emailFileAssessmentRequest resource type

Represents a resource that creates and retrieves an email file threat assessment. The email file can be an .eml file type.

Inherits from threatAssessmentRequest.


Method Return Type Description
Create threatAssessmentRequest emailFileAssessmentRequest Create a new email file assessment request by posting an emailFileAssessmentRequest object.
Get threatAssessmentRequest emailFileAssessmentRequest Read the properties and relationships of an emailFileAssessmentRequest object.


Property Type Description
contentData String Base64 encoded .eml email file content. The file content cannot fetch back because it isn't stored.
destinationRoutingReason mailDestinationRoutingReason The reason for mail routed to its destination. Possible values are: none, mailFlowRule, safeSender, blockedSender, advancedSpamFiltering, domainAllowList, domainBlockList, notInAddressBook, firstTimeSender, autoPurgeToInbox, autoPurgeToJunk, autoPurgeToDeleted, outbound, notJunk, junk.
category threatCategory The threat category. Possible values are: spam, phishing, malware.
contentType threatAssessmentContentType The content type of threat assessment. Possible values are: mail, url, file.
createdBy identitySet The threat assessment request creator.
createdDateTime DateTimeOffset The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
expectedAssessment threatExpectedAssessment The expected assessment from submitter. Possible values are: block, unblock.
id String The threat assessment request ID is a globally unique identifier (GUID).
recipientEmail String The mail recipient whose policies are used to assess the mail.
requestSource threatAssessmentRequestSource The source of threat assessment request. Possible values are: administrator.
status threatAssessmentStatus The assessment process status. Possible values are: pending, completed.


Relationship Type Description
results threatAssessmentResult collection A collection of threat assessment results. Read-only. By default, a GET /threatAssessmentRequests/{id} does not return this property unless you apply $expand on it.

JSON representation

The following is a JSON representation of the resource.

  "category": "String",
  "contentData": "String",
  "contentType": "String",
  "createdBy": {"@odata.type": "microsoft.graph.identitySet"},
  "createdDateTime": "String (timestamp)",
  "destinationRoutingReason": "String",
  "expectedAssessment": "String",
  "id": "String (identifier)",
  "recipientEmail": "String",
  "requestSource": "String",
  "status": "String"