Show / Hide Table of Contents

eDiscovery.ReadWrite.All

Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.

Graph Methods

Type: A = Application Permission, D = Delegate Permission

Ver Type Method
Beta D DELETE /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/siteSources/{siteSourceId}
Beta D DELETE /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/userSources/{userSourceId}
Beta D DELETE /compliance/ediscovery/cases/{caseId}/legalHolds/{legalHoldId}
Beta D DELETE /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}
Beta D DELETE /compliance/ediscovery/cases/{caseId}/tags/{tagId}?forcedelete=true
Beta D DELETE /compliance/ediscovery/cases/{id}
Beta D DELETE /compliance/ediscovery/cases/{id}/reviewSets/{id}/queries/{id}
Beta D DELETE /compliance/ediscovery/cases/4c8f8f70-7785-4bd4-b296-c98376a2c5e1/custodians/2192ca408ea2410eba3bec8ae873be6b/unifiedGroupSources/33434233-3030-3739-3043-393039324633
Beta D GET /compliance/ediscovery/cases
Beta D GET /compliance/ediscovery/cases/{caesId}/custodians/{custodianId}
Beta D GET /compliance/ediscovery/cases/{caseId}/custodians
Beta D GET /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/siteSources
Beta D GET /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/siteSources/{siteSourceId}
Beta D GET /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/unifiedGroupSources
Beta D GET /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/unifiedGroupSources/{unifiedGroupSourceId}
Beta D GET /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/userSources
Beta D GET /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/userSources/{userSourceId}
Beta D GET /compliance/ediscovery/cases/{caseId}/legalHolds
Beta D GET /compliance/ediscovery/cases/{caseId}/legalHolds/{legalholdId}
Beta D GET /compliance/ediscovery/cases/{caseId}/legalHolds/{legalholdId}/siteSources
Beta D GET /compliance/ediscovery/cases/{caseId}/legalHolds/{legalholdId}/userSources
Beta D GET /compliance/ediscovery/cases/{caseId}/noncustodialDataSources
Beta D GET /compliance/ediscovery/cases/{caseId}/noncustodialDataSources/{noncustodialDataSourceId}
Beta D GET /compliance/ediscovery/cases/{caseId}/noncustodialDataSources/{noncustodialDataSourceId}/dataSource
Beta D GET /compliance/ediscovery/cases/{caseId}/operations
Beta D GET /compliance/ediscovery/cases/{caseId}/operations/{operationId}/microsoft.graph.ediscovery.caseExportOperation/getDownloadUrl
Beta D GET /compliance/ediscovery/cases/{caseId}/reviewSets
Beta D GET /compliance/ediscovery/cases/{caseId}/settings
Beta D GET /compliance/ediscovery/cases/{caseId}/sourceCollections
Beta D GET /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}
Beta D GET /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/additionalSources
Beta D GET /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/addToReviewSetOperation
Beta D GET /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/custodianSources
Beta D GET /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/lastEstimateStatisticsOperation
Beta D GET /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/noncustodialSources
Beta D GET /compliance/ediscovery/cases/{caseId}/tags
Beta D GET /compliance/ediscovery/cases/{caseId}/tags/{tagId}
Beta D GET /compliance/ediscovery/cases/{caseId}/tags/{tagId}/childTags
Beta D GET /compliance/ediscovery/cases/{caseId}/tags/asHierarchy
Beta D GET /compliance/ediscovery/cases/{id}
Beta D GET /compliance/ediscovery/cases/{id}/reviewSets/{id}
Beta D GET /compliance/ediscovery/cases/{id}/reviewSets/{id}/queries
Beta D GET /compliance/ediscovery/cases/{id}/reviewSets/{id}/queries/{id}
Beta D PATCH /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}
Beta D PATCH /compliance/ediscovery/cases/{caseId}/legalHolds/{legalholdId}
Beta D PATCH /compliance/ediscovery/cases/{caseId}/settings
Beta D PATCH /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}
Beta D PATCH /compliance/ediscovery/cases/{caseId}/tags/{tagId}
Beta D PATCH /compliance/ediscovery/cases/{id}
Beta D PATCH /compliance/ediscovery/cases/{id}/reviewSets/{id}/queries/{id}
Beta D POST /compliance/ediscovery/cases
Beta D POST /compliance/ediscovery/cases/{CaseId}/close
Beta D POST /compliance/ediscovery/cases/{caseId}/custodians
Beta D POST /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/activate
Beta D POST /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/release
Beta D POST /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/siteSources
Beta D POST /compliance/ediscovery/cases/{caseId}/custodians/{custodianId}/userSources
Beta D POST /compliance/ediscovery/cases/{caseId}/legalHolds
Beta D POST /compliance/ediscovery/cases/{caseId}/legalHolds/{legalholdId}/siteSources
Beta D POST /compliance/ediscovery/cases/{caseId}/legalHolds/{legalholdId}/userSources
Beta D POST /compliance/ediscovery/cases/{caseId}/noncustodialDataSources
Beta D POST /compliance/ediscovery/cases/{caseId}/noncustodialDataSources/{noncustodialDataSourceId}/release
Beta D POST /compliance/ediscovery/cases/{caseId}/reopen
Beta D POST /compliance/ediscovery/cases/{caseId}/reviewSets/{reviewsetId}/addToReviewSet
Beta D POST /compliance/ediscovery/cases/{caseId}/reviewsets/{reviewsetId}/export
Beta D POST /compliance/ediscovery/cases/{caseId}/reviewSets/{reviewSetId}/queries/{reviewSetQueryId}/applyTags
Beta D POST /compliance/ediscovery/cases/{caseId}/settings/resetToDefault
Beta D POST /compliance/ediscovery/cases/{caseId}/sourceCollections
Beta D POST /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/additionalSources
Beta D POST /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/custodianSources/$ref
Beta D POST /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/estimateStatistics
Beta D POST /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/noncustodialSources/$ref
Beta D POST /compliance/ediscovery/cases/{caseId}/sourceCollections/{sourceCollectionId}/purgeData
Beta D POST /compliance/ediscovery/cases/{caseId}/tags
Beta D POST /compliance/ediscovery/cases/{id}/reviewSets
Beta D POST /compliance/ediscovery/cases/{id}/reviewSets/{id}/queries
Beta D POST /compliance/ediscovery/cases/4c8f8f70-7785-4bd4-b296-c98376a2c5e1/custodians/2192ca408ea2410eba3bec8ae873be6b/unifiedGroupSources

Delegate Permission

Id acb8f680-0834-4146-b69e-4ab1b39745ad
Consent Type Admin
Display String Read and write all eDiscovery objects
Description Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.

Application Permission

Id b2620db1-3bf7-4c5b-9cb9-576d29eac736
Display String Read and write all eDiscovery objects
Description Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects without a signed-in user.

Resources

addToReviewSetOperation

Property Type Description
action microsoft.graph.ediscovery.caseAction The case action for this entity will always be addToReviewSet. Read-only. Inherited from caseOperation.
completedDateTime DateTimeOffset The date and time the operation was completed. Read-only. Inherited from caseOperation
createdBy identitySet The user who created the operation. Read-only. Inherited from caseOperation
createdDateTime DateTimeOffset The date and time the operation was started. Read-only. Inherited from caseOperation
id String The ID for the operation. Read-only. Inherited from caseOperation.
percentProgress Int32 The progress of the operation. Read-only. Inherited from caseOperation.
resultInfo resultInfo Contains success and failure-specific result information. Inherited from caseOperation.
status microsoft.graph.ediscovery.caseOperationStatus The status of the case operation. Inherited from caseOperation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed.

case

Property Type Description
closedBy identitySet The user who closed the case.
closedDateTime DateTimeOffset The date and time when the case was closed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
createdBy identitySet The user who created the case.
createdDateTime DateTimeOffset The date and time when the entity was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
description String The case description.
displayName String The case name.
externalId String The external case number for customer reference.
id String The ID for the eDiscovery case. Read-only.
lastModifiedBy identitySet The last user who modified the entity.
lastModifiedDateTime DateTimeOffset The latest date and time when the case was modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
status microsoft.graph.ediscovery.caseStatus The case status. Possible values are unknown, active, pendingDelete, closing, closed, and closedWithError. For details, see the following table.

caseExportOperation

Property Type Description
action microsoft.graph.ediscovery.caseAction The case action for this entity will always be contentExport. Inherited from caseOperation.
azureBlobContainer String The name of the Azure storage location where the export will be stored. This only applies to exports stored in your own Azure storage location.
azureBlobToken String The SAS token for the Azure storage location. This only applies to exports stored in your own Azure storage location.
completedDateTime DateTimeOffset The date and time the export was completed. Inherited from caseOperation.
createdBy identitySet The user who initiated the export operation. Inherited from caseOperation.
createdDateTime DateTimeOffset The date and time the export was created. Inherited from caseOperation.
description String The description provided for the export.
exportOptions microsoft.graph.ediscovery.exportOptions The options provided for the export. For more details, see reviewSet: export. Possible values are: originalFiles, text, pdfReplacement, fileInfo, tags.
exportStructure microsoft.graph.ediscovery.exportFileStructure The options provided that specify the structure of the export. For more details, see reviewSet: export. Possible values are: none, directory, pst.
id String The ID for the operation. Read-only. Inherited from caseOperation.
outputName String The name provided for the export.
percentProgress Int32 The progress of the operation. Inherited from caseOperation.
resultInfo resultInfo Contains success and failure-specific result information. Inherited from caseOperation.
status microsoft.graph.ediscovery.caseOperationStatus The status of the case operation. Inherited from caseOperation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed.

caseOperation

Property Type Description
action microsoft.graph.ediscovery.caseAction The type of action the operation represents. Possible values are: addToReviewSet,applyTags,contentExport,convertToPdf,estimateStatistics, purgeData
completedDateTime DateTimeOffset The date and time the operation was completed.
createdBy identitySet The user that created the operation.
createdDateTime DateTimeOffset The date and time the operation was created.
id String The ID for the operation. Read-only.
percentProgress Int32 The progress of the operation.
resultInfo resultInfo Contains success and failure-specific result information.
status microsoft.graph.ediscovery.caseOperationStatus The status of the case operation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed.

custodian

Property Type Description
acknowledgedDateTime DateTimeOffset Date and time the custodian acknowledged a hold notification.
applyHoldToSources Boolean Identifies whether a custodian's sources were placed on hold during creation.
createdDateTime DateTimeOffset Date and time when the custodian was added to the case.
displayName String Display name of the custodian.
email String Email address of the custodian.
id String The ID for the custodian in the specified case. Read-only.
lastModifiedDateTime DateTimeOffset Date and time the custodian object was last modified
releasedDateTime DateTimeOffset Date and time the custodian was released from the case.
status microsoft.graph.ediscovery.custodianStatus Status of the custodian. Possible values are: active, released.

dataSource

Property Type Description
createdBy identitySet The user who created the dataSource.
createdDateTime DateTimeOffset The date and time the dataSource was created.
displayName String The display name of the dataSource. This will be the name of the SharePoint site.
id String The ID of the **d

estimateStatisticsOperation

Property Type Description
action microsoft.graph.ediscovery.caseAction The type of operation. The case action for this entity will always be estimateStatistics. Read-only. Inherited from caseOperation.
completedDateTime DateTimeOffset The date and time the operation was completed. Read-only. Inherited from caseOperation.
createdBy identitySet The user who created the operation. Read-only. Inherited from caseOperation.
createdDateTime DateTimeOffset The date and time the operation was started. Read-only. Inherited from caseOperation.
id String The ID for the operation. Read-only. Inherited from caseOperation.
indexedItemCount Int64 The estimated count of items for the sourceCollection that matched the content query.
indexedItemsSize Int64 The estimated size of items for the sourceCollection that matched the content query.
mailboxCount Int32 The number of mailboxes that had search hits.
percentProgress Int32 The progress of the operation. Read-only. Inherited from caseOperation.
resultInfo resultInfo Contains success and failure-specific result information. Inherited from caseOperation.
siteCount Int32 The number of mailboxes that had search hits.
status microsoft.graph.ediscovery.caseOperationStatus The status of the case operation. Inherited from caseOperation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed.
unindexedItemCount Int64 The estimated count of unindexed items for the collection.
unindexedItemsSize Int64 The estimated size of unindexed items for the collection.

legalHold

Property Type Description
contentQuery String KQL query that specifies content to be held in the specified locations. To learn more, see Keyword queries and search conditions for Content Search and eDiscovery. To hold all content in the specified locations, leave contentQuery blank.
createdBy identitySet The user who created the legal hold.
createdDateTime DateTimeOffset The date and time the legal hold was created.
description String The legal hold description.
displayName String The display name of the legal hold.
errors String collection Lists any errors that happened while placing the hold.
id String The ID for the eDiscovery case. Read-only. Inherited from entity.
isEnabled Boolean Indicates whether the hold is enabled and actively holding content.
lastModifiedBy identitySet the user who last modified the legal hold.
lastModifiedDateTime DateTimeOffset The date and time the legal hold was last modified.
status microsoft.graph.ediscovery.legalHoldStatus The status of the legal hold. Possible values are: Pending, Error, Success, UnknownFutureValue.

noncustodialDataSource

Property Type Description
applyHoldToSource Boolean Indicates if hold is applied to non-custodial data source (such as mailbox or site).
createdDateTime DateTimeOffset Created date and time of the nonCustodialDataSource. Inherited from microsoft.graph.ediscovery.dataSourceContainer.
displayName String Display name of the noncustodialDataSource. Inherited from microsoft.graph.ediscovery.dataSourceContainer.
id String Unique identifier of the nonCustodialDataSource. Inherited from entity.
lastModifiedDateTime DateTimeOffset Last modified date and time of the nonCustodialDataSource. Inherited from microsoft.graph.ediscovery.dataSourceContainer.
releasedDateTime DateTimeOffset Date and time that the nonCustodialDataSource was released from the case. Inherited from microsoft.graph.ediscovery.dataSourceContainer.
status microsoft.graph.ediscovery.dataSourceContainerStatus Latest status of the nonCustodialDataSource. Inherited from microsoft.graph.ediscovery.dataSourceContainer. Possible values are: Active, Released.

purgeDataOperation

Property Type Description
action microsoft.graph.ediscovery.caseAction The type of action the operation represents. Possible values are: addToReviewSet,applyTags,contentExport,convertToPdf,estimateStatistics,purgeData.
completedDateTime DateTimeOffset The date and time the operation was completed.
createdBy identitySet The user that created the operation.
createdDateTime DateTimeOffset The date and time the operation was created.
id String The ID for the operation. Read-only.
percentProgress Int32 The progress of the operation.
resultInfo resultInfo Contains success and failure-specific result information.
status microsoft.graph.ediscovery.caseOperationStatus The status of the case operation. Possible values are: notStarted, submissionFailed, running, succeeded, partiallySucceeded, failed.

reviewSet

Property Type Description
createdBy identitySet The user who created the review set. Read-only.
createdDateTime DateTimeOffset The datetime when the review set was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
displayName String The review set name. The name is unique with a maximum limit of 64 characters.
id String The review set unique identifier. Read-only.

reviewSetQuery

Property Type Description
createdBy identitySet The user who created the query.
createdDateTime DateTimeOffset The time and date when the query was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
displayName String The name of the query.
id String The unique identifier of the query. Read-only.
lastModifiedBy identitySet The user who last modified the query.
lastModifiedDateTime DateTimeOffset The date and time the query was last modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
query String The query string in KQL (Keyword Query Language) query. For details, see Document metadata fields in Advanced eDiscovery. This field maps directly to the keywords condition. You can refine searches by using fields listed in the *s

siteSource

Property Type Description
createdBy identitySet The user who created the siteSource.
createdDateTime DateTimeOffset The date and time the siteSource was created.
displayName String The display name of the siteSource. This will be the name of the SharePoint site.
id String The ID of the **s

sourceCollection

Property Type Description
contentQuery String The query string in KQL (Keyword Query Language) query. For details, see Keyword queries and search conditions for Content Search and eDiscovery. You can refine searches by using fields paired with values; for example, subject:"Quarterly Financials" AND Date>=06/01/2016 AND Date<=07/01/2016.
createdBy identitySet The user who created the sourceCollection.
createdDateTime DateTimeOffset The date and time the sourceCollection was created.
dataSourceScopes microsoft.graph.ediscovery.dataSourceScopes When specified, the collection will span across a service for an entire workload. Possible values are: none, allTenantMailboxes, allTenantSites, allCaseCustodians, allCaseNoncustodialDataSources.
description String The description of the sourceCollection.
displayName String The display name of the sourceCollection.
id String The ID for the sourceCollection. Read-only.
lastModifiedBy identitySet The last user who modified the sourceCollection.
lastModifiedDateTime DateTimeOffset The last date and time the **s

tag

Property Type Description
childSelectability microsoft.graph.ediscovery.childSelectability Indicates whether a single or multiple child tags can be associated with a document. Possible values are: One, Many. This value controls whether the UX presents the tags as checkboxes or a radio button group.
createdBy identitySet The user who created the tag.
description String The description for the tag.
displayName String Display name of the tag.
id String Unique identifier for the tag.
lastModifiedDateTime DateTimeOffset The date and time the tag was last modified.

unifiedGroupSource

Property Type Description
createdBy identitySet The user who created the unifiedGroupSource.
createdDateTime DateTimeOffset The date and time the unifiedGroupSource was created.
displayName String The display name of the unified group - This is the name of the group.
id String The ID of the unifiedGroupSource. This is not the ID of the actual group.
includedSources microsoft.graph.ediscovery.sourceType Specifies which sources are included in this group. Possible values are: mailbox, site.

userSource

Property Type Description
createdBy identitySet The user who created the userSource.
createdDateTime DateTimeOffset The date and time the userSource was created
displayName String The display name associated with the mailbox and site.
email String Email address of the user's mailbox.
id String The ID of the userSource. This is not the ID of the actual group
includedSources microsoft.graph.ediscovery.sourceType Specifies which sources are included in this group. Possible values are: mailbox, site.
siteWebUrl String The URL of the user's OneDrive for Business site. Read-only.
In This Article
Back to top Created by merill | Submit feedback