Set Retention Label & permanent delete based on retention label

Question

Set Retention Label & permanent delete based on retention label

Akshith Reddy Thalla 140

Unable to set the retention label (https://learn.microsoft.com/en-us/graph/api/driveitem-setretentionlabel?view=graph-rest-1.0&tabs=http)

PATCH /drives/{drive-id}/items/{item-id}/retentionLabel

User's image

---I also want to permanently delete based on retention label. Let's say, Delete File with "Obsolete" retention label

1 answer

Your answer

Answer 1

Anonymous

Hi @Akshith Reddy Thalla

First of all, the reason for this error is that the retention label named 'Set Retention label' does not exist, you can list all the retention labels for checking, so to solve this problem you need to create a retention label named 'Set Retention label' first, see the link below for how to list and create retention labels.

List retention Labels:

https://learn.microsoft.com/en-us/graph/api/security-labelsroot-list-retentionlabel?view=graph-rest-1.0&tabs=http

Create retention Label:

https://learn.microsoft.com/en-us/graph/api/security-labelsroot-post-retentionlabel?view=graph-rest-1.0&tabs=http

For permanent deletion, if you want to use a retention label, you can set the item to be automatically deleted after a specified period of time, or the item can be permanently deleted based on the driveItem's ID.

About how to set up retention labels:

https://learn.microsoft.com/en-us/purview/retention-settings#settings-for-retaining-and-deleting-content

Permanently delete a driveItem by using its ID:

https://learn.microsoft.com/en-us/graph/api/driveitem-permanentdelete?view=graph-rest-1.0

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Akshith Reddy Thalla 140 Reputation points

2024-05-10T07:30:23.05+00:00
Hi @Anonymous
Will check the delete based on retention label and let u know, meanwhile I'm unable to get the success response of List Retention Labels

What additional authentication, I'm missing here?

Same error also came up when i try to create a retention label
https://learn.microsoft.com/en-us/graph/api/security-labelsroot-post-retentionlabel?view=graph-rest-1.0&tabs=http

Anyway to create a retention label directly from the Microsoft Admin portal using admin credentials?
Anonymous

2024-05-13T07:35:50.8466667+00:00

Hi @Akshith Reddy Thalla

First, grant the app delegation permission (RecordsManagement.Read.All), which requires the consent of the administrator, please use the administrator account, and then use the auth code flow.
Akshith Reddy Thalla 140 Reputation points

2024-05-14T07:17:01.22+00:00

Hi @Anonymous
Added RecordsManagement.Read.All and RecordsManagement.ReadWrite.All both at Delegated level and Application Level, still seeing the same issue which I provided in the above screenshot(earlier comment).
Akshith Reddy Thalla 140 Reputation points

2024-05-14T13:17:43.97+00:00

@Anonymous
I followed this https://learn.microsoft.com/en-us/purview/file-plan-manager to create retention label, but this error came up, when I checked out in File Plan, there is not record, it says the record already exists.
Anonymous

2024-05-15T08:58:34.2933333+00:00

Hi @Akshith Reddy Thalla

Please use auth code flow to get the token, and the obtained token will be parsed in jwt(https://jwt.ms/), and check if the token has permissions RecordsManagement.Read.All, my resolution is as follows.

For more information about auth code flow, see this link:

https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-auth-code-flow

All retention labels appear in the list, so you can see if the retention label you need to use already exists.

Here's the retention label on my list.
Akshith Reddy Thalla 140 Reputation points

2024-05-20T09:57:47.3966667+00:00
Hi @Anonymous

I was able to bypass the authentication, but in the Request Body, What exactly all these id's mean over here - https://learn.microsoft.com/en-us/graph/api/security-labelsroot-post-retentionlabel?view=graph-rest-1.0&tabs=http

I can see Bad Request in Response
Anonymous

2024-05-23T09:33:45.8266667+00:00

Hi @Akshith Reddy Thalla

These properties are the retention event types and templates that you need to specify when creating a retention label. The id allows you to specify which type or template to use. The document allows you to list or create retention event types. In the same way you can list or create templates from this document.

However, you should be aware that creating retention label through the Api is more complex, and it is recommended that you create them directly in the Purview portal.
Akshith Reddy Thalla 140 Reputation points

2024-05-23T10:03:13.5966667+00:00

Hi @Anonymous
I do understand that creating retention label in the Purview Portal is easy, but irrespective of the different names we give, I always get this error.

(But actually it doesn't exists in File Plan)

Share via

Set Retention Label & permanent delete based on retention label

1 answer

Your answer