="virtualEventTownhallRegistrationConfiguration" BaseType="graph.virtualEventRegistrationConfiguration" />
       <EntityType Name="virtualEventWebinar" BaseType="graph.virtualEvent">
         <Property Name="audience" Type="graph.meetingAudience" />
         <Property Name="coOrganizers" Type="Collection(graph.communicationsUserIdentity)" />
         <NavigationProperty Name="registrationConfiguration" Type="graph.virtualEventWebinarRegistrationConfiguration" ContainsTarget="true" />
         <NavigationProperty Name="registrations" Type="Collection(graph.virtualEventRegistration)" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="virtualEventWebinarRegistrationConfiguration" BaseType="graph.virtualEventRegistrationConfiguration">
-        <Property Name="isManualApprovalEnabled" Type="Edm.Boolean" />
-        <Property Name="isWaitlistEnabled" Type="Edm.Boolean" />
-      </EntityType>
+      <EntityType Name="virtualEventWebinarRegistrationConfiguration" BaseType="graph.virtualEventRegistrationConfiguration" />
       <EntityType Name="virtualMachineDetails" BaseType="graph.entity">
         <NavigationProperty Name="virtualMachine" Type="graph.authorizationSystemResource" />
       </EntityType>
@@ -59369,6 +59423,9 @@
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/identityCertificate">
         <Annotation Term="Org.OData.Core.V1.Description" String="Identity certificate for client authentication when authentication method is certificate." />
       </Annotations>
+      <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/lockdownExclusionList">
+        <Annotation Term="Org.OData.Core.V1.Description" String="List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected." />
+      </Annotations>
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/microsoftTunnelSiteId">
         <Annotation Term="Org.OData.Core.V1.Description" String="Microsoft Tunnel site ID." />
       </Annotations>
@@ -62596,6 +62653,9 @@
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/eTag">
         <Annotation Term="Org.OData.Core.V1.Description" String="ETag for optimistic concurrency control. Read/write." />
       </Annotations>
+      <Annotations Target="microsoft.graph.cloudCertificationAuthority/geographicRegion">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The geographic region where a cloud certification authority (CA) is hosted. Read-only." />
+      </Annotations>
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/keyPlatform">
         <Annotation Term="Org.OData.Core.V1.Description" String="Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.keyPlatform instead." />
       </Annotations>
@@ -67672,6 +67732,9 @@
           <EnumMember>Org.OData.Core.V1.Permission/Read</EnumMember>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScript/platform">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the operating system platform type that this compliance script targets." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/publisher">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name of the device compliance script publisher" />
       </Annotations>
@@ -67679,7 +67742,7 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="List of Scope Tag IDs for the device compliance script" />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/runAs32Bit">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Indicate whether PowerShell script(s) should run as 32-bit" />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Specifies whether the PowerShell script runs in 32-bit mode. When set to true, the script runs in a 32-bit PowerShell host. Default is false." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/runAsAccount">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the type of execution context" />
@@ -67723,6 +67786,21 @@
       <Annotations Target="microsoft.graph.deviceComplianceScriptError/message">
         <Annotation Term="Org.OData.Core.V1.Description" String="Error message." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the platform that a device compliance script targets for evaluation." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/linux">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running Linux." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/macOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running macOS." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/windows10">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that the compliance script targets devices running Windows 10 and later." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScriptRule/dataType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Data type specified in the rule." />
       </Annotations>
@@ -69542,6 +69620,9 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagement">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement.alertRule/threshold">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -76019,6 +76100,9 @@
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/daysUntilForcedReboot">
         <Annotation Term="Org.OData.Core.V1.Description" String="The number of days after installation that forced reboot will happen." />
       </Annotations>
+      <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateCatalogItemId">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The unique identifier for the quality update catalog item targeted by the expedite." />
+      </Annotations>
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateRelease">
         <Annotation Term="Org.OData.Core.V1.Description" String="The release date to identify a quality update." />
       </Annotations>
@@ -88646,6 +88730,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/androidMobileApplicationManagementEnabled">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE." />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/grantMobileThreatDefensePartnerRole">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/iosDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant. When FALSE, indicates that Intune may not recieve data from Mobile Threat Defense partner prior to making device compliant. Default value is FALSE." />
       </Annotations>
@@ -88658,6 +88745,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/lastHeartbeatDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="DateTime of last Heartbeat recieved from the Mobile Threat Defense partner" />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/launchMobileThreatDefensePartnerOnSetupEnabled">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/macDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a Mac device compliant. When FALSE, indicates that Intune may mark a Mac device compliant prior to receiving data from the Mobile Threat Defense partner. Default value is FALSE." />
       </Annotations>
diff --git a/schemas/v1.0-Delos.csdl b/schemas/v1.0-Delos.csdl
index 41bcc274..d6163d95 100644
--- a/schemas/v1.0-Delos.csdl
+++ b/schemas/v1.0-Delos.csdl
@@ -229,6 +229,11 @@
         <Member Name="notProvisioned" Value="0" />
         <Member Name="provisioned" Value="1" />
       </EnumType>
+      <EnumType Name="changeType">
+        <Member Name="created" Value="0" />
+        <Member Name="updated" Value="1" />
+        <Member Name="deleted" Value="2" />
+      </EnumType>
       <EnumType Name="complianceState">
         <Member Name="unknown" Value="0" />
         <Member Name="compliant" Value="1" />
@@ -632,6 +637,11 @@
         <Member Name="verticalSplit" Value="1" />
         <Member Name="unknownFutureValue" Value="10" />
       </EnumType>
+      <EnumType Name="lifecycleEventType">
+        <Member Name="missed" Value="0" />
+        <Member Name="subscriptionRemoved" Value="1" />
+        <Member Name="reauthorizationRequired" Value="2" />
+      </EnumType>
       <EnumType Name="locationType">
         <Member Name="default" Value="0" />
         <Member Name="conferenceRoom" Value="1" />
@@ -1839,6 +1849,29 @@
         <Property Name="issuer" Type="Edm.String" Nullable="false" />
         <Property Name="issuerSki" Type="Edm.String" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="changeNotification">
+        <Property Name="changeType" Type="graph.changeType" Nullable="false" />
+        <Property Name="clientState" Type="Edm.String" />
+        <Property Name="encryptedContent" Type="graph.changeNotificationEncryptedContent" />
+        <Property Name="id" Type="Edm.String" />
+        <Property Name="lifecycleEvent" Type="graph.lifecycleEventType" />
+        <Property Name="resource" Type="Edm.String" Nullable="false" />
+        <Property Name="resourceData" Type="graph.resourceData" />
+        <Property Name="subscriptionExpirationDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="subscriptionId" Type="Edm.Guid" Nullable="false" />
+        <Property Name="tenantId" Type="Edm.Guid" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="changeNotificationCollection">
+        <Property Name="validationTokens" Type="Collection(Edm.String)" />
+        <Property Name="value" Type="Collection(graph.changeNotification)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="changeNotificationEncryptedContent">
+        <Property Name="data" Type="Edm.String" Nullable="false" />
+        <Property Name="dataKey" Type="Edm.String" Nullable="false" />
+        <Property Name="dataSignature" Type="Edm.String" Nullable="false" />
+        <Property Name="encryptionCertificateId" Type="Edm.String" Nullable="false" />
+        <Property Name="encryptionCertificateThumbprint" Type="Edm.String" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="ComplexExtensionValue" OpenType="true" />
       <ComplexType Name="complianceManagementPartnerAssignment">
         <Property Name="target" Type="graph.deviceAndAppManagementAssignmentTarget" />
@@ -2745,6 +2778,7 @@
         <Property Name="allowedResourceActions" Type="Collection(Edm.String)" />
         <Property Name="notAllowedResourceActions" Type="Collection(Edm.String)" />
       </ComplexType>
+      <ComplexType Name="resourceData" OpenType="true" />
       <ComplexType Name="resourcePermission">
         <Property Name="type" Type="Edm.String" Nullable="false" />
         <Property Name="value" Type="Edm.String" Nullable="false" />
@@ -5721,6 +5755,20 @@
         <Property Name="skuPartNumber" Type="Edm.String" />
         <Property Name="subscriptionIds" Type="Collection(Edm.String)" />
       </EntityType>
+      <EntityType Name="subscription" BaseType="graph.entity">
+        <Property Name="applicationId" Type="Edm.String" />
+        <Property Name="changeType" Type="Edm.String" Nullable="false" />
+        <Property Name="clientState" Type="Edm.String" />
+        <Property Name="creatorId" Type="Edm.String" />
+        <Property Name="encryptionCertificate" Type="Edm.String" />
+        <Property Name="encryptionCertificateId" Type="Edm.String" />
+        <Property Name="expirationDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="includeResourceData" Type="Edm.Boolean" />
+        <Property Name="latestSupportedTlsVersion" Type="Edm.String" />
+        <Property Name="lifecycleNotificationUrl" Type="Edm.String" />
+        <Property Name="notificationUrl" Type="Edm.String" Nullable="false" />
+        <Property Name="resource" Type="Edm.String" Nullable="false" />
+      </EntityType>
       <EntityType Name="targetDeviceGroup" BaseType="graph.entity">
         <Property Name="displayName" Type="Edm.String" />
       </EntityType>
@@ -7648,6 +7696,9 @@
         <Parameter Name="bindingParameter" Type="graph.domain" Nullable="false" />
         <ReturnType Type="Edm.Boolean" />
       </Action>
+      <Action Name="reauthorize" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.subscription" />
+      </Action>
       <Action Name="rebootNow" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.managedDevice" />
       </Action>
@@ -8139,6 +8190,7 @@
           <NavigationPropertyBinding Path="transitiveMemberOf" Target="directoryObjects" />
         </EntitySet>
         <EntitySet Name="subscribedSkus" EntityType="microsoft.graph.subscribedSku" />
+        <EntitySet Name="subscriptions" EntityType="microsoft.graph.subscription" />
         <EntitySet Name="users" EntityType="microsoft.graph.user">
           <NavigationPropertyBinding Path="createdObjects" Target="directoryObjects" />
           <NavigationPropertyBinding Path="directReports" Target="directoryObjects" />
@@ -16764,6 +16816,40 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
       </Annotations>
+      <Annotations Target="microsoft.graph.subscription">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ExpandRestrictions">
+          <Record>
+            <PropertyValue Property="Expandable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.NavigationRestrictions">
+          <Record>
+            <PropertyValue Property="Referenceable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectRestrictions">
+          <Record>
+            <PropertyValue Property="Selectable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
+        <Annotation Term="Org.OData.Capabilities.V1.SortRestrictions">
+          <Record>
+            <PropertyValue Property="Sortable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
+      </Annotations>
       <Annotations Target="microsoft.graph.syncLicenses(microsoft.graph.vppToken)">
         <Annotation Term="Org.OData.Core.V1.Description" String="Syncs licenses associated with a specific appleVolumePurchaseProgramToken" />
       </Annotations>
diff --git a/schemas/v1.0-Prod.csdl b/schemas/v1.0-Prod.csdl
index b3716b4b..2c642057 100644
--- a/schemas/v1.0-Prod.csdl
+++ b/schemas/v1.0-Prod.csdl
@@ -4653,6 +4653,29 @@
         <Member Name="darkPink" Value="10" />
         <Member Name="darkYellow" Value="11" />
         <Member Name="unknownFutureValue" Value="12" />
+        <Member Name="darkRed" Value="13" />
+        <Member Name="cranberry" Value="14" />
+        <Member Name="darkOrange" Value="15" />
+        <Member Name="bronze" Value="16" />
+        <Member Name="peach" Value="17" />
+        <Member Name="gold" Value="18" />
+        <Member Name="lime" Value="19" />
+        <Member Name="forest" Value="20" />
+        <Member Name="lightGreen" Value="21" />
+        <Member Name="jade" Value="22" />
+        <Member Name="lightTeal" Value="23" />
+        <Member Name="darkTeal" Value="24" />
+        <Member Name="steel" Value="25" />
+        <Member Name="skyBlue" Value="26" />
+        <Member Name="blueGray" Value="27" />
+        <Member Name="lavender" Value="28" />
+        <Member Name="lilac" Value="29" />
+        <Member Name="plum" Value="30" />
+        <Member Name="magenta" Value="31" />
+        <Member Name="darkBrown" Value="32" />
+        <Member Name="beige" Value="33" />
+        <Member Name="charcoal" Value="34" />
+        <Member Name="silver" Value="35" />
       </EnumType>
       <EnumType Name="scheduleRequestActions">
         <Member Name="adminAssign" Value="1" />