Edit

Share via


ediscoveryReviewSet: addToReviewSet

Namespace: microsoft.graph.security

Start the process of adding a collection from Microsoft 365 services to a review set. After the operation is created, you can get the status of the operation by retrieving the Location parameter from the response headers. The location provides a URL that returns an Add to review set operation.

This API is available in the following national cloud deployments.

Global service US Government L4 US Government L5 (DOD) China operated by 21Vianet

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

Permission type Least privileged permissions Higher privileged permissions
Delegated (work or school account) eDiscovery.Read.All eDiscovery.ReadWrite.All
Delegated (personal Microsoft account) Not supported. Not supported.
Application eDiscovery.Read.All eDiscovery.ReadWrite.All

HTTP request

POST /security/cases/ediscoveryCases/{eDiscoveryCaseId}/reviewSets/{eDiscoveryReviewSetId}/addToReviewSet

Request headers

Name Description
Authorization Bearer {token}. Required. Learn more about authentication and authorization.
Content-Type application/json. Required.

Request body

In the request body, supply a JSON representation of the parameters.

The following table shows the parameters that can be used with this action.

Parameter Type Description
additionalDataOptions microsoft.graph.security.additionalDataOptions The options to add items to the review set. The possible values are: allVersions, linkedFiles, unknownFutureValue, advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder. The locationsWithoutHits and advancedIndexing values are only considered if itemsToIncude is set to partiallyIndexed.
cloudAttachmentVersion microsoft.graph.security.cloudAttachmentVersion Specifies the number of cloud attachment versions to collect. The possible values are: latest, recent10, recent100, all, unknownFutureValue. The default value is latest.
documentVersion microsoft.graph.security.documentVersion Specifies the number of document versions to collect. The possible values are: latest, recent10, recent100, all, unknownFutureValue. The default value is latest.
itemsToInclude microsoft.graph.security.itemsToInclude The items to include in the review set. The possible values are: searchHits, partiallyIndexed, unknownFutureValue.
search microsoft.graph.security.ediscoverySearch The ID of the eDiscovery search you'd like to add to the review set.

Response

If successful, this action returns a 202 Accepted response code.

Examples

Request

The following example shows a request.

POST https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/58399dff-cebe-478f-b1af-d3227f1fd645/reviewSets/63ef0fd7-0db2-45eb-a9d7-7d75c8239873/addToReviewSet
Content-Type: application/json

{
  "search": {
      "id": "c17e91d6-6bc0-4ecb-b388-269ea3d4ffb7"
  },
  "additionalDataOptions": "linkedFiles",
  "cloudAttachmentVersion": "latest",
  "documentVersion": "recent10"
}

Response

The following example shows the response.

HTTP/1.1 202 Accepted