Windows Update Policies

Manage update policies with approval workflows

📄️ Create a new update policy

Creates a new Windows Update policy with approval rules, auto-approval settings, and deployment ring assignment.

Returns all Windows Update policies for the tenant with approval counts.

Returns available Windows feature upgrade version targets.

Returns a single Windows Update policy by ID.

Updates fields on a Windows Update policy.

Deletes a Windows Update policy. Default policies cannot be deleted.

Returns paginated list of approved updates for a policy.

Activates an emergency override on a policy, temporarily bypassing normal approval workflow.

Deactivates the emergency override on a policy.

Returns the effective approval status for a policy operating in auto-approval mode.

Creates a copy of an existing policy with a new name.

Returns agent tags associated with a policy.

Associates an agent tag with a policy.

Removes an agent tag association from a policy.

Adds a single update approval to a policy. Visibility-only updates (SSU, Dynamic) cannot be approved.

Approves multiple updates for a policy in a single request. Maximum 1000 per request. Visibility-only updates are rejected.

Removes multiple update approvals from a policy in a single request. Maximum 1000 per request.

Removes a specific approval. Optionally creates an override to prevent re-approval for auto-approved updates.

Returns paginated list of auto-approval overrides (exclusions) for a policy.

Creates an override to prevent a specific update from being auto-approved by the policy.

Deletes all approval overrides for a policy. Requires confirmation body.

Convenience endpoint to remove an override using the update ID rather than the override ID.

Removes a single approval override by its ID.