325 lines
12 KiB
PHP
325 lines
12 KiB
PHP
<?php
|
|
/**
|
|
* Copyright (c) Microsoft Corporation. All Rights Reserved. Licensed under the MIT License. See License in the project root for license information.
|
|
*
|
|
* AuthorizationPolicy File
|
|
* PHP version 7
|
|
*
|
|
* @category Library
|
|
* @package Microsoft.Graph
|
|
* @copyright (c) Microsoft Corporation. All rights reserved.
|
|
* @license https://opensource.org/licenses/MIT MIT License
|
|
* @link https://graph.microsoft.com
|
|
*/
|
|
namespace Beta\Microsoft\Graph\Model;
|
|
|
|
/**
|
|
* AuthorizationPolicy class
|
|
*
|
|
* @category Model
|
|
* @package Microsoft.Graph
|
|
* @copyright (c) Microsoft Corporation. All rights reserved.
|
|
* @license https://opensource.org/licenses/MIT MIT License
|
|
* @link https://graph.microsoft.com
|
|
*/
|
|
class AuthorizationPolicy extends PolicyBase
|
|
{
|
|
/**
|
|
* Gets the allowedToSignUpEmailBasedSubscriptions
|
|
* Indicates whether users can sign up for email based subscriptions.
|
|
*
|
|
* @return bool|null The allowedToSignUpEmailBasedSubscriptions
|
|
*/
|
|
public function getAllowedToSignUpEmailBasedSubscriptions()
|
|
{
|
|
if (array_key_exists("allowedToSignUpEmailBasedSubscriptions", $this->_propDict)) {
|
|
return $this->_propDict["allowedToSignUpEmailBasedSubscriptions"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the allowedToSignUpEmailBasedSubscriptions
|
|
* Indicates whether users can sign up for email based subscriptions.
|
|
*
|
|
* @param bool $val The allowedToSignUpEmailBasedSubscriptions
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setAllowedToSignUpEmailBasedSubscriptions($val)
|
|
{
|
|
$this->_propDict["allowedToSignUpEmailBasedSubscriptions"] = boolval($val);
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the allowedToUseSSPR
|
|
* Indicates whether the Self-Serve Password Reset feature can be used by users on the tenant.
|
|
*
|
|
* @return bool|null The allowedToUseSSPR
|
|
*/
|
|
public function getAllowedToUseSSPR()
|
|
{
|
|
if (array_key_exists("allowedToUseSSPR", $this->_propDict)) {
|
|
return $this->_propDict["allowedToUseSSPR"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the allowedToUseSSPR
|
|
* Indicates whether the Self-Serve Password Reset feature can be used by users on the tenant.
|
|
*
|
|
* @param bool $val The allowedToUseSSPR
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setAllowedToUseSSPR($val)
|
|
{
|
|
$this->_propDict["allowedToUseSSPR"] = boolval($val);
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the allowEmailVerifiedUsersToJoinOrganization
|
|
* Indicates whether a user can join the tenant by email validation.
|
|
*
|
|
* @return bool|null The allowEmailVerifiedUsersToJoinOrganization
|
|
*/
|
|
public function getAllowEmailVerifiedUsersToJoinOrganization()
|
|
{
|
|
if (array_key_exists("allowEmailVerifiedUsersToJoinOrganization", $this->_propDict)) {
|
|
return $this->_propDict["allowEmailVerifiedUsersToJoinOrganization"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the allowEmailVerifiedUsersToJoinOrganization
|
|
* Indicates whether a user can join the tenant by email validation.
|
|
*
|
|
* @param bool $val The allowEmailVerifiedUsersToJoinOrganization
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setAllowEmailVerifiedUsersToJoinOrganization($val)
|
|
{
|
|
$this->_propDict["allowEmailVerifiedUsersToJoinOrganization"] = boolval($val);
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the allowInvitesFrom
|
|
* Indicates who can invite external users to the organization. Possible values are: none, adminsAndGuestInviters, adminsGuestInvitersAndAllMembers, everyone. everyone is the default setting for all cloud environments except US Government. See more in the table below.
|
|
*
|
|
* @return AllowInvitesFrom|null The allowInvitesFrom
|
|
*/
|
|
public function getAllowInvitesFrom()
|
|
{
|
|
if (array_key_exists("allowInvitesFrom", $this->_propDict)) {
|
|
if (is_a($this->_propDict["allowInvitesFrom"], "\Beta\Microsoft\Graph\Model\AllowInvitesFrom") || is_null($this->_propDict["allowInvitesFrom"])) {
|
|
return $this->_propDict["allowInvitesFrom"];
|
|
} else {
|
|
$this->_propDict["allowInvitesFrom"] = new AllowInvitesFrom($this->_propDict["allowInvitesFrom"]);
|
|
return $this->_propDict["allowInvitesFrom"];
|
|
}
|
|
}
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* Sets the allowInvitesFrom
|
|
* Indicates who can invite external users to the organization. Possible values are: none, adminsAndGuestInviters, adminsGuestInvitersAndAllMembers, everyone. everyone is the default setting for all cloud environments except US Government. See more in the table below.
|
|
*
|
|
* @param AllowInvitesFrom $val The allowInvitesFrom
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setAllowInvitesFrom($val)
|
|
{
|
|
$this->_propDict["allowInvitesFrom"] = $val;
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the blockMsolPowerShell
|
|
* To disable the use of MSOL PowerShell set this property to true. This will also disable user-based access to the legacy service endpoint used by MSOL PowerShell. This does not affect Azure AD Connect or Microsoft Graph.
|
|
*
|
|
* @return bool|null The blockMsolPowerShell
|
|
*/
|
|
public function getBlockMsolPowerShell()
|
|
{
|
|
if (array_key_exists("blockMsolPowerShell", $this->_propDict)) {
|
|
return $this->_propDict["blockMsolPowerShell"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the blockMsolPowerShell
|
|
* To disable the use of MSOL PowerShell set this property to true. This will also disable user-based access to the legacy service endpoint used by MSOL PowerShell. This does not affect Azure AD Connect or Microsoft Graph.
|
|
*
|
|
* @param bool $val The blockMsolPowerShell
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setBlockMsolPowerShell($val)
|
|
{
|
|
$this->_propDict["blockMsolPowerShell"] = boolval($val);
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the defaultUserRolePermissions
|
|
* Specifies certain customizable permissions for default user role.
|
|
*
|
|
* @return DefaultUserRolePermissions|null The defaultUserRolePermissions
|
|
*/
|
|
public function getDefaultUserRolePermissions()
|
|
{
|
|
if (array_key_exists("defaultUserRolePermissions", $this->_propDict)) {
|
|
if (is_a($this->_propDict["defaultUserRolePermissions"], "\Beta\Microsoft\Graph\Model\DefaultUserRolePermissions") || is_null($this->_propDict["defaultUserRolePermissions"])) {
|
|
return $this->_propDict["defaultUserRolePermissions"];
|
|
} else {
|
|
$this->_propDict["defaultUserRolePermissions"] = new DefaultUserRolePermissions($this->_propDict["defaultUserRolePermissions"]);
|
|
return $this->_propDict["defaultUserRolePermissions"];
|
|
}
|
|
}
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* Sets the defaultUserRolePermissions
|
|
* Specifies certain customizable permissions for default user role.
|
|
*
|
|
* @param DefaultUserRolePermissions $val The defaultUserRolePermissions
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setDefaultUserRolePermissions($val)
|
|
{
|
|
$this->_propDict["defaultUserRolePermissions"] = $val;
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the enabledPreviewFeatures
|
|
* List of features enabled for private preview on the tenant.
|
|
*
|
|
* @return string|null The enabledPreviewFeatures
|
|
*/
|
|
public function getEnabledPreviewFeatures()
|
|
{
|
|
if (array_key_exists("enabledPreviewFeatures", $this->_propDict)) {
|
|
return $this->_propDict["enabledPreviewFeatures"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the enabledPreviewFeatures
|
|
* List of features enabled for private preview on the tenant.
|
|
*
|
|
* @param string $val The enabledPreviewFeatures
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setEnabledPreviewFeatures($val)
|
|
{
|
|
$this->_propDict["enabledPreviewFeatures"] = $val;
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the guestUserRoleId
|
|
* Represents role templateId for the role that should be granted to guest user. Refer to List unifiedRoleDefinitions to find the list of available role templates. Currently following roles are supported: User (a0b1b346-4d3e-4e8b-98f8-753987be4970), Guest User (10dae51f-b6af-4016-8d66-8c2a99b929b3), and Restricted Guest User (2af84b1e-32c8-42b7-82bc-daa82404023b).
|
|
*
|
|
* @return string|null The guestUserRoleId
|
|
*/
|
|
public function getGuestUserRoleId()
|
|
{
|
|
if (array_key_exists("guestUserRoleId", $this->_propDict)) {
|
|
return $this->_propDict["guestUserRoleId"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the guestUserRoleId
|
|
* Represents role templateId for the role that should be granted to guest user. Refer to List unifiedRoleDefinitions to find the list of available role templates. Currently following roles are supported: User (a0b1b346-4d3e-4e8b-98f8-753987be4970), Guest User (10dae51f-b6af-4016-8d66-8c2a99b929b3), and Restricted Guest User (2af84b1e-32c8-42b7-82bc-daa82404023b).
|
|
*
|
|
* @param string $val The guestUserRoleId
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setGuestUserRoleId($val)
|
|
{
|
|
$this->_propDict["guestUserRoleId"] = $val;
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Gets the permissionGrantPolicyIdsAssignedToDefaultUserRole
|
|
* Indicates if user consent to apps is allowed, and if it is, which app consent policy (permissionGrantPolicy) governs the permission for users to grant consent. Values should be in the format managePermissionGrantsForSelf.{id}, where {id} is the id of a built-in or custom app consent policy. An empty list indicates user consent to apps is disabled.
|
|
*
|
|
* @return string|null The permissionGrantPolicyIdsAssignedToDefaultUserRole
|
|
*/
|
|
public function getPermissionGrantPolicyIdsAssignedToDefaultUserRole()
|
|
{
|
|
if (array_key_exists("permissionGrantPolicyIdsAssignedToDefaultUserRole", $this->_propDict)) {
|
|
return $this->_propDict["permissionGrantPolicyIdsAssignedToDefaultUserRole"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the permissionGrantPolicyIdsAssignedToDefaultUserRole
|
|
* Indicates if user consent to apps is allowed, and if it is, which app consent policy (permissionGrantPolicy) governs the permission for users to grant consent. Values should be in the format managePermissionGrantsForSelf.{id}, where {id} is the id of a built-in or custom app consent policy. An empty list indicates user consent to apps is disabled.
|
|
*
|
|
* @param string $val The permissionGrantPolicyIdsAssignedToDefaultUserRole
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setPermissionGrantPolicyIdsAssignedToDefaultUserRole($val)
|
|
{
|
|
$this->_propDict["permissionGrantPolicyIdsAssignedToDefaultUserRole"] = $val;
|
|
return $this;
|
|
}
|
|
|
|
|
|
/**
|
|
* Gets the defaultUserRoleOverrides
|
|
*
|
|
* @return array|null The defaultUserRoleOverrides
|
|
*/
|
|
public function getDefaultUserRoleOverrides()
|
|
{
|
|
if (array_key_exists("defaultUserRoleOverrides", $this->_propDict)) {
|
|
return $this->_propDict["defaultUserRoleOverrides"];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the defaultUserRoleOverrides
|
|
*
|
|
* @param DefaultUserRoleOverride[] $val The defaultUserRoleOverrides
|
|
*
|
|
* @return AuthorizationPolicy
|
|
*/
|
|
public function setDefaultUserRoleOverrides($val)
|
|
{
|
|
$this->_propDict["defaultUserRoleOverrides"] = $val;
|
|
return $this;
|
|
}
|
|
|
|
}
|