Use Microsoft Purview with Sokko.

Reactivate a released custodian so they become part of the eDiscovery case again. Microsoft Graph accepts this asynchronous workflow with 202 Accepted.

Add an eDiscovery case member in Microsoft Purview.

Add one mailbox or site as an additional source for an eDiscovery search.

Deprecated: use ADD_EDISCOVERY_CASE_SEARCH_SOURCE with source_type='custodial'. Associate a custodial data source with an eDiscovery search.

Deprecated: use ADD_EDISCOVERY_CASE_SEARCH_SOURCE with source_type='noncustodial'. Associate a noncustodial data source with an eDiscovery search.

Associate one custodial or noncustodial data source with an eDiscovery search. Verify the source URL before changing this compliance relationship.

Start the long-running process that adds an eDiscovery search collection to a review set. Microsoft Graph returns only acceptance; monitor case operations.

Apply a hold to one custodian through the stable v1.0 endpoint and start asynchronous compliance processing.

Apply holds to selected custodians in an eDiscovery case and start asynchronous compliance processing.

Apply a hold to one noncustodial data source through the stable v1.0 endpoint and start asynchronous compliance processing.

Apply holds to selected noncustodial data sources in an eDiscovery case and start asynchronous compliance processing.

Start the asynchronous process of adding, removing, or simultaneously adding and removing tags on files selected by a review set query.

Close an eDiscovery case. This changes workflow state and can be difficult to reverse; confirm the target first.

Compute data-protection policies and actions for the signed-in user.

Compute tenant-wide data-protection policies, actions, and bindings.

Compute the inherited tenant sensitivity label for selected labels and content formats.

Compute usage rights and inherited labels for protected tenant content.

Compute data-protection policies and actions for a specific user.

Create an authority template in Microsoft Purview records management.

Create a category template in Microsoft Purview records management.

Create a subcategory template under a category in Microsoft Purview records management.

Create a citation template in Microsoft Purview records management.

Write a persistent Microsoft Purview compliance activity for the signed-in user. This stores metadata permanently, and Microsoft Graph provides no delete endpoint; confirm the metadata before calling.

Create a department template in Microsoft Purview records management.

Create a named eDiscovery case for an investigation, with an optional description and customer reference number.

Create one custodian in a Microsoft Purview eDiscovery case.

Deprecated compatibility action. New callers should use CREATE_EDISCOVERY_CASE_CUSTODIAN_SOURCE with source_type=site. Create a site source for an eDiscovery custodian.

Create one site, user, or unified-group source for an eDiscovery custodian.

Deprecated compatibility action. New callers should use CREATE_EDISCOVERY_CASE_CUSTODIAN_SOURCE with source_type=unified_group. Create a unified-group source for an eDiscovery custodian.

Deprecated compatibility action. New callers should use CREATE_EDISCOVERY_CASE_CUSTODIAN_SOURCE with source_type=user. Create a user source for an eDiscovery custodian.

Create an eDiscovery hold policy. Graph can return 404 after committing this asynchronous operation; list the case's holds for the unique name before retrying.

Deprecated compatibility action for creating a site source on an eDiscovery legal hold. New callers should use CREATE_EDISCOVERY_CASE_LEGAL_HOLD_SOURCE with source_type='site'.

Create one site or user source on a Microsoft Purview eDiscovery legal-hold policy.

Deprecated compatibility action for creating a user source on an eDiscovery legal hold. New callers should use CREATE_EDISCOVERY_CASE_LEGAL_HOLD_SOURCE with source_type='user'.

Create one noncustodial data source in a Microsoft Purview eDiscovery case.

Create a review set in an eDiscovery case.

Create a KQL query in an eDiscovery review set.

Create a search in a Microsoft Purview eDiscovery case.

Create a review tag for a Microsoft Purview eDiscovery case.

Create a file plan reference template in Microsoft Purview records management.

Create a retention event in Microsoft Purview records management. This starts a compliance retention workflow for matching content; verify the event type, trigger time, and workload queries before calling.

Create a retention event type in Microsoft Purview records management.

Create a retention label in Microsoft Purview records management. The label can configure content retention or deletion, disposition review, treatment as a regulatory record, and automatic application of a replacement label after the retention period, according to the supplied settings.

Create a regulated subject rights request in Microsoft Purview. Confirm the subject and request type because delete requests can lead to data removal.

Create an authored note on a Microsoft Purview subject rights request.

Write a persistent Microsoft Purview compliance activity for a specified user. This stores metadata permanently, and Microsoft Graph provides no delete endpoint; confirm the user and metadata before calling.

Permanently delete an authority template. Verify the identifier before calling.

Permanently delete a category template. Verify the identifier before calling.

Permanently delete a subcategory template from its parent category. Verify both identifiers before calling.

Permanently delete a citation template. Verify the identifier before calling.

Permanently delete a department template. Verify the identifier before calling.

Delete an eDiscovery case. This permanently removes compliance state; verify the identifier before calling.

Remove an eDiscovery case member. Verify the case and member identifiers before calling.

Deprecated compatibility action. New callers should use DELETE_EDISCOVERY_CASE_CUSTODIAN_SOURCE with source_type=site. Delete one site-source association from an eDiscovery custodian.

Remove one site, unified-group, or user source association from an eDiscovery custodian. This does not delete the underlying site, group, mailbox, or content.

Deprecated compatibility action. New callers should use DELETE_EDISCOVERY_CASE_CUSTODIAN_SOURCE with source_type=unified_group. Delete one unified-group-source association from an eDiscovery custodian.

Deprecated compatibility action. New callers should use DELETE_EDISCOVERY_CASE_CUSTODIAN_SOURCE with source_type=user. Remove one user-source association without deleting the mailbox or content.

Permanently delete an eDiscovery hold policy, remove all associated holds, and release its sites and mailboxes. This can permanently delete content that was preserved only by this hold; verify every identifier before calling.

Deprecated compatibility action for deleting a site source from an eDiscovery legal hold. New callers should use DELETE_EDISCOVERY_CASE_LEGAL_HOLD_SOURCE with source_type='site'.

Remove one site or user source association from an eDiscovery legal-hold policy. This does not delete the underlying SharePoint site, mailbox, or content.

Deprecated compatibility action for deleting a user source from an eDiscovery legal hold. New callers should use DELETE_EDISCOVERY_CASE_LEGAL_HOLD_SOURCE with source_type='user'.

Permanently delete a query from an eDiscovery review set. Verify the case, review set, and query identifiers before calling.

Permanently delete an eDiscovery search. Destructive: verify the case and search identifiers before calling.

Remove an eDiscovery review tag. Verify the case and tag identifiers before calling.

Permanently delete a file plan reference template through the Microsoft Graph v1.0 endpoint. Verify the identifier before calling.

Delete a retention event from Microsoft Purview records management. This permanently removes compliance state; verify the retention event identifier before calling.

Permanently delete a retention event type. Verify the identifier before calling.

Permanently delete a retention label. Verify the identifier before calling.

Compatibility action that unlinks the file plan reference descriptor from a retention label. New callers should use MICROSOFT_PURVIEW_REMOVE_RETENTION_LABEL_DESCRIPTOR with descriptor_type='file_plan_reference'.

Disable an eDiscovery legal-hold policy and start asynchronous removal from its configured sources.

Enable an eDiscovery legal-hold policy and start asynchronous distribution to its configured sources.

Start a potentially long-running estimate job for an eDiscovery search. Monitor completion using the returned operation location or operation-read tools.

Evaluate which sensitivity-label actions apply for the signed-in user and desired content state.

Evaluate classification results against sensitivity-label policy for the signed-in user.

Evaluate removal of a sensitivity label for the signed-in user.

Evaluate sensitivity-label application against tenant information-protection policy.

Evaluate sensitivity-label application for a specific user's policy context.

Evaluate classification results for a specific user's information-protection policy.

Evaluate sensitivity-label removal for a specific user's policy context.

Evaluate classification results in the tenant-wide users information-protection context.

Evaluate label removal in the tenant-wide users information-protection context.

Start a long-running review set export. The credential-bearing export location is deliberately not returned; monitor case operations for status.

Start a long-running export of files matching a review set query. No export location or credential-bearing URL is returned; monitor case operations.

Start a potentially long-running eDiscovery search report export. This can trigger substantial compliance processing; monitor the returned operation location until completion.

Start a potentially long-running eDiscovery search-result export. This can trigger substantial compliance processing; monitor the returned operation location until completion.

Extract sensitivity-label information from content metadata for the signed-in user.

Extract a sensitivity label from existing content metadata for a specified user using application authentication.

Extract a content label in the tenant-wide users information-protection context.

Get an authority template from Microsoft Purview records management.

Get a category template from Microsoft Purview records management.

Get a subcategory template from Microsoft Purview records management.

Get a citation template from Microsoft Purview records management.

Get information-protection label policy settings for the signed-in user.

Get one sensitivity label available to the signed-in user.

Get a department template from Microsoft Purview records management.

Get one eDiscovery case from Microsoft Purview.

Get ediscovery custodian in Microsoft Purview ediscovery custodians and sources.

Get ediscovery hold policy in Microsoft Purview ediscovery holds.

Get ediscovery noncustodial data source in Microsoft Purview ediscovery custodians and sources.

Get case-operation status and safe metadata without exposing export download URLs.

Get one review set from an eDiscovery case.

Get metadata for one review set file through the beta-only route. File content and extracted text are never returned.

Get a tag by ID from the tags expanded on a beta eDiscovery review set file.

Get an applied child tag by its ID and parent tag ID from a beta eDiscovery review set file.

Get the expanded parent of a tag associated with a beta eDiscovery review set file.

Get one query from an eDiscovery review set.

Get one Microsoft Purview eDiscovery search by case and search identifier.

Get the latest estimate-statistics operation for an eDiscovery search to monitor long-running processing.

Get settings for a Microsoft Purview eDiscovery case.

Get one review tag from a Microsoft Purview eDiscovery case.

Return the review-tag hierarchy for a Microsoft Purview eDiscovery case.

Get a file plan reference template from Microsoft Purview records management.

Get one retention event from Microsoft Purview records management.

Get a retention label associated with a Microsoft Purview retention event.

Get the retention event type associated with a retention event.

Get a retention event type from Microsoft Purview records management.

Get a retention label from Microsoft Purview records management.

Get one authority, category, citation, department, or file plan reference descriptor associated with a retention label.

Compatibility-specific authority descriptor getter. New callers should use MICROSOFT_PURVIEW_GET_RETENTION_LABEL_DESCRIPTOR with descriptor_type='authority'.

Compatibility-specific category descriptor getter. New callers should use MICROSOFT_PURVIEW_GET_RETENTION_LABEL_DESCRIPTOR with descriptor_type='category'.

Compatibility-specific citation descriptor getter. New callers should use MICROSOFT_PURVIEW_GET_RETENTION_LABEL_DESCRIPTOR with descriptor_type='citation'.

Compatibility-specific department descriptor getter. New callers should use MICROSOFT_PURVIEW_GET_RETENTION_LABEL_DESCRIPTOR with descriptor_type='department'.

Compatibility-specific file plan reference descriptor getter. New callers should use MICROSOFT_PURVIEW_GET_RETENTION_LABEL_DESCRIPTOR with descriptor_type='file_plan_reference'.

Get the retention event type associated with a retention label.

Get one subject rights request from Microsoft Purview.

Download the completed subject rights request attachment as a framework-managed file without exposing the provider's redirect credentials.

Download the completed subject rights request report as a framework-managed file without exposing provider redirect credentials.

Get one tenant sensitivity label through the data-security and governance API.

Get the calling user's usage rights for a tenant sensitivity label.

Get tenant information-protection label policy settings.

Get one tenant sensitivity label through the beta information-protection API.

Get information-protection label policy settings for a specific user.

Get one sensitivity label available to a specific user.

List authority templates in Microsoft Purview records management.

List category templates in Microsoft Purview records management.

List subcategory templates for a category in Microsoft Purview records management.

List citation templates in Microsoft Purview records management.

List sensitivity labels available to the signed-in user.

List department templates in Microsoft Purview records management.

Get the most recent indexing operation for one custodian in an eDiscovery case. Use it to monitor the progress and outcome of that custodian's index update.

List ediscovery custodian in Microsoft Purview ediscovery custodians and sources.

Deprecated compatibility action. New callers should use LIST_EDISCOVERY_CASE_CUSTODIAN_SOURCES with source_type=site. List site sources for one eDiscovery custodian.

List site, unified-group, or user sources that belong to one custodian in an eDiscovery case.

Deprecated compatibility action. New callers should use LIST_EDISCOVERY_CASE_CUSTODIAN_SOURCES with source_type=unified_group. List unified-group sources for one eDiscovery custodian.

Deprecated compatibility action. New callers should use LIST_EDISCOVERY_CASE_CUSTODIAN_SOURCES with source_type=user. List user sources for one eDiscovery custodian.

List ediscovery hold policies in Microsoft Purview ediscovery holds.

Deprecated compatibility action for listing site sources attached directly to an eDiscovery legal hold. New callers should use LIST_EDISCOVERY_CASE_LEGAL_HOLD_SOURCES with source_type='site'.

List one page of site or user sources attached directly to an eDiscovery legal-hold policy, excluding sources owned by a custodian.

Deprecated compatibility action for listing user sources attached directly to an eDiscovery legal hold. New callers should use LIST_EDISCOVERY_CASE_LEGAL_HOLD_SOURCES with source_type='user'.

List member objects for an eDiscovery case in Microsoft Purview.

List ediscovery noncustodial data sources in Microsoft Purview ediscovery custodians and sources.

Get the most recent indexing operation for one noncustodial data source in an eDiscovery case. Use it to monitor the progress and outcome of that source's index update.

List case operations for a Microsoft Purview eDiscovery case without exposing export download URLs.

Return one page of file metadata from a review set using the beta-only Graph route. File content and extracted text are excluded.

Return one page of queries associated with an eDiscovery review set.

Return one page of review sets in an eDiscovery case.

List eDiscovery cases in Microsoft Purview.

Deprecated: use LIST_EDISCOVERY_CASE_SEARCH_SOURCES with source_type='additional'. List one page of additional sources associated with an eDiscovery search.

Deprecated: use LIST_EDISCOVERY_CASE_SEARCH_SOURCES with source_type='custodial'. List one page of custodial data sources associated with an eDiscovery search.

List one page of searches in a Microsoft Purview eDiscovery case.

Deprecated: use LIST_EDISCOVERY_CASE_SEARCH_SOURCES with source_type='noncustodial'. List one page of noncustodial data sources associated with an eDiscovery search.

List one page of additional, custodial, or noncustodial data sources associated with an eDiscovery search.

List review tags for a Microsoft Purview eDiscovery case.

List file plan reference templates in Microsoft Purview records management.

List retention events in Microsoft Purview records management.

List retention event types in Microsoft Purview records management.

List retention labels in Microsoft Purview records management without an unsupported page-size query.

List authored notes associated with a Microsoft Purview subject rights request.

List subject rights requests in Microsoft Purview.

List tenant sensitivity labels through the data-security and governance API.

List tenant sensitivity labels through the beta information-protection API.

List sensitivity labels available to a specific user.

Process content against data protection policies in the signed-in user's context.

Evaluate content against tenant data-security and governance policies.

Submit a batch of content for tenant data-security and governance processing.

Process content against data protection policies in a specified user's context.

Start an eDiscovery data purge. teamsMessages are permanently deleted even with recoverable; permanentlyDelete is irreversible for all selected areas. Verify the case, search, required purge areas, and required purge type before calling, then monitor the returned operation.

Release one custodian from an eDiscovery case and start asynchronous cleanup of its case data and holds.

Release one noncustodial data source from an eDiscovery case and start asynchronous cleanup of its case data and holds.

Remove the hold from one custodian through the stable v1.0 endpoint and start asynchronous compliance processing.

Remove holds from selected custodians in an eDiscovery case and start asynchronous compliance processing.

Remove the hold from one noncustodial data source through the stable v1.0 endpoint and start asynchronous compliance processing.

Remove holds from selected noncustodial data sources in an eDiscovery case and start asynchronous compliance processing.

Deprecated: use REMOVE_EDISCOVERY_CASE_SEARCH_SOURCE with source_type='custodial'. Remove a custodial data-source association from an eDiscovery search.

Deprecated: use REMOVE_EDISCOVERY_CASE_SEARCH_SOURCE with source_type='noncustodial'. Remove a noncustodial data-source association from an eDiscovery search.

Remove one custodial or noncustodial data-source association from an eDiscovery search. Verify every identifier before this destructive relationship change.

Remove a retention event's event-type association. Verify the retention event identifier before calling.

Unlink one authority, category, citation, department, or file plan reference descriptor from a retention label. Verify the label identifier and descriptor type before calling.

Compatibility-specific authority descriptor unlink action. New callers should use MICROSOFT_PURVIEW_REMOVE_RETENTION_LABEL_DESCRIPTOR with descriptor_type='authority'.

Compatibility-specific category descriptor unlink action. New callers should use MICROSOFT_PURVIEW_REMOVE_RETENTION_LABEL_DESCRIPTOR with descriptor_type='category'.

Compatibility-specific citation descriptor unlink action. New callers should use MICROSOFT_PURVIEW_REMOVE_RETENTION_LABEL_DESCRIPTOR with descriptor_type='citation'.

Compatibility-specific department descriptor unlink action. New callers should use MICROSOFT_PURVIEW_REMOVE_RETENTION_LABEL_DESCRIPTOR with descriptor_type='department'.

Compatibility-specific file plan reference descriptor unlink action. New callers should use MICROSOFT_PURVIEW_REMOVE_RETENTION_LABEL_DESCRIPTOR with descriptor_type='file_plan_reference'.

Remove a retention label's event-type association. Verify the retention label identifier before calling.

Reopen an eDiscovery case in Microsoft Purview.

Reset Microsoft Purview eDiscovery case settings to their defaults.

Retry distribution of an eDiscovery legal-hold policy after a failed deployment, then monitor the asynchronous case operation.

Run a review set query through the beta-only route and return matching file metadata. File content and extracted text are excluded.

Update an eDiscovery case in Microsoft Purview.

Update the index for one custodian through the stable v1.0 endpoint. This operation returns only after Graph accepts the update.

Start asynchronous index updates for selected custodians in an eDiscovery case.

Update the KQL content query or description of an eDiscovery legal-hold policy.

Start an asynchronous index update for one noncustodial data source in an eDiscovery case.

Update the description or display name of an eDiscovery review set.

Update the name and optionally the KQL of an eDiscovery review set query.

Update a Microsoft Purview eDiscovery search.

Update one or more settings for a Microsoft Purview eDiscovery case. Provide at least one setting to change.

Update a review tag in a Microsoft Purview eDiscovery case.

Update the description of the shared retention event type associated with a retention event. Other events or labels using that type are affected.

Update a retention event type in Microsoft Purview records management.

Update supported properties of a retention label in Microsoft Purview records management.

Update the description of the shared retention event type associated with a retention label. Other labels or events using that type are affected.

Update supported properties of a Microsoft Purview subject rights request.