CloudPC.ReadWrite.All
Allows the app to read and write the properties of Cloud PCs, without a signed-in user.
Permission Details
Read and write Cloud PCs
Allows the app to read and write the properties of Cloud PCs, without a signed-in user.
3b4349e1-8cf5-45a3-95b7-69d1751d3e6a
Read and write Cloud PCs
Allows the app to read and write the properties of Cloud PCs on behalf of the signed-in user.
9d77138f-f0e2-47ba-ab33-cd246c8b79d1
Properties
Properties is shown from stable Microsoft Graph v1.0 metadata.
| Property | Type | Description |
|---|---|---|
aadDeviceId |
StringNullable |
The Microsoft Entra device ID for the Cloud PC, also known as the Azure Active Directory (Azure AD) device ID, that consists of 32 characters in a GUID format. Generated on a VM joined to Microsoft Entra ID. Read-only. |
displayName |
StringNullable |
The display name for the Cloud PC. Maximum length is 64 characters. Read-only. You can use the cloudPC: rename API to modify the Cloud PC name. |
gracePeriodEndDateTime |
DateTimeOffsetNullable |
The date and time when the grace period ends and reprovisioning or deprovisioning happen. Required only if the status is inGracePeriod. The timestamp is shown in ISO 8601 format and Coordinated Universal Time (UTC). For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. |
id |
String |
The unique identifier of the customer-facing Cloud PC entity that consists of 32 characters in a GUID format. Read-only. Inherited from entity. |
imageDisplayName |
StringNullable |
The name of the operating system image used for the Cloud PC. Maximum length is 50 characters. Only letters (A-Z, a-z), numbers (0-9), and special characters (-,,.) are allowed for this property. The property value can't begin or end with an underscore. Read-only. |
lastModifiedDateTime |
DateTimeOffset |
The last modified date and time of the Cloud PC. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. |
managedDeviceId |
StringNullable |
The Intune enrolled device ID for the Cloud PC that consists of 32 characters in a GUID format. The managedDeviceId property of Windows 365 Business Cloud PCs is always null as Windows 365 Business Cloud PCs aren't Intune-enrolled automatically by Windows 365. Read-only. |
managedDeviceName |
StringNullable |
The Intune enrolled device name for the Cloud PC. The managedDeviceName property of Windows 365 Business Cloud PCs is always null as Windows 365 Business Cloud PCs aren't Intune-enrolled automatically by Windows 365. Read-only. |
onPremisesConnectionName |
StringNullable |
The on-premises connection that applied during the provisioning of Cloud PCs. Read-only. |
provisioningPolicyId |
StringNullable |
The provisioning policy ID for the Cloud PC that consists of 32 characters in a GUID format. A policy defines the type of Cloud PC the user wants to create. Read-only. |
provisioningPolicyName |
StringNullable |
The provisioning policy that applied during the provisioning of Cloud PCs. Maximum length is 120 characters. Read-only. |
provisioningType |
cloudPcProvisioningType |
The type of licenses to be used when provisioning Cloud PCs using this policy. The possible values are: dedicated, shared, unknownFutureValue. The default value is dedicated. |
servicePlanId |
StringNullable |
The service plan ID for the Cloud PC that consists of 32 characters in a GUID format. For more information about service plans, see Product names and service plan identifiers for licensing. Read-only. |
servicePlanName |
StringNullable |
The service plan name for the customer-facing Cloud PC entity. Read-only. |
userPrincipalName |
StringNullable |
The user principal name (UPN) of the user assigned to the Cloud PC. Maximum length is 113 characters. For more information on username policies, see Password policies and account restrictions in Microsoft Entra ID. Read-only. |
JSON Representation
JSON representation is shown from stable Microsoft Graph v1.0 metadata.
{
"@odata.type": "#microsoft.graph.cloudPC",
"aadDeviceId": "String",
"displayName": "String",
"gracePeriodEndDateTime": "String (timestamp)",
"id": "String (identifier)",
"imageDisplayName": "String",
"lastModifiedDateTime": "String (timestamp)",
"managedDeviceId": "String",
"managedDeviceName": "String",
"onPremisesConnectionName": "String",
"provisioningPolicyId": "String",
"provisioningPolicyName": "String",
"provisioningType": "String",
"servicePlanId": "String",
"servicePlanName": "String",
"userPrincipalName": "String"
}
Relationships
Relationships is shown from stable Microsoft Graph v1.0 metadata.
| Relationship | Type | Description |
|---|---|---|
cloudPCs |
cloudPC collection |
Cloud PCs in the tenant. |
provisioningPolicies |
cloudPcProvisioningPolicy collection |
Provisioning policies for Cloud PCs. |
partnerAgentInstallResults |
cloudPcPartnerAgentInstallResult collection |
The results of every partner agent's installation status on Cloud PC. |
scopeIds |
string collection |
Related scopeIds data exposed by this resource. |
status |
cloudPcStatus |
Related status data exposed by this resource. |
Graph Methods
Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
Code Examples
// Code snippets are only available for the latest version. Current version is 5.x
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.DeviceManagement.VirtualEndpoint.CloudPCs["{cloudPC-id}"].EndGracePeriod.PostAsync();
const options = {
authProvider,
};
const client = Client.init(options);
await client.api('/deviceManagement/virtualEndpoint/cloudPCs/4b18de4b-ab05-4059-8c61-0323a7df4ced/endGracePeriod')
.post();
Import-Module Microsoft.Graph.DeviceManagement.Administration
Stop-MgDeviceManagementVirtualEndpointCloudPcGracePeriod -CloudPCId $cloudPCId
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
await graph_client.device_management.virtual_endpoint.cloud_p_cs.by_cloud_p_c_id('cloudPC-id').end_grace_period.post()
App Registration
Navigate to Azure Portal
Go to App registrations in Microsoft Entra admin center
Add API Permission
Select your app → API permissions → Add a permission → Microsoft Graph
Select Permission Type
Choose Application permissions or delegated permissions and search for CloudPC.ReadWrite.All
Grant Admin Consent
Application permissions always require admin consent.