Home > Use Nitro > Before You Begin

Export to PDF

Before You Begin

Read the following information before you get started with Nitro.

API Beta Version Used by Nitro

Nitro in Elements leverages Microsoft Graph beta APIs (the APIs in preview) for some operations that are currently unsupported by version v1.0. The features using the following beta APIs may be affected if Microsoft introduces changes to their beta APIs.

Refer to the tables below for the beta version API methods of Microsoft Graph that Nitro uses.

Microsoft Entra ID

API MethodNote
Create groupThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Add ownersThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Add membersThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List unifiedRoleDefinitionsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create unifiedRoleAssignmentThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
group: assignLicenseThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Get groupThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List group membersThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List group memberOfThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update groupThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create userThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List directoryRolesThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Activate directoryRoleThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Add directory role memberThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List subscribedSkusThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
user: assignLicenseThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List usersThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List user memberOfThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update userThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List domainsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Get authorizationPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update authorizationPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Get identitySecurityDefaultsEnforcementPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update identitySecurityDefaultsEnforcementPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.

Microsoft Endpoint Manager

API MethodNote
Create targetedManagedAppConfigurationThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
targetApps actionThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update targetedManagedAppConfigurationThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List namedLocationsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create androidManagedAppProtectionThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update androidManagedAppProtectionThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create iosManagedAppProtectionThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create windowsInformationProtectionPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update iosManagedAppProtectionThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update windowsInformationProtectionPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List targetedManagedAppConfigurationsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create managedMobileAppThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List managedMobileAppsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List deviceCompliancePoliciesThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create defaultDeviceCompliancePolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update defaultDeviceCompliancePolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
scheduleActionsForRules actionThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List androidManagedAppProtectionsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List iosManagedAppProtectionsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List windowsInformationProtectionPoliciesThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List mdmWindowsInformationProtectionPoliciesThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Update MdmWindowsInformationProtectionPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List servicePrincipalsThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create mdmWindowsInformationProtectionPolicyThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
List notificationMessageTemplatesThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create notificationMessageTemplateThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create localizedNotificationMessageThe API method in Microsoft Graph API 4.65.0 version does not support all settings.
Create deviceManagementIntentThe API method is not available in Microsoft Graph API 4.65.0 version.
updateSettings actionThe API method is not available in Microsoft Graph API 4.65.0 version.
Create deviceManagementConfigurationPolicyThe API method is not available in Microsoft Graph API 4.65.0 version.
Update deviceManagementConfigurationPolicyThe API method is not available in Microsoft Graph API 4.65.0 version.
List deviceManagementIntentsThe API method is not available in Microsoft Graph API 4.65.0 version.
Get deviceManagementIntegerSettingInstanceThe API method is not available in Microsoft Graph API 4.65.0 version.
Get deviceManagementIntentAssignmentThe API method is not available in Microsoft Graph API 4.65.0 version.
List deviceManagementConfigurationPoliciesThe API method is not available in Microsoft Graph API 4.65.0 version.
Get deviceManagementConfigurationSettingThe API method is not available in Microsoft Graph API 4.65.0 version.
Update deviceManagementIntentThe API method is not available in Microsoft Graph API 4.65.0 version.
createInstance actionThe API method is not available in Microsoft Graph API 4.65.0 version.
Create deviceManagementScriptThe API method is not available in Microsoft Graph API 4.65.0 version.
Create deviceShellScriptThe API method is not available in Microsoft Graph API 4.65.0 version.
List deviceManagementScriptsThe API method is not available in Microsoft Graph API 4.65.0 version.
Get deviceManagementScriptThe API method is not available in Microsoft Graph API 4.65.0 version.
Update deviceManagementScriptThe API method is not available in Microsoft Graph API 4.65.0 version.
Update deviceShellScriptThe API method is not available in Microsoft Graph API 4.65.0 version.
List groupPolicyConfigurationsThe API method is not available in Microsoft Graph API 4.65.0 version.
Create groupPolicyConfigurationThe API method is not available in Microsoft Graph API 4.65.0 version.
Update groupPolicyConfigurationThe API method is not available in Microsoft Graph API 4.65.0 version.
List WindowsAutopilotDeploymentProfilesThe API method is not available in Microsoft Graph API 4.65.0 version.
Create activeDirectoryWindowsAutopilotDeploymentProfileThe API method is not available in Microsoft Graph API 4.65.0 version.
Update activeDirectoryWindowsAutopilotDeploymentProfileThe API method is not available in Microsoft Graph API 4.65.0 version.
Create windowsAutopilotDeviceIdentityThe API method is not available in Microsoft Graph API 4.65.0 version.
List deviceShellScriptsThe API method is not available in Microsoft Graph API 4.65.0 version.
Get deviceShellScriptThe API method is not available in Microsoft Graph API 4.65.0 version.
List roleScopeTagsThe API method is not available in Microsoft Graph API 4.65.0 version.
Create roleScopeTagThe API method is not available in Microsoft Graph API 4.65.0 version.
List mobileAppsThe API method is not available in Microsoft Graph API 4.65.0 version.
Create mobileAppsThe API method is not available in Microsoft Graph API 4.65.0 version.
List managementConditionsThe API method is not available in Microsoft Graph API 4.65.0 version.
Create managementConditionsThe API method is not available in Microsoft Graph API 4.65.0 version.

To view the beta API methods that are used in Policies for Microsoft 365, refer to the Policies for Microsoft 365 User Guide.

To view the beta API methods that are used in Insights, refer to the Insights User Guide.

To view the beta API methods that are used in Cloud Backup for Microsoft 365, refer to the Cloud Backup for Microsoft 365 User Guide.

Supported and Unsupported Settings

Refer to the following sections to view the supported and unsupported settings of Nitro.

Microsoft

For some Microsoft modules, not all settings are supported by Nitro. Refer to the table below for details.

ModuleSettingSupported PropertiesUnsupported Properties
Microsoft Entra IDUser CreationName, First Name, Last Name, User Principal Name, Job Title, Department, Company, Usage Location, Licenses, Street Address, State, Office, Country, City, Zip or Postal Code, Mail, Employee ID, License, Role, MailNickname, Block sign in, PasswordProfile.ForceChangePasswordNextSignIn, PasswordProfile.PasswordThe other properties are unsupported.
Microsoft Entra IDGroup Creation (Only support groups with the Security group type and Assigned membership type.)Membership Type, Group Name, Group Description, Member, License, Role, MailEnabled, MailNickname, SecurityEnabled, Visibility, Microsoft Entra roles can be assigned to the group, OwnersThe other properties are unsupported.
Microsoft Entra IDSelf-service Password Reset (SSPR)The other properties are supported.On-premises integration
Microsoft Entra IDExternal CollaborationThe other properties are supported.Self-service sign up
Microsoft Endpoint ManagerEnrollmentWindows enrollment > Automatic Enrollment, Deployment ProfilesWindows Autopilot Deployment Program > Devices; Automatic Enrollment > MDM user scope, MAM user scope; Assignments
Microsoft Endpoint ManagerCompliance PolicyThe other properties in Policies are supported.Location, Actions for noncompliance, Device Properties, Assignments
Microsoft Endpoint ManagerConditional AccessThe other properties in Policies are supported.Use Conditional Access App Control; Assignments > Users and groups > Include/Exclude > Users and groups
Microsoft Endpoint ManagerConfiguration ProfileOnly support Administrative Template for Windows 10 or later versions.Assignments, Scope tags, Configuration settings
Microsoft Endpoint ManagerDevice ScriptThe other properties are supported.Script Frequency, Scope, Assignments
App Protection PolicyThe other properties are supported.Does not support importing Network boundary, Assignments, and Encrypted file extensions.
Microsoft Endpoint ManagerApp Configuration ProfileThe other properties are supported.Profiles of the Managed Device category, Assignments
Microsoft Endpoint ManagerSecurity ProfileSecurity baselines, Endpoint detection and responseAssignments
Exchange OnlineRansomware Extensions Malware Filter PolicyThe other properties are supported.Applied to
Exchange OnlineRemove Files from Mailbox Malware Filter PolicyThe other properties are supported.Applied to
Exchange OnlineTop Spamming Countries Spam Filter PolicyThe other properties are supported.Allow list, Block list, Applied to
Exchange OnlineSpecial Language Email Message Spam Filter PolicyThe other properties are supported.Allow list, Block list, Applied to
Exchange OnlinePrevent Auto Forwarding Mail Flow RuleThe other properties are supported.The recipient; DLP-related mail flow rules
Exchange OnlineAttachment Containing Link Mail Flow RuleThe other properties are supported.The recipient; DLP-related mail flow rules
Exchange OnlineOffice 365 Message Encryption (OME) Mail Flow RuleThe other properties are supported.The recipient; DLP-related mail flow rules
SharePoint Online, OneDriveSharing SettingThe other properties are supported.Add a security group
Microsoft TeamsAllow Guest AccessAllow guest access in Teams, Make private calls, Allow IP video, Screen sharing mode, Allow Meet Now, Edit sent messages, Delete sent messages, Chat, Use Giphys in conversations, Giphy content rating, Use Memes in conversations, Use Stickers in conversations, Allow immersive reader for viewing messages, LiveCaptionsEnabledType, AllowTranscriptionThe other properties are unsupported.
Microsoft TeamsMeeting PolicyName, Description, Meet now in channels,Outlook add-in, Channel meeting scheduling, Private meeting scheduling, Transcription, Cloud recording, Mode for IP audio, Mode for IP video, IP video, Local broadcasting, Media bit rate (Kbs), Screen sharing mode, Allow a participant to give or request control, Allow an external participant to give or request control, PowerPoint sharing, Whiteboard, Shared notes, Let anonymous people start a meeting, Roles that have presenter rights in meetings, Automatically admit people, Allow dial-in users to bypass the lobby, Meet now in private meetings, Live captions, Chat in meetings, Meeting reactions, Engagement report, Store recordings outside of your country or region, Select video filters, Who can registerThe other properties are unsupported.
Microsoft TeamsChannels PolicyDescription, Create private channelsThe other properties are unsupported.
Microsoft TeamsFile Storage OptionsBox, Dropbox, Egnyte, Google Drive, Citrix filesThe other properties are unsupported.
Microsoft TeamsLive Event PolicyName, Description, Live events scheduling, Transcription for attendees, Who can join scheduled live events, Who can record an eventThe other properties are unsupported.
Microsoft TeamsPolicyName, Description, Create private channelsThe other properties are unsupported.
Microsoft TeamsMessaging PolicyName, Description, Owners can delete sent messages, Delete sent messages, Delete chat, Edit sent messages, Read receipts, Chat, Giphy in conversations, Giphy content rating, Memes in conversations, Stickers in conversations, URL previews, Translate messages, Immersive reader for messages, Send urgent messages using priority notifications, Create voice messages, On mobile devices, display favorite channels above recent chats, Remove users from group chats, Suggested repliesThe other properties are unsupported.

Policies for Microsoft 365

To view the supported and unsupported settings for Policies for Microsoft 365, refer to the Policies for Microsoft 365 User Guide.

Insights

To view the supported and unsupported settings for Insights, refer to the Insights User Guide.

Cloud Backup for Microsoft 365

Backup scope and Backup frequency settings are supported for Cloud Backup for Microsoft 365. Refer to Change the Backup Scope and Change the Backup Frequency for details.

Note the following:

  • For the backup scope, only the workspace level settings can be applied via the template.

  • After the template is applied to a customer, a backup job will start immediately, so the first job will not start at the configured start time of the backup frequency.

Customer App Profiles

Before managing templates of Microsoft settings, you must create app profiles for your customers’ organizations.

For detailed instructions, refer to Manage Customer App Profiles.