ediscoveryCase resource type
Namespace: microsoft.graph.security
Important
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
In the context of eDiscovery, contains custodians, holds, searches, review sets, and exports. For details, see Overview of Microsoft Purview eDiscovery (Premium).
Methods
Properties
| Property | Type | Description |
|---|---|---|
| closedBy | microsoft.graph.identitySet | The user who closed the case. |
| closedDateTime | DateTimeOffset | The date and time when the case was closed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
| createdBy | microsoft.graph.identitySet | The user who created the case. |
| createdDateTime | DateTimeOffset | The date and time when the entity was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
| description | String | The case description. |
| displayName | String | The case name. |
| externalId | String | The external case number for customer reference. |
| id | String | The ID for the eDiscovery case. Read-only. |
| lastModifiedBy | microsoft.graph.identitySet | The last user who modified the case. |
| lastModifiedDateTime | DateTimeOffset | The latest date and time when the case was modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
| status | microsoft.graph.security.caseStatus | The case status. Possible values are unknown, active, pendingDelete, closing, closed, and closedWithError. For details, see the following table. |
caseStatus values
| Member | Description |
|---|---|
| unknown | Case status is unknown. |
| active | Case is active. |
| pendingDelete | Case was deleted, but the delete has not been fully transacted. |
| closing | Case was closed, but the operation has not been fully transacted. |
| closed | The case is closed. |
| closedWithError | The case is closed, but there were errors releasing holds in the case. |
Relationships
| Relationship | Type | Description |
|---|---|---|
| custodians | microsoft.graph.security.ediscoveryCustodian collection | Returns a list of case ediscoveryCustodian objects for this case. |
| legalHolds | microsoft.graph.security.ediscoveryHoldPolicy collection | Returns a list of case eDiscoveryHoldPolicy objects for this case. |
| noncustodialDataSources | microsoft.graph.security.ediscoveryNoncustodialDataSource collection | Returns a list of case ediscoveryNoncustodialDataSource objects for this case. |
| operations | microsoft.graph.security.caseOperation collection | Returns a list of case caseOperation objects for this case. |
| reviewSets | microsoft.graph.security.ediscoveryReviewSet collection | Returns a list of eDiscoveryReviewSet objects in the case. |
| searches | microsoft.graph.security.ediscoverySearch collection | Returns a list of eDiscoverySearch objects associated with this case. |
| settings | microsoft.graph.security.ediscoveryCaseSettings | Returns a list of eDIscoverySettings objects in the case. |
| tags | microsoft.graph.security.ediscoveryReviewTag collection | Returns a list of ediscoveryReviewTag objects associated to this case. |
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.ediscoveryCase",
"id": "String (identifier)",
"displayName": "String",
"description": "String",
"createdDateTime": "String (timestamp)",
"lastModifiedBy": {
"@odata.type": "microsoft.graph.identitySet"
},
"lastModifiedDateTime": "String (timestamp)",
"status": "String",
"closedBy": {
"@odata.type": "microsoft.graph.identitySet"
},
"closedDateTime": "String (timestamp)",
"externalId": "String"
}