Is MS Graph API available for DSPM for AI in Microsoft Purview?

Question

Hi Team
I am currently working on a solution that leverages Microsoft Purview DSPM for AI to assess and govern AI usage across the Microsoft ecosystem. As part of this initiative, I am looking to programmatically access AI interaction and activity data to generate analytics-driven risk insights and recommendation reports.

I would like to understand the following:

Microsoft Graph API Availability

Is there any Microsoft Graph API (or planned roadmap API) available to retrieve DSPM for AI–related data, such as:

     AI interaction logs
     
           Copilot or AI workload usage signals
           
                 Risk indicators or policy evaluation results
                 
                       Sensitive data exposure related to AI usage
                       
                       **Use Case Requirement**
                       
                          Our objective is to:
                          
                                Pull AI interaction and governance-related data via API
                                
                                      Analyze patterns (data exposure, user behavior, policy gaps)
                                      
                                            Generate automated **recommendation and compliance reports**
                                            
                                               Please confirm whether this scenario is supported today through APIs or any supported extensibility mechanisms.
                                               
                                               **Alternative Supported Approaches** In case a direct Graph API is not currently available, could you please advise on supported alternatives such as:
                                               
                                                  Purview **Audit Logs / Unified Audit Log** access
                                                  
                                                     **Microsoft 365 Management Activity API**
                                                     
                                                        **Defender or Security Copilot signals** integrated with Purview
                                                        
                                                           Export options via **Purview compliance portal**
                                                           
                                                              Any **preview or private APIs** for DSPM for AI insights
                                                              
                                                              **Roadmap / Guidance**
                                                              
                                                                 Is there a roadmap or official guidance for exposing **DSPM for AI telemetry** via API for ISVs or enterprise solutions?
                                                                 
                                                                    Are there best practices recommended by Microsoft for building custom analytics and reporting on top of DSPM for AI today?
                                                                    

This information will help us design a compliant and scalable integration aligned with Microsoft’s supported architecture and governance model.

Answer 1

Hi Ghanshyam Agrawal,

It sounds like you're looking for ways to access AI-related data through Microsoft Purview's Data Security Posture Management (DSPM) and wondering about the availability of Microsoft Graph APIs or alternatives for your compliance and reporting needs.

Here’s a breakdown of what you need to know:

Microsoft Graph API Availability: Currently, there is no specific Microsoft Graph API documented that directly supports retrieving DSPM for AI-related data, such as AI interaction logs, usage signals, or risk indicators. The Microsoft Graph API documentation does not list APIs for this specific functionality. You can check the Microsoft Graph REST API v1.0 and the Microsoft Graph REST API beta version for the most up-to-date information.

Alternative Supported Approaches: While a direct Microsoft Graph API may be lacking, there are several alternatives and tools within Microsoft Purview that may help:

• Audit Logs / Unified Audit Log: You can access audit logs to gather insights on activities, including user interactions within Microsoft 365 services. More on this can be found in the Microsoft Purview compliance management documentation.
  • Microsoft 365 Management Activity API: Could potentially provide relevant insights.
    • Defender and Security Copilot Signals: These could be integrated with Purview for additional data insights.
      • Export Options from the Purview Compliance Portal: This may allow you to gather necessary data.
        • Preview or Private APIs: Check directly with Microsoft Support or your account representative for any private APIs that might be available.
        Roadmap / Guidance: No specific roadmap was mentioned in the provided documentation regarding the exposure of DSPM for AI telemetry via API. However, keeping up with Microsoft’s official communication and engaging through the Azure Support Portal may yield insights into upcoming features or APIs. Recommendations: For building custom analytics and reporting on top of DSPM for AI, it’s advisable to explore existing dashboards and metrics in Purview for monitoring risks and patterns associated with AI applications. This includes leveraging the Microsoft Purview APIs for data governance.

Reference Links:

• Microsoft Graph REST API v1.0
• Microsoft Graph REST API beta version
• Microsoft Purview compliance management documentation
• Microsoft Purview data security and governance APIs

Hope this helps your integration with Microsoft Purview for AI usage insights! If you have more questions or need further assistance, feel free to ask! 

Answer 2

The Microsoft Graph API does support certain functionalities related to Microsoft Purview and its capabilities for data security and governance. However, specific APIs for retrieving DSPM for AI-related data, such as AI interaction logs or risk indicators, are not explicitly detailed in the provided context.

The context mentions that the Microsoft Purview APIs help manage data protection and compliance, including sending user activity or data to Microsoft Purview for processing. This can enable compliance administrators to discover sensitive interactions, which aligns with your goal of generating analytics-driven risk insights and recommendation reports.

For your use case, you may consider the following approaches:

• Audit Logs / Unified Audit Log: These can provide insights into user activities and interactions.
• Microsoft 365 Management Activity API: This API can help you access various management activities across Microsoft 365 services.
• Export options via Purview compliance portal: This may allow you to extract relevant data for analysis.
• Preview or private APIs: While not specified, you might need to inquire directly with Microsoft for any upcoming APIs related to DSPM for AI insights.

Regarding the roadmap or guidance for exposing DSPM for AI telemetry via API, the context does not provide specific details. It would be advisable to check with Microsoft for the latest updates and best practices for building custom analytics and reporting on top of DSPM for AI.

---

References:

• Use Microsoft Purview capabilities to develop and deploy secure and compliant Microsoft Foundry or custom AI apps
• Microsoft Purview data security and governance APIs