Edit

Get agentic output

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Get the metadata of a stored output owned by an agentic session. This operation uses the agentic output resource.

List the session's outputs to find its output identifiers. Use the returned id unchanged for {output-id}; treat it as opaque and don't derive it from a filename.

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

Permission type Least privileged permissions Higher privileged permissions
Delegated (work or school account) Perception.Read.All Perception.Manage.All
Delegated (personal Microsoft account) Not supported. Not supported.
Application Not supported. Not supported.

The signed-in user must have access to the requested resources. Granting an OAuth permission does not override the service's access controls.

HTTP request

GET /security/agenticSecurity/sessions/{session-id}/outputs/{output-id}

Optional query parameters

This method supports the $select OData query parameter. Other query parameters aren't supported.

Use $select=id to request only the output identifier without the output category. The identifier can be used in the authenticated content route to download the file.

Request headers

Name Description
Authorization Bearer {token}. Required. Learn more about authentication and authorization.

Request body

Don't supply a request body for this method.

Response

If successful, this method returns a 200 OK response code and an agentic output object in the response body.

This response contains metadata, not report bytes. The content stream isn't inline in the JSON object. The kind property identifies an output category, such as summary or artifact, not whether a download is shortened.

To download the file, use the session id and output id in /beta/security/agenticSecurity/sessions/{session-id}/outputs/{output-id}/content. Send the request with a Microsoft Graph access token authorized for the parent session.

Examples

The following examples use a fictional session identifier and illustrative metadata. They aren't captured Microsoft Graph responses.

Example 1: Get output metadata

Request

The following example retrieves the executive-summary artifact shown in List outputs.

GET https://graph.microsoft.com/beta/security/agenticSecurity/sessions/6c27d97a-8003-4993-a6e3-e3a8b5a52d50/outputs/c2hhcmVkL291dHB1dHMvcmVwb3J0X2V4ZWN1dGl2ZV9zdW1tYXJ5Lm1k

Response

HTTP/1.1 200 OK
Content-Type: application/json

{
  "id": "c2hhcmVkL291dHB1dHMvcmVwb3J0X2V4ZWN1dGl2ZV9zdW1tYXJ5Lm1k",
  "kind": "artifact"
}

Example 2: Select the output identifier

Request

The following example requests only the identifier of an output without its category.

GET https://graph.microsoft.com/beta/security/agenticSecurity/sessions/6c27d97a-8003-4993-a6e3-e3a8b5a52d50/outputs/c2hhcmVkL291dHB1dHMvcmVwb3J0X2V4ZWN1dGl2ZV9zdW1tYXJ5Lm1k?$select=id

Response

The response contains the selected identifier for the same output. It doesn't contain the file's contents.

HTTP/1.1 200 OK
Content-Type: application/json

{
  "id": "c2hhcmVkL291dHB1dHMvcmVwb3J0X2V4ZWN1dGl2ZV9zdW1tYXJ5Lm1k"
}