{ "opencollection": "1.0.0", "info": { "name": "Microsoft Graph Admin Admin.admin security.casesRoot API", "version": "1.0.0" }, "items": [ { "info": { "name": "security.casesRoot", "type": "folder" }, "items": [ { "info": { "name": "Microsoft Graph Get cases from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases", "params": [ { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Microsoft Graph Get cases from security" }, { "info": { "name": "Microsoft Graph Update the navigation property cases in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases", "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property cases in security" }, { "info": { "name": "Microsoft Graph Delete navigation property cases for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases", "headers": [ { "name": "If-Match", "value": "" } ] }, "docs": "Microsoft Graph Delete navigation property cases for security" }, { "info": { "name": "Microsoft Graph List ediscoveryCases", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases", "params": [ { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of the ediscoveryCase objects and their properties." }, { "info": { "name": "Microsoft Graph Create ediscoveryCase", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases", "body": { "type": "json", "data": "{}" } }, "docs": "Create a new ediscoveryCase object." }, { "info": { "name": "Microsoft Graph Get ediscoveryCase", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of an ediscoveryCase object." }, { "info": { "name": "Microsoft Graph Update ediscoveryCase", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Update the properties of an ediscoveryCase object." }, { "info": { "name": "Microsoft Graph Delete ediscoveryCase", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ] }, "docs": "Delete an ediscoveryCase object." }, { "info": { "name": "Microsoft Graph List ediscoveryCustodian", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of the custodian objects and their properties." }, { "info": { "name": "Microsoft Graph Create custodians", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new ediscoveryCustodian object.\r\nAfter the custodian object is created, you will need to create the custodian's userSource to reference their mailbox and OneDrive for Business site." }, { "info": { "name": "Microsoft Graph Get ediscoveryCustodian", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of an ediscoveryCustodian object." }, { "info": { "name": "Microsoft Graph Update the navigation property custodians in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property custodians in security" }, { "info": { "name": "Microsoft Graph Delete navigation property custodians for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ] }, "docs": "Microsoft Graph Delete navigation property custodians for security" }, { "info": { "name": "Microsoft Graph List lastIndexOperation", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/lastIndexOperation", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of the ediscoveryIndexOperations associated with an ediscoveryCustodian." }, { "info": { "name": "Microsoft Graph Invoke action activate", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/microsoft.graph.security.activate", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ] }, "docs": "Activate a custodian that has been released from a case to make them part of the case again. For details, see Manage custodians in an eDiscovery (Premium) case." }, { "info": { "name": "Microsoft Graph Invoke action applyHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/microsoft.graph.security.applyHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ] }, "docs": "Start the process of applying hold on eDiscovery custodians. After the operation is created, you can use Get ediscoveryCustodian to retrieve the status of an ediscoveryCustodian." }, { "info": { "name": "Microsoft Graph Invoke action release", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/microsoft.graph.security.release", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ] }, "docs": "Release a custodian from a case. For details, see Release a custodian from a case." }, { "info": { "name": "Microsoft Graph Invoke action removeHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/microsoft.graph.security.removeHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ] }, "docs": "Start the process of removing hold from eDiscovery custodians. After the operation is created, you can get the status by retrieving the Location parameter from the response headers. The location provides a URL that will return an eDiscoveryHoldOperation object." }, { "info": { "name": "Microsoft Graph Invoke action updateIndex", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/microsoft.graph.security.updateIndex", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ] }, "docs": "Trigger an indexOperation to make a custodian and associated sources searchable." }, { "info": { "name": "Microsoft Graph List siteSources", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/siteSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of the siteSource objects associated with an ediscoveryCustodian." }, { "info": { "name": "Microsoft Graph Create siteSource", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/siteSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new siteSource object associated with an eDiscovery custodian." }, { "info": { "name": "Microsoft Graph Get siteSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/siteSources/:siteSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "siteSource-id", "value": "", "type": "path", "description": "The unique identifier of siteSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Data source entity for SharePoint sites associated with the custodian." }, { "info": { "name": "Microsoft Graph Update the navigation property siteSources in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/siteSources/:siteSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "siteSource-id", "value": "", "type": "path", "description": "The unique identifier of siteSource" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property siteSources in security" }, { "info": { "name": "Microsoft Graph Delete siteSource", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/siteSources/:siteSource-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "siteSource-id", "value": "", "type": "path", "description": "The unique identifier of siteSource" } ] }, "docs": "Delete a siteSource object associated with an ediscoveryCustodian." }, { "info": { "name": "Microsoft Graph Get site from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/siteSources/:siteSource-id/site", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "siteSource-id", "value": "", "type": "path", "description": "The unique identifier of siteSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "The SharePoint site associated with the siteSource." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/siteSources/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph List unifiedGroupSources", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of the unifiedGroupSource objects associated with an ediscoveryCustodian." }, { "info": { "name": "Microsoft Graph Create custodian unifiedGroupSource", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new unifiedGroupSource object associated with an eDiscovery custodian." }, { "info": { "name": "Microsoft Graph Get unifiedGroupSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources/:unifiedGroupSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "unifiedGroupSource-id", "value": "", "type": "path", "description": "The unique identifier of unifiedGroupSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Data source entity for groups associated with the custodian." }, { "info": { "name": "Microsoft Graph Update the navigation property unifiedGroupSources in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources/:unifiedGroupSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "unifiedGroupSource-id", "value": "", "type": "path", "description": "The unique identifier of unifiedGroupSource" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property unifiedGroupSources in security" }, { "info": { "name": "Microsoft Graph Delete unifiedGroupSource", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources/:unifiedGroupSource-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "unifiedGroupSource-id", "value": "", "type": "path", "description": "The unique identifier of unifiedGroupSource" } ] }, "docs": "Delete a unifiedGroupSource object associated with an ediscoveryCustodian." }, { "info": { "name": "Microsoft Graph Get group from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources/:unifiedGroupSource-id/group", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "unifiedGroupSource-id", "value": "", "type": "path", "description": "The unique identifier of unifiedGroupSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Represents a group." }, { "info": { "name": "Microsoft Graph Get serviceProvisioningErrors property value", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources/:unifiedGroupSource-id/group/serviceProvisioningErrors", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "unifiedGroupSource-id", "value": "", "type": "path", "description": "The unique identifier of unifiedGroupSource" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Errors published by a federated service describing a nontransient, service-specific error regarding the properties or link from a group object. Supports $filter (eq, not, for isResolved and serviceInstance)." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources/:unifiedGroupSource-id/group/serviceProvisioningErrors/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "unifiedGroupSource-id", "value": "", "type": "path", "description": "The unique identifier of unifiedGroupSource" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/unifiedGroupSources/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph List userSources", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/userSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of the userSource objects associated with an ediscoveryCustodian or ediscoveryHoldPolicy." }, { "info": { "name": "Microsoft Graph Create custodian userSource", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/userSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new userSource object associated with an eDiscovery custodian." }, { "info": { "name": "Microsoft Graph Get userSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/userSources/:userSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "userSource-id", "value": "", "type": "path", "description": "The unique identifier of userSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Data source entity for a the custodian. This is the container for a custodian's mailbox and OneDrive for Business site." }, { "info": { "name": "Microsoft Graph Update the navigation property userSources in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/userSources/:userSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "userSource-id", "value": "", "type": "path", "description": "The unique identifier of userSource" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property userSources in security" }, { "info": { "name": "Microsoft Graph Delete userSource", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/userSources/:userSource-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "userSource-id", "value": "", "type": "path", "description": "The unique identifier of userSource" } ] }, "docs": "Delete a userSource object associated with an ediscoveryCustodian." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/:ediscoveryCustodian-id/userSources/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryCustodian-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCustodian" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Invoke action applyHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/microsoft.graph.security.applyHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Invoke action applyHold" }, { "info": { "name": "Microsoft Graph Invoke action removeHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/custodians/microsoft.graph.security.removeHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Invoke action removeHold" }, { "info": { "name": "Microsoft Graph Invoke action close", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/microsoft.graph.security.close", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ] }, "docs": "Close an eDiscovery case. For details, see Close a case." }, { "info": { "name": "Microsoft Graph Invoke action reopen", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/microsoft.graph.security.reopen", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ] }, "docs": "Reopen an eDiscovery case that was closed. For details, see Reopen a closed case." }, { "info": { "name": "Microsoft Graph Get noncustodialDataSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Returns a list of case ediscoveryNoncustodialDataSource objects for this case." }, { "info": { "name": "Microsoft Graph Create nonCustodialDataSources", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new ediscoveryNoncustodialDataSource object." }, { "info": { "name": "Microsoft Graph Get noncustodialDataSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Returns a list of case ediscoveryNoncustodialDataSource objects for this case." }, { "info": { "name": "Microsoft Graph Update the navigation property noncustodialDataSources in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property noncustodialDataSources in security" }, { "info": { "name": "Microsoft Graph Delete navigation property noncustodialDataSources for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ] }, "docs": "Microsoft Graph Delete navigation property noncustodialDataSources for security" }, { "info": { "name": "Microsoft Graph Get dataSource from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/dataSource", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "User source or SharePoint site data source as noncustodial data source." }, { "info": { "name": "Microsoft Graph Update the navigation property dataSource in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/dataSource", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property dataSource in security" }, { "info": { "name": "Microsoft Graph Delete navigation property dataSource for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/dataSource", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ] }, "docs": "Microsoft Graph Delete navigation property dataSource for security" }, { "info": { "name": "Microsoft Graph Get lastIndexOperation from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/lastIndexOperation", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Operation entity that represents the latest indexing for the noncustodial data source." }, { "info": { "name": "Microsoft Graph Invoke action applyHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/microsoft.graph.security.applyHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ] }, "docs": "Start the process of applying hold on eDiscovery non-custodial data sources. After the operation is created, you can get the status by retrieving the Location parameter from the response headers. The location provides a URL that returns an eDiscoveryHoldOperation object." }, { "info": { "name": "Microsoft Graph Invoke action release", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/microsoft.graph.security.release", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ] }, "docs": "Release the non-custodial data source from the case." }, { "info": { "name": "Microsoft Graph Invoke action removeHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/microsoft.graph.security.removeHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ] }, "docs": "Start the process of removing hold from eDiscovery non-custodial data sources. After the operation is created, you can get the status by retrieving the Location parameter from the response headers. The location provides a URL that returns an eDiscoveryHoldOperation object." }, { "info": { "name": "Microsoft Graph Invoke action updateIndex", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/:ediscoveryNoncustodialDataSource-id/microsoft.graph.security.updateIndex", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" } ] }, "docs": "Trigger an indexOperation to make a non-custodial data source and its associated data source searchable." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Invoke action applyHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/microsoft.graph.security.applyHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Invoke action applyHold" }, { "info": { "name": "Microsoft Graph Invoke action removeHold", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/noncustodialDataSources/microsoft.graph.security.removeHold", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Invoke action removeHold" }, { "info": { "name": "Microsoft Graph List caseOperations", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/operations", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of the caseOperation objects and their properties." }, { "info": { "name": "Microsoft Graph Create new navigation property to operations for security", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/operations", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Create new navigation property to operations for security" }, { "info": { "name": "Microsoft Graph Get caseOperation", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/operations/:caseOperation-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "caseOperation-id", "value": "", "type": "path", "description": "The unique identifier of caseOperation" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of a caseOperation object." }, { "info": { "name": "Microsoft Graph Update the navigation property operations in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/operations/:caseOperation-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "caseOperation-id", "value": "", "type": "path", "description": "The unique identifier of caseOperation" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property operations in security" }, { "info": { "name": "Microsoft Graph Delete navigation property operations for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/operations/:caseOperation-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "caseOperation-id", "value": "", "type": "path", "description": "The unique identifier of caseOperation" } ] }, "docs": "Microsoft Graph Delete navigation property operations for security" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/operations/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph List reviewSets", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of ediscoveryReviewSet objects associated with an eDiscovery case." }, { "info": { "name": "Microsoft Graph Create reviewSets", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new ediscoveryReviewSet object." }, { "info": { "name": "Microsoft Graph Get ediscoveryReviewSet", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of an ediscoveryReviewSet object." }, { "info": { "name": "Microsoft Graph Update the navigation property reviewSets in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property reviewSets in security" }, { "info": { "name": "Microsoft Graph Delete navigation property reviewSets for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" } ] }, "docs": "Microsoft Graph Delete navigation property reviewSets for security" }, { "info": { "name": "Microsoft Graph Invoke action addToReviewSet", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/microsoft.graph.security.addToReviewSet", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Start the process of adding a collection from Microsoft 365 services to a review set. After the operation is created, you can get the status of the operation by retrieving the Location parameter from the response headers. The location provides a URL that returns an Add to review set operation." }, { "info": { "name": "Microsoft Graph Invoke action export", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/microsoft.graph.security.export", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Initiate an export from a ediscoveryReviewSet. For details, see Export documents from a review set in eDiscovery (Premium)." }, { "info": { "name": "Microsoft Graph List queries", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get the list of queries associated with an eDiscovery review set." }, { "info": { "name": "Microsoft Graph Create ediscoveryReviewSetQuery", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new ediscoveryReviewSetQuery object." }, { "info": { "name": "Microsoft Graph Get ediscoveryReviewSetQuery", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries/:ediscoveryReviewSetQuery-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "ediscoveryReviewSetQuery-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSetQuery" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of an ediscoveryReviewSetQuery object." }, { "info": { "name": "Microsoft Graph Update ediscoveryReviewSetQuery", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries/:ediscoveryReviewSetQuery-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "ediscoveryReviewSetQuery-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSetQuery" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Update the properties of an ediscoveryReviewSetQuery object." }, { "info": { "name": "Microsoft Graph Delete ediscoveryReviewSetQuery", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries/:ediscoveryReviewSetQuery-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "ediscoveryReviewSetQuery-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSetQuery" } ] }, "docs": "Delete an ediscoveryReviewSetQuery object." }, { "info": { "name": "Microsoft Graph Invoke action applyTags", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries/:ediscoveryReviewSetQuery-id/microsoft.graph.security.applyTags", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "ediscoveryReviewSetQuery-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSetQuery" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Apply tags to files in an eDiscovery review set. For details, see Tag documents in a review set in eDiscovery." }, { "info": { "name": "Microsoft Graph Invoke action export", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries/:ediscoveryReviewSetQuery-id/microsoft.graph.security.export", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "ediscoveryReviewSetQuery-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSetQuery" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Initiate an export from a ediscoveryReviewSetQuery. For details, see Export documents from a review set in eDiscovery (Premium)." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/:ediscoveryReviewSet-id/queries/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewSet-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewSet" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/reviewSets/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph List searches", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get the list of ediscoverySearch resources from an eDiscoveryCase object." }, { "info": { "name": "Microsoft Graph Create searches", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new ediscoverySearch object." }, { "info": { "name": "Microsoft Graph Get ediscoverySearch", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of an ediscoverySearch object." }, { "info": { "name": "Microsoft Graph Update ediscoverySearch", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Update the properties of an ediscoverySearch object." }, { "info": { "name": "Microsoft Graph Delete ediscoverySearch", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" } ] }, "docs": "Delete an ediscoverySearch object." }, { "info": { "name": "Microsoft Graph List additionalSources", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/additionalSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get the list of additional sources associated with an eDiscovery search." }, { "info": { "name": "Microsoft Graph Add additional sources", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/additionalSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new additional source associated with an eDiscovery search." }, { "info": { "name": "Microsoft Graph Get additionalSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/additionalSources/:dataSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "dataSource-id", "value": "", "type": "path", "description": "The unique identifier of dataSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Adds an additional source to the eDiscovery search." }, { "info": { "name": "Microsoft Graph Update the navigation property additionalSources in security", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/additionalSources/:dataSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "dataSource-id", "value": "", "type": "path", "description": "The unique identifier of dataSource" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property additionalSources in security" }, { "info": { "name": "Microsoft Graph Delete navigation property additionalSources for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/additionalSources/:dataSource-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "dataSource-id", "value": "", "type": "path", "description": "The unique identifier of dataSource" } ] }, "docs": "Microsoft Graph Delete navigation property additionalSources for security" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/additionalSources/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get addToReviewSetOperation from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/addToReviewSetOperation", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Adds the results of the eDiscovery search to the specified reviewSet." }, { "info": { "name": "Microsoft Graph List custodianSources", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/custodianSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get the list of custodial data sources associated with an eDiscovery search." }, { "info": { "name": "Microsoft Graph Get custodianSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/custodianSources/:dataSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "dataSource-id", "value": "", "type": "path", "description": "The unique identifier of dataSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Custodian sources that are included in the eDiscovery search." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/custodianSources/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph List lastEstimateStatisticsOperation", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/lastEstimateStatisticsOperation", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get the last ediscoveryEstimateOperation objects and their properties." }, { "info": { "name": "Microsoft Graph Invoke action estimateStatistics", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/microsoft.graph.security.estimateStatistics", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" } ] }, "docs": "Run an estimate of the number of emails and documents in the eDiscovery search. To learn more about searches in eDiscovery, see Collect data for a case in eDiscovery (Premium)." }, { "info": { "name": "Microsoft Graph Invoke action exportReport", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/microsoft.graph.security.exportReport", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Export an item report from an estimated ediscoverySearch. For details, see Manage a collection estimate." }, { "info": { "name": "Microsoft Graph Invoke action exportResult", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/microsoft.graph.security.exportResult", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Export results from an estimated ediscoverySearch. For details, see Manage a collection estimate." }, { "info": { "name": "Microsoft Graph Invoke action purgeData", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/microsoft.graph.security.purgeData", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Delete Exchange mailbox items or Microsoft Teams messages contained in an eDiscovery search. You can collect and purge the following categories of Teams content:\r\n- Teams 1:1 chats - Chat messages, posts, and attachments shared in a Teams conversation between two people. Teams 1:1 chats are also called *conversations*.\r\n- Teams group chats - Chat messages, posts, and attachments shared in a Teams conversation between three or more people. Also called *1:N* chats or *group conversations*.\r\n- Team" }, { "info": { "name": "Microsoft Graph Get noncustodialSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/noncustodialSources", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "noncustodialDataSource sources that are included in the eDiscovery search" }, { "info": { "name": "Microsoft Graph Get noncustodialSources from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/noncustodialSources/:ediscoveryNoncustodialDataSource-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "ediscoveryNoncustodialDataSource-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryNoncustodialDataSource" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "noncustodialDataSource sources that are included in the eDiscovery search" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/:ediscoverySearch-id/noncustodialSources/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoverySearch-id", "value": "", "type": "path", "description": "The unique identifier of ediscoverySearch" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/searches/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get ediscoveryCaseSettings", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/settings", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of an ediscoveryCaseSettings object." }, { "info": { "name": "Microsoft Graph Update ediscoveryCaseSettings", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/settings", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Update the properties of an ediscoveryCaseSettings object." }, { "info": { "name": "Microsoft Graph Delete navigation property settings for security", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/settings", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ] }, "docs": "Microsoft Graph Delete navigation property settings for security" }, { "info": { "name": "Microsoft Graph Invoke action resetToDefault", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/settings/microsoft.graph.security.resetToDefault", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ] }, "docs": "Reset a caseSettings object to the default values." }, { "info": { "name": "Microsoft Graph List tags", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get a list of eDiscoveryReviewTag objects and their properties." }, { "info": { "name": "Microsoft Graph Create tags", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Create a new ediscoveryReviewTag object." }, { "info": { "name": "Microsoft Graph Get ediscoveryReviewTag", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/:ediscoveryReviewTag-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewTag-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Read the properties and relationships of an ediscoveryReviewTag object." }, { "info": { "name": "Microsoft Graph Update ediscoveryReviewTag", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/:ediscoveryReviewTag-id", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewTag-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Update the properties of an ediscoveryReviewTag object." }, { "info": { "name": "Microsoft Graph Remove ediscoveryReviewTag", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/:ediscoveryReviewTag-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewTag-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" } ] }, "docs": "Remove an ediscoveryReviewTag object." }, { "info": { "name": "Microsoft Graph ediscoveryReviewTag: asHierarchy", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/:ediscoveryReviewTag-id/childTags", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewTag-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "List eDiscovery review tags with the tag hierarchy shown." }, { "info": { "name": "Microsoft Graph Get childTags from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/:ediscoveryReviewTag-id/childTags/:ediscoveryReviewTag-id1", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewTag-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" }, { "name": "ediscoveryReviewTag-id1", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Returns the tags that are a child of a tag." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/:ediscoveryReviewTag-id/childTags/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewTag-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get parent from security", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/:ediscoveryReviewTag-id/parent", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "ediscoveryReviewTag-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryReviewTag" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Returns the parent tag of the specified tag." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/$count", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Invoke function asHierarchy", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/:ediscoveryCase-id/tags/microsoft.graph.security.asHierarchy()", "params": [ { "name": "ediscoveryCase-id", "value": "", "type": "path", "description": "The unique identifier of ediscoveryCase" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "List eDiscovery review tags with the tag hierarchy shown." }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/$count", "params": [ { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" } ] } ], "bundled": true }