{"command":{"effect":"write","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Updates the default device settings profile for an account.","properties":{"path":{"type":"object","properties":{"account_id":{"$ref":"#/definitions/teams-devices_identifier"}},"required":["account_id"],"additionalProperties":false},"body":{"type":"object","properties":{"allow_mode_switch":{"$ref":"#/definitions/teams-devices_allow_mode_switch"},"allow_updates":{"$ref":"#/definitions/teams-devices_allow_updates"},"allowed_to_leave":{"$ref":"#/definitions/teams-devices_allowed_to_leave"},"auto_connect":{"$ref":"#/definitions/teams-devices_auto_connect"},"captive_portal":{"$ref":"#/definitions/teams-devices_captive_portal"},"disable_auto_fallback":{"$ref":"#/definitions/teams-devices_disable_auto_fallback"},"dns_search_suffixes":{"$ref":"#/definitions/teams-devices_dns_search_suffixes"},"enable_device_credential_authentication":{"$ref":"#/definitions/teams-devices_enable_device_credential_authentication"},"exclude":{"$ref":"#/definitions/teams-devices_exclude_request"},"exclude_office_ips":{"$ref":"#/definitions/teams-devices_exclude_office_ips"},"global_acceleration":{"$ref":"#/definitions/teams-devices_global_acceleration"},"include":{"$ref":"#/definitions/teams-devices_include_request"},"lan_allow_minutes":{"$ref":"#/definitions/teams-devices_lan_allow_minutes"},"lan_allow_subnet_size":{"$ref":"#/definitions/teams-devices_lan_allow_subnet_size"},"register_interface_ip_with_dns":{"$ref":"#/definitions/teams-devices_register_interface_ip_with_dns"},"sccm_vpn_boundary_support":{"$ref":"#/definitions/teams-devices_sccm_vpn_boundary_support"},"service_mode_v2":{"$ref":"#/definitions/teams-devices_service_mode_v2"},"support_url":{"$ref":"#/definitions/teams-devices_support_url"},"switch_locked":{"$ref":"#/definitions/teams-devices_switch_locked"},"tunnel_protocol":{"$ref":"#/definitions/teams-devices_tunnel_protocol"},"uninstall_protection":{"$ref":"#/definitions/teams-devices_uninstall_protection"},"virtual_networks":{"$ref":"#/definitions/teams-devices_virtual_networks"}}}},"required":["path","body"],"additionalProperties":false,"definitions":{"teams-devices_identifier":{"type":"string","examples":["699d98642c564d2e855e9661899b7252"]},"teams-devices_allow_mode_switch":{"description":"Whether to allow the user to switch WARP between modes.","type":"boolean","default":false,"examples":[true]},"teams-devices_allow_updates":{"description":"Whether to receive update notifications when a new version of the client is available.","type":"boolean","default":false,"examples":[true]},"teams-devices_allowed_to_leave":{"description":"Whether to allow devices to leave the organization.","type":"boolean","default":true,"examples":[true]},"teams-devices_auto_connect":{"description":"The amount of time in seconds to reconnect after having been disabled.","type":"number","default":0,"examples":[0]},"teams-devices_captive_portal":{"description":"Turn on the captive portal after the specified amount of time.","type":"number","default":180,"examples":[180]},"teams-devices_disable_auto_fallback":{"description":"If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`.","type":"boolean","default":false,"examples":[true]},"teams-devices_dns_search_suffixes":{"description":"List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear.","type":"array","items":{"$ref":"#/definitions/teams-devices_dns_search_suffix"},"default":[]},"teams-devices_enable_device_credential_authentication":{"description":"Determines whether the WARP client can silently reauthenticate the user with device credentials (Microsoft Entra) instead of prompting for browser-based reauthentication.","type":"boolean","default":false,"examples":[false]},"teams-devices_exclude_request":{"description":"List of routes excluded in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request.","type":"array","items":{"$ref":"#/definitions/teams-devices_split_tunnel"}},"teams-devices_exclude_office_ips":{"description":"Whether to add Microsoft IPs to Split Tunnel exclusions.","type":"boolean","default":false,"examples":[true]},"teams-devices_global_acceleration":{"description":"Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/.","type":["object","null"],"properties":{"allow_manual_override":{"description":"Whether WARP users may manually override the automatic Global Acceleration decision. Defaults to true when not provided.","type":"boolean","default":true,"examples":[true]},"api_endpoints":{"description":"IP:port entries for the API endpoints.","type":"array","items":{"type":"string"},"maxItems":5,"examples":[["198.51.100.1:443"]]},"autoswitch":{"description":"Automatically switch Global Acceleration regions based on device location. Defaults to false when not provided.","type":"boolean","default":false,"examples":[true]},"enabled":{"description":"Global acceleration settings are used only when \"enabled\".","type":"boolean","examples":[true]},"masque_endpoints":{"description":"IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided.","type":"array","items":{"type":"string"},"maxItems":5,"examples":[["198.51.100.1:443"]]},"wireguard_endpoints":{"description":"IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided.","type":"array","items":{"type":"string"},"maxItems":5,"examples":[["198.51.100.1:2408"]]}},"required":["enabled","wireguard_endpoints","masque_endpoints","api_endpoints"]},"teams-devices_include_request":{"description":"List of routes included in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request.","type":"array","items":{"$ref":"#/definitions/teams-devices_split_tunnel_include"}},"teams-devices_lan_allow_minutes":{"description":"The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset.","type":"number","examples":[30]},"teams-devices_lan_allow_subnet_size":{"description":"The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset.","type":"number","examples":[24]},"teams-devices_register_interface_ip_with_dns":{"description":"Determines if the operating system will register WARP's local interface IP with your on-premises DNS server.","type":"boolean","default":true,"examples":[true]},"teams-devices_sccm_vpn_boundary_support":{"description":"Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).","type":"boolean","default":false,"examples":[false]},"teams-devices_service_mode_v2":{"type":"object","properties":{"mode":{"description":"The mode to run the WARP client under.","type":"string","examples":["proxy"]},"port":{"description":"The port number when used with proxy mode.","type":"number","examples":[3000]}}},"teams-devices_support_url":{"description":"The URL to launch when the Send Feedback button is clicked.","type":"string","default":"","examples":["https://1.1.1.1/help"]},"teams-devices_switch_locked":{"description":"Whether to allow the user to turn off the WARP switch and disconnect the client.","type":"boolean","default":false,"examples":[true]},"teams-devices_tunnel_protocol":{"description":"Determines which tunnel protocol to use.","type":"string","default":"","examples":["wireguard"]},"teams-devices_uninstall_protection":{"description":"Determines whether uninstalling the WARP client requires an override code. (Windows only).","type":"boolean","default":false,"examples":[false]},"teams-devices_virtual_networks":{"description":"Virtual network access settings for the device.","type":["object","null"],"properties":{"allowed":{"description":"List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required.","type":"array","items":{"format":"uuid","type":"string"},"minItems":1,"uniqueItems":true,"examples":[["f174e90a-fafe-4643-bbbc-4a0ed4fc8415"]]},"default":{"description":"The default virtual network ID. Must be included in the `allowed` list.","type":"string","format":"uuid","examples":["f174e90a-fafe-4643-bbbc-4a0ed4fc8415"]}},"required":["allowed","default"]},"teams-devices_dns_search_suffix":{"type":"object","properties":{"description":{"description":"A description of the DNS search suffix.","type":"string","examples":["Example internal domains"]},"suffix":{"description":"The DNS search suffix to append when resolving short hostnames.","type":"string","examples":["internal.corp"]}},"required":["suffix"]},"teams-devices_split_tunnel":{"type":"object","oneOf":[{"$ref":"#/definitions/teams-devices_exclude_split_tunnel_with_address"},{"$ref":"#/definitions/teams-devices_exclude_split_tunnel_with_host"}]},"teams-devices_split_tunnel_include":{"type":"object","oneOf":[{"$ref":"#/definitions/teams-devices_include_split_tunnel_with_address"},{"$ref":"#/definitions/teams-devices_include_split_tunnel_with_host"}]},"teams-devices_exclude_split_tunnel_with_address":{"type":"object","properties":{"address":{"$ref":"#/definitions/teams-devices_split_tunnel_address"},"description":{"$ref":"#/definitions/teams-devices_split_tunnel_description"}},"required":["address"]},"teams-devices_exclude_split_tunnel_with_host":{"type":"object","properties":{"description":{"$ref":"#/definitions/teams-devices_split_tunnel_description"},"host":{"$ref":"#/definitions/teams-devices_split_tunnel_host"}},"required":["host"]},"teams-devices_include_split_tunnel_with_address":{"type":"object","properties":{"address":{"$ref":"#/definitions/teams-devices_include_split_tunnel_address"},"description":{"$ref":"#/definitions/teams-devices_include_split_tunnel_description"}},"required":["address"]},"teams-devices_include_split_tunnel_with_host":{"type":"object","properties":{"description":{"$ref":"#/definitions/teams-devices_include_split_tunnel_description"},"host":{"$ref":"#/definitions/teams-devices_include_split_tunnel_host"}},"required":["host"]},"teams-devices_split_tunnel_address":{"description":"The address in CIDR format to exclude from the tunnel. If `address` is present, `host` must not be present.","type":"string","examples":["192.0.2.0/24"]},"teams-devices_split_tunnel_description":{"description":"A description of the Split Tunnel item, displayed in the client UI.","type":"string","maxLength":100,"examples":["Exclude testing domains from the tunnel"]},"teams-devices_split_tunnel_host":{"description":"The domain name to exclude from the tunnel. If `host` is present, `address` must not be present.","type":"string","examples":["*.example.com"]},"teams-devices_include_split_tunnel_address":{"description":"The address in CIDR format to include in the tunnel. If `address` is present, `host` must not be present.","type":"string","examples":["192.0.2.0/24"]},"teams-devices_include_split_tunnel_description":{"description":"A description of the Split Tunnel item, displayed in the client UI.","type":"string","maxLength":100,"examples":["Include testing domains in the tunnel"]},"teams-devices_include_split_tunnel_host":{"description":"The domain name to include in the tunnel. If `host` is present, `address` must not be present.","type":"string","examples":["*.example.com"]}}},"name":"Update the default device settings profile","id":"cloudflare.devices-update-default-device-settings-policy","example":{"path":{"account_id":"699d98642c564d2e855e9661899b7252"},"body":{}},"maxRequests":1,"summary":false}}