diff --git a/api-reference/beta/resources/riskdetection.md b/api-reference/beta/resources/riskdetection.md
index 3200f54c71010..aea37794d4348 100644
--- a/api-reference/beta/resources/riskdetection.md
+++ b/api-reference/beta/resources/riskdetection.md
@@ -39,7 +39,7 @@ For more information about risk events, see [Azure Active Directory Identity Pro
 |`riskType`|`riskEventType`|List of risk event types.<br/>**Note:** This property is deprecated. Use **riskEventTypes** instead. |
 |`riskState`|`riskState`|The state of a detected risky user or sign-in. The possible values are none, confirmedSafe, remediated, dismissed, atRisk, confirmedCompromised, and unknownFutureValue. |
 |`riskLevel`|`riskLevel`|Level of the detected risk. The possible values are low, medium, high, hidden, none, unknownFutureValue. **Note:** Details for this property are only available for Azure AD Premium P2 customers. P1 customers will be returned `hidden`.|
-|`riskDetail`|`riskDetail`|Details of the detected risk. The possible values are none, adminGeneratedTemporaryPassword, userPerformedSecuredPasswordChange, userPerformedSecuredPasswordReset, adminConfirmedSigninSafe, aiConfirmedSigninSafe, userPassedMFADrivenByRiskBasedPolicy, adminDismissedAllRiskForUser, adminConfirmedSigninCompromised, hidden, adminConfirmedUserCompromised, unknownFutureValue. **Note:** Details for this property are only available for Azure AD Premium P2 customers. P1 customers will be returned `hidden`.|
+|`riskDetail`|`riskDetail`|Details of the detected risk. The possible values are none, adminGeneratedTemporaryPassword, userPerformedSecuredPasswordChange, userPerformedSecuredPasswordReset, adminConfirmedSigninSafe, aiConfirmedSigninSafe, userPassedMFADrivenByRiskBasedPolicy, adminDismissedAllRiskForUser, adminConfirmedSigninCompromised, hidden, adminConfirmedUserCompromised, microsoftRevokedSessions, unknownFutureValue. **Note:** Details for this property are only available for Azure AD Premium P2 customers. P1 customers will be returned `hidden`.|
 |`source`|`string`|Source of the risk detection. For example, "activeDirectory". |
 |`detectionTimingType`|`riskDetectionTimingType`|Timing of the detected risk (real-time/offline). The possible values are notDefined, realtime, nearRealtime, offline, unknownFutureValue. |
 |`activity`|`activityType`|Indicates the activity type the detected risk is linked to. The possible values are signin, user, unknownFutureValue. |
@@ -100,4 +100,4 @@ The following is a JSON representation of the resource.
   "keywords": "",
   "section": "documentation",
   "tocPath": ""
-}-->
\ No newline at end of file
+}-->