Home > Use Nitro > Before You Begin
Export to PDFRead the following information before you get started with Nitro.
Nitro in Elements leverages Microsoft Graph beta APIs (the APIs in preview) for some operations that are currently unsupported by version v1.0. The features using the following beta APIs may be affected if Microsoft introduces changes to their beta APIs.
Refer to the tables below for the beta version API methods of Microsoft Graph that Nitro uses.
Microsoft Entra ID
| API Method | Note |
|---|---|
| Create group | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Add owners | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Add members | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List unifiedRoleDefinitions | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create unifiedRoleAssignment | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| group: assignLicense | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Get group | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List group members | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List group memberOf | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update group | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create user | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List directoryRoles | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Activate directoryRole | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Add directory role member | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List subscribedSkus | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| user: assignLicense | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List users | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List user memberOf | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update user | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List domains | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Get authorizationPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update authorizationPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Get identitySecurityDefaultsEnforcementPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update identitySecurityDefaultsEnforcementPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
Microsoft Endpoint Manager
| API Method | Note |
|---|---|
| Create targetedManagedAppConfiguration | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| targetApps action | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update targetedManagedAppConfiguration | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List namedLocations | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create androidManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update androidManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create iosManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create windowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update iosManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update windowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List targetedManagedAppConfigurations | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create managedMobileApp | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List managedMobileApps | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List deviceCompliancePolicies | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create defaultDeviceCompliancePolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update defaultDeviceCompliancePolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| scheduleActionsForRules action | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List androidManagedAppProtections | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List iosManagedAppProtections | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List windowsInformationProtectionPolicies | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List mdmWindowsInformationProtectionPolicies | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Update MdmWindowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List servicePrincipals | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create mdmWindowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| List notificationMessageTemplates | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create notificationMessageTemplate | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create localizedNotificationMessage | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Create deviceManagementIntent | The API method is not available in Microsoft Graph API 4.65.0 version. |
| updateSettings action | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create deviceManagementConfigurationPolicy | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Update deviceManagementConfigurationPolicy | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List deviceManagementIntents | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Get deviceManagementIntegerSettingInstance | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Get deviceManagementIntentAssignment | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List deviceManagementConfigurationPolicies | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Get deviceManagementConfigurationSetting | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Update deviceManagementIntent | The API method is not available in Microsoft Graph API 4.65.0 version. |
| createInstance action | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create deviceManagementScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create deviceShellScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List deviceManagementScripts | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Get deviceManagementScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Update deviceManagementScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Update deviceShellScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List groupPolicyConfigurations | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create groupPolicyConfiguration | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Update groupPolicyConfiguration | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List WindowsAutopilotDeploymentProfiles | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create activeDirectoryWindowsAutopilotDeploymentProfile | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Update activeDirectoryWindowsAutopilotDeploymentProfile | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create windowsAutopilotDeviceIdentity | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List deviceShellScripts | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Get deviceShellScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List roleScopeTags | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create roleScopeTag | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List mobileApps | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create mobileApps | The API method is not available in Microsoft Graph API 4.65.0 version. |
| List managementConditions | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Create managementConditions | The API method is not available in Microsoft Graph API 4.65.0 version. |
To view the beta API methods that are used in Policies for Microsoft 365, refer to the Policies for Microsoft 365 User Guide.
To view the beta API methods that are used in Insights, refer to the Insights User Guide.
To view the beta API methods that are used in Cloud Backup for Microsoft 365, refer to the Cloud Backup for Microsoft 365 User Guide.
Refer to the following sections to view the supported and unsupported settings of Nitro.
For some Microsoft modules, not all settings are supported by Nitro. Refer to the table below for details.
| Module | Setting | Supported Properties | Unsupported Properties |
|---|---|---|---|
| Microsoft Entra ID | User Creation | Name, First Name, Last Name, User Principal Name, Job Title, Department, Company, Usage Location, Licenses, Street Address, State, Office, Country, City, Zip or Postal Code, Mail, Employee ID, License, Role, MailNickname, Block sign in, PasswordProfile.ForceChangePasswordNextSignIn, PasswordProfile.Password | The other properties are unsupported. |
| Microsoft Entra ID | Group Creation (Only support groups with the Security group type and Assigned membership type.) | Membership Type, Group Name, Group Description, Member, License, Role, MailEnabled, MailNickname, SecurityEnabled, Visibility, Microsoft Entra roles can be assigned to the group, Owners | The other properties are unsupported. |
| Microsoft Entra ID | Self-service Password Reset (SSPR) | The other properties are supported. | On-premises integration |
| Microsoft Entra ID | External Collaboration | The other properties are supported. | Self-service sign up |
| Microsoft Endpoint Manager | Enrollment | Windows enrollment > Automatic Enrollment, Deployment Profiles | Windows Autopilot Deployment Program > Devices; Automatic Enrollment > MDM user scope, MAM user scope; Assignments |
| Microsoft Endpoint Manager | Compliance Policy | The other properties in Policies are supported. | Location, Actions for noncompliance, Device Properties, Assignments |
| Microsoft Endpoint Manager | Conditional Access | The other properties in Policies are supported. | Use Conditional Access App Control; Assignments > Users and groups > Include/Exclude > Users and groups |
| Microsoft Endpoint Manager | Configuration Profile | Only support Administrative Template for Windows 10 or later versions. | Assignments, Scope tags, Configuration settings |
| Microsoft Endpoint Manager | Device Script | The other properties are supported. | Script Frequency, Scope, Assignments |
| App Protection Policy | The other properties are supported. | Does not support importing Network boundary, Assignments, and Encrypted file extensions. | |
| Microsoft Endpoint Manager | App Configuration Profile | The other properties are supported. | Profiles of the Managed Device category, Assignments |
| Microsoft Endpoint Manager | Security Profile | Security baselines, Endpoint detection and response | Assignments |
| Exchange Online | Ransomware Extensions Malware Filter Policy | The other properties are supported. | Applied to |
| Exchange Online | Remove Files from Mailbox Malware Filter Policy | The other properties are supported. | Applied to |
| Exchange Online | Top Spamming Countries Spam Filter Policy | The other properties are supported. | Allow list, Block list, Applied to |
| Exchange Online | Special Language Email Message Spam Filter Policy | The other properties are supported. | Allow list, Block list, Applied to |
| Exchange Online | Prevent Auto Forwarding Mail Flow Rule | The other properties are supported. | The recipient; DLP-related mail flow rules |
| Exchange Online | Attachment Containing Link Mail Flow Rule | The other properties are supported. | The recipient; DLP-related mail flow rules |
| Exchange Online | Office 365 Message Encryption (OME) Mail Flow Rule | The other properties are supported. | The recipient; DLP-related mail flow rules |
| SharePoint Online, OneDrive | Sharing Setting | The other properties are supported. | Add a security group |
| Microsoft Teams | Allow Guest Access | Allow guest access in Teams, Make private calls, Allow IP video, Screen sharing mode, Allow Meet Now, Edit sent messages, Delete sent messages, Chat, Use Giphys in conversations, Giphy content rating, Use Memes in conversations, Use Stickers in conversations, Allow immersive reader for viewing messages, LiveCaptionsEnabledType, AllowTranscription | The other properties are unsupported. |
| Microsoft Teams | Meeting Policy | Name, Description, Meet now in channels,Outlook add-in, Channel meeting scheduling, Private meeting scheduling, Transcription, Cloud recording, Mode for IP audio, Mode for IP video, IP video, Local broadcasting, Media bit rate (Kbs), Screen sharing mode, Allow a participant to give or request control, Allow an external participant to give or request control, PowerPoint sharing, Whiteboard, Shared notes, Let anonymous people start a meeting, Roles that have presenter rights in meetings, Automatically admit people, Allow dial-in users to bypass the lobby, Meet now in private meetings, Live captions, Chat in meetings, Meeting reactions, Engagement report, Store recordings outside of your country or region, Select video filters, Who can register | The other properties are unsupported. |
| Microsoft Teams | Channels Policy | Description, Create private channels | The other properties are unsupported. |
| Microsoft Teams | File Storage Options | Box, Dropbox, Egnyte, Google Drive, Citrix files | The other properties are unsupported. |
| Microsoft Teams | Live Event Policy | Name, Description, Live events scheduling, Transcription for attendees, Who can join scheduled live events, Who can record an event | The other properties are unsupported. |
| Microsoft Teams | Policy | Name, Description, Create private channels | The other properties are unsupported. |
| Microsoft Teams | Messaging Policy | Name, Description, Owners can delete sent messages, Delete sent messages, Delete chat, Edit sent messages, Read receipts, Chat, Giphy in conversations, Giphy content rating, Memes in conversations, Stickers in conversations, URL previews, Translate messages, Immersive reader for messages, Send urgent messages using priority notifications, Create voice messages, On mobile devices, display favorite channels above recent chats, Remove users from group chats, Suggested replies | The other properties are unsupported. |
To view the supported and unsupported settings for Policies for Microsoft 365, refer to the Policies for Microsoft 365 User Guide.
To view the supported and unsupported settings for Insights, refer to the Insights User Guide.
Backup scope and Backup frequency settings are supported for Cloud Backup for Microsoft 365. Refer to Change the Backup Scope and Change the Backup Frequency for details.
Note the following:
For the backup scope, only the workspace level settings can be applied via the template.
After the template is applied to a customer, a backup job will start immediately, so the first job will not start at the configured start time of the backup frequency.
Before managing templates of Microsoft settings, you must create app profiles for your customers’ organizations.
For detailed instructions, refer to Manage Customer App Profiles.