💡 Our Technical Review in summary
Summary
- Microsoft is extending Graph API support to tenants with Standard eDiscovery licenses, enabling the automation of eDiscovery workflows that were previously manual.
- The update introduces programmatic access to case management, legal holds, search queries, and data export operations.
- Public Preview begins in early September 2025, with General Availability (GA) scheduled for early November 2025.
- This feature is disabled by default and requires a Purview pay-as-you-go subscription to function.
Impact
- Automation Capabilities: IT Admins and developers can now programmatically create/update cases, manage legal holds, and execute searches across the Purview environment.
- Cost Management: While case and search management are included, Export operations via the API incur costs. Each tenant receives a 50GB monthly free tier; usage exceeding this is billed at $10 per GB.
- Data Sovereignty: Exporting data via API allows for integration with third-party downstream systems. Admins must ensure these external systems meet their organization’s compliance and data storage policies.
- Security and Access: Access to these APIs is managed through Microsoft Entra ID. Scoping can be restricted using specific group memberships and Role-Based Access Control (RBAC) to prevent unauthorized data access.
Action Required
- Enable Billing: To use these APIs, admins must first set up a Microsoft Purview pay-as-you-go subscription within the Azure portal/Purview settings.
- Configure Permissions: Review and update Entra ID app registrations and permissions. Ensure that only authorized service principals or user accounts have the necessary scopes to interact with eDiscovery data.
- Update Workflows: Evaluate current manual eDiscovery processes to identify opportunities for automation using the Microsoft Graph beta/v1.0 endpoints.
- Monitor Usage: Establish a process to monitor API export volumes to avoid unexpected costs beyond the 50GB monthly free allowance.
- Review Documentation: Consult the “Use the Microsoft Purview eDiscovery API in Microsoft Graph” technical guide to understand the specific JSON schemas and request structures for case and hold management.
Microsoft Official Update
Service: N/A
Category: stayInformed
Severity: normal
Introduction
We’re introducing Microsoft Graph APIs for tenants with Standard eDiscovery licenses, enabling automation and integration of eDiscovery workflows. These APIs support case management, search, hold, and export operations, offering a secure and consistent experience aligned with the Purview portal.
This message is associated with Microsoft 365 Roadmap ID 500869.
When this will happen
- Public Preview: Rolling out early September 2025; expected completion by mid-September 2025.
- General Availability (Worldwide): Rolling out early November 2025; expected completion by mid-November 2025.
How this affects your organization
If your organization uses a Standard eDiscovery license, you can now automate eDiscovery workflows using Graph APIs. These APIs replicate the portal experience and include:
- Case management: Create, Get, List, Update, Close, Reopen, Delete
- Search management: Create, List, Get, Update, Delete, Estimate Statistics
- Hold management: List, Create, Get, Update, Delete
- Data source management: Add, List
- Export: Export results, Export report only
Export operations via API are subject to billing. Each tenant receives 50GB/month free, with additional usage billed at $10/GB.
This feature is off by default and requires a Purview pay-as-you-go subscription.
What you can do to prepare
Subscribe to Purview pay-as-you-go billing to enable API usage.
Learn more:
- Use the Microsoft Purview eDiscovery API in Microsoft Graph (beta)
- Billing in eDiscovery | Microsoft Learn
Compliance considerations
|
Compliance Area |
Explanation |
|---|---|
| New customer data storage | Exported data via API may be stored in downstream systems integrated by the customer. Microsoft does not cache or store this data beyond the export operation. |
| Changes to existing data processing | Enables automated access and export of eDiscovery data, which may alter how customer data is accessed and transferred. |
| Modifies eDiscovery or Content Search | Introduces API-based access to eDiscovery case, search, and export operations, expanding automation capabilities. |
| Admin compliance monitoring/reporting | Admins can now monitor and report on eDiscovery activities via Graph API, enhancing audit and compliance workflows. |
| Integration with 3rd party software | APIs are designed for integration with downstream systems, allowing third-party tools to interact with eDiscovery data. |
| Admin control via Entra ID | Access to APIs can be scoped using Entra ID group membership and role-based access control. |
