Created by Claude - please verify

eDiscovery - Microsoft Purview eDiscovery cases and their legal holds from Microsoft Graph.

Required Microsoft Graph permissions

eDiscovery.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Purview eDiscovery (Premium) - Microsoft 365 E5 or E5 eDiscovery & Audit add-on.

Endpoints: GET /v1.0/security/cases/ediscoveryCases · GET /v1.0/security/cases/ediscoveryCases/{id}/legalHolds

Idle days are measured from the case's last modification. Do not release a hold without legal sign-off.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Open eDiscovery Cases & Legal Holds

Legal holds keep mailboxes, OneDrives and sites - including data of people who left long ago - until someone releases them. Open cases with active holds that nobody has touched for six months or more are listed first: either the matter is still live, or the hold is keeping data (and licences) for no reason.

There are no eDiscovery cases.