title | description | author | ms.localizationpriority | ms.prod | doc_type |
---|---|---|---|---|---|
ediscoveryCase resource type |
In the context of eDiscovery, contains custodians, holds, collections, and review sets. |
SeunginLyu |
medium |
ediscovery |
resourcePageType |
Namespace: microsoft.graph.security
In the context of eDiscovery, contains custodians, searches, review sets. For details, see Overview of Microsoft Purview eDiscovery (Premium).
Property | Type | Description |
---|---|---|
closedBy | microsoft.graph.identitySet | The user who closed the case. |
closedDateTime | DateTimeOffset | The date and time when the case was closed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
createdBy | microsoft.graph.identitySet | The user who created the case. |
createdDateTime | DateTimeOffset | The date and time when the entity was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
description | String | The case description. |
displayName | String | The case name. |
externalId | String | The external case number for customer reference. |
id | String | The ID for the eDiscovery case. Read-only. |
lastModifiedBy | microsoft.graph.identitySet | The last user who modified the case. |
lastModifiedDateTime | DateTimeOffset | The latest date and time when the case was modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
status | microsoft.graph.security.caseStatus | The case status. Possible values are unknown , active , pendingDelete , closing , closed , and closedWithError . For details, see the following table. |
Member | Description |
---|---|
unknown | Case status is unknown. |
active | Case is active. |
pendingDelete | Case was deleted, but the delete has not been fully transacted. |
closing | Case was closed, but the operation has not been fully transacted. |
closed | The case is closed. |
closedWithError | The case is closed, but there were errors releasing holds in the case. |
Relationship | Type | Description |
---|---|---|
custodians | microsoft.graph.security.ediscoveryCustodian collection | Returns a list of case ediscoveryCustodian objects for this case. |
noncustodialDataSources | microsoft.graph.security.ediscoveryNoncustodialDataSource collection | Returns a list of case ediscoveryNoncustodialDataSource objects for this case. |
operations | microsoft.graph.security.caseOperation collection | Returns a list of case caseOperation objects for this case. |
reviewSets | microsoft.graph.security.ediscoveryReviewSet collection | Returns a list of eDiscoveryReviewSet objects in the case. |
searches | microsoft.graph.security.ediscoverySearch collection | Returns a list of eDiscoverySearch objects associated with this case. |
settings | microsoft.graph.security.ediscoveryCaseSettings | Returns a list of eDIscoverySettings objects in the case. |
tags | microsoft.graph.security.ediscoveryReviewTag collection | Returns a list of ediscoveryReviewTag objects associated to this case. |
The following is a JSON representation of the resource.
{
"@odata.type": "#microsoft.graph.security.ediscoveryCase",
"id": "String (identifier)",
"displayName": "String",
"description": "String",
"createdDateTime": "String (timestamp)",
"lastModifiedBy": {
"@odata.type": "microsoft.graph.identitySet"
},
"lastModifiedDateTime": "String (timestamp)",
"status": "String",
"closedBy": {
"@odata.type": "microsoft.graph.identitySet"
},
"closedDateTime": "String (timestamp)",
"externalId": "String"
}