Content.Process.User

Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the Content.Process.User permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	24ceb246-ad29-4680-90b4-3e91ffad15eb	1d787a13-f750-4ad6-875a-fcbd2725596b
DisplayText	Process content for data security, governance and compliance	Process content for data security, governance and compliance
Description	Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user.	Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user.
AdminConsentRequired	Yes	Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	POST /me/dataSecurityAndGovernance/processContent

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: currentLabel

Property	Type	Description
applicationMode	applicationMode	The application mode associated with the sensitivity label. The possible values are: `manual`, `automatic`, `recommended`, `unknownFutureValue`.
id	String	The GUID that identifies the sensitivity label.

Graph reference: processContentRequest

Property	Type	Description
activityMetadata	microsoft.graph.activityMetadata	Metadata about the user activity (like upload, download) and location (URL). Required.
contentEntries	Collection(microsoft.graph.processContentMetadataBase)	A collection of content entries to be processed. Each entry contains the content itself and its metadata. Use conversation metadata for content like prompts and responses and file metadata for files. Required.
deviceMetadata	microsoft.graph.deviceMetadata	Metadata about the device from which the content originates. Required.
integratedAppMetadata	microsoft.graph.integratedApplicationMetadata	Metadata about the integrated application making the request. Required.
protectedAppMetadata	microsoft.graph.protectedApplicationMetadata	Metadata about the protected application making the request. Required.

Graph reference: processContentResponse

Property	Type	Description
policyActions	Collection(microsoft.graph.dlpActionInfo)	A collection of policy actions (like DLP actions) triggered by the processed content. NOTE: Currently, the only policy action supported in for this resource type is `restrictAccess`.
processingErrors	Collection(microsoft.graph.processingError)	A collection of errors encountered during the content processing.
protectionScopeState	microsoft.graph.security.protectionScopeState	Indicates if the applicable protection scope (policies) has changed since the last known state for the context. Possible values are `modified` and `notModified`.

Graph reference: processFileMetadata

Property	Type	Description
content	contentBase	Represents the actual content, either as text (`textContent`) or binary data (`binaryContent`). Optional if metadata alone is sufficient for policy evaluation. Do not use for contentActivities. Inherited from processContentMetadataBase.
correlationId	String	An identifier used to group multiple related content entries (for example, different parts of the same file upload, messages in a conversation). Inherited from processContentMetadataBase.
createdDateTime	DateTimeOffset	Required. Timestamp indicating when the original content was created (for example, file creation time, message sent time). Inherited from processContentMetadataBase.
customProperties	customMetadataDictionary	A dictionary containing custom metadata associated with the file, potentially extracted by the calling application.
identifier	String	Required. A unique identifier for this specific content entry within the context of the calling application or enforcement plane (for example, message ID, file path/URL). Inherited from processContentMetadataBase.
isTruncated	Boolean	Required. Indicates if the provided `content` has been truncated from its original form (for example, due to size limits). Inherited from processContentMetadataBase.
length	Int64	The length of the original content in bytes. Inherited from processContentMetadataBase.
modifiedDateTime	DateTimeOffset	Required. Timestamp indicating when the original content was last modified. For ephemeral content like messages, this might be the same as `createdDateTime`. Inherited from processContentMetadataBase.
name	String	Required. A descriptive name for the content (for example, file name, web page title, `Chat Message`). Inherited from processContentMetadataBase.
ownerId	String	The unique identifier (for example, Entra User ID or UPN) of the owner of the file.
sequenceNumber	Int64	A sequence number indicating the order in which content was generated or should be processed, required when `correlationId` is used. Inherited from processContentMetadataBase.

Table of Contents

Content.Process.User

Graph Methods

Resources