MC515536 - Microsoft Purview | Data Lifecycle Management and Records Management – Microsoft Graph APIs for extensibility

Service

Microsoft 365 suite

Last Updated

Mar 27, 2024

Published Feb 15, 2023

Tag

Updated message
Feature update
Admin impact

Platforms

Web

Summary

Microsoft is introducing three new APIs for retention labels, events, and event types in the Microsoft Graph beta environment. These APIs can be used by compliance admins and developers to manage retention labels in Data Lifecycle and Records Management solutions. Rollout will begin in late March 2023 and is expected to be complete by late April 2024. Organizations are recommended to use the new Graph APIs instead of using PowerShell cmdlets. Access to Data Lifecycle Management and Records Management features varies based on your Microsoft 365 license level.

More information

Updated March 27, 2024: We have updated the rollout timeline below. Thank you for your patience.

As a part of our extensibility vision and first release to Microsoft Graph, we are introducing three new APIs for retention labels, events, and event types in the Microsoft Graph beta environment. These APIs will enable you to customize and extend on what we have built in the product so far.

These APIs can be used by compliance admins and developers to manage retention labels in Data Lifecycle and Records Management solutions.  

This message is associated with Microsoft 365 Roadmap ID 88276

When this will happen:

Rollout will begin in late March 2023 (previously late February) and is expected to be complete by late April 2024 (previously mid-March).

How this will affect your organization:

If your organization needs to automate any operation related to retention labels or events, we recommend you achieve this by using the new Graph APIs instead of using PowerShell cmdlets. With Graph, we use REST APIs that support better security, extensibility, and app authentication features.

The three APIs are available under the security node and the endpoints to access them are as follows:  

Entity nameEndpointsSolution
Labelssecurity/labels/retentionLabelsData Lifecycle, Records Management
Eventssecurity/triggers/retentionEventsRecords Management
Event typessecurity/triggerTypes/retentionEventTypesRecords Management


What you need to do to prepare:

Permissions

Currently, these APIs are supported through delegated permissions only, which are managed through the Graph interface. We are introducing two new permissions which you will need to access these APIs:

  • recordsmanagement.read.all
  • recordsmanagement.readwrite.all 

Licensing

Access to Data Lifecycle Management and Records Management features varies based on your Microsoft 365 license level. See Microsoft 365 guidance for security & compliance - Service Descriptions for licensing requirement details. 

Get started with Data Lifecycle Management and Records Management in the Microsoft Purview compliance portal: 

Learn more: