Actions41
- Advanced Query Actions
- Alert Actions
- Exposure Score Actions
- Indicator Actions
- Investigation Actions
- Machine Actions
- Machine Action Actions
- Recommendation Actions
- Remediation Actions
- Software Actions
- Vulnerability Actions
Machine Action → Offboard Machine
AI-generatedSummary
Offboard a machine from Microsoft Defender for Endpoint by specifying its machine ID. This operation sends a POST request to trigger the offboarding process.
Inputs
- Authentication — Select OAuth2 for authentication (default).
- Machine ID (required) — The ID of the machine to offboard.
Output shape
The operation returns the API response from Microsoft Defender for Endpoint after initiating the offboard action, typically a confirmation or status message as JSON.
The machine ID is required. Request is sent as POST to /api/machines/{machineId}/offboard. No pagination or additional output fields are specified.