A unified data governance solution that helps manage, protect, and discover data across your organization
Hi @Gabrielle Lee , Hope you are doing well.
Hi Gabrielle,
Partly yes — two of those UI settings do have API equivalents, they're just not request-body parameters. Here's the mapping.
"Select items to include in your export"
| UI option | API equivalent |
|---|---|
| All documents in the review set | POST /security/cases/ediscoveryCases/{caseId}/reviewSets/{reviewSetId}/export — this is the default scope of the call you're already making |
| -------- | -------- |
| All documents in the review set | POST /security/cases/ediscoveryCases/{caseId}/reviewSets/{reviewSetId}/export — this is the default scope of the call you're already making |
| All filtered documents | Create a review set query, then POST .../reviewSets/{reviewSetId}/queries/{queryId}/export |
| Selected documents only | No equivalent — it depends on an interactive grid selection with no API analogue. Express the same subset as a review set query instead. |
The scope isn't a parameter; it's determined by which endpoint you POST to. The ediscoveryExportOperation resource confirms this with its reviewSetQuery relationship: "The review set query that is used to filter the documents for export."
"Export item report only" vs "Export items with item report"
This one is controllable, via exportOptions. From the request body reference:
"The summary and load files are always included. If
originalFilesisn't selected, only thetagsmember is considered."
So:
- Report only → omit
originalFiles, e.g."exportOptions": "tags" - Items with report → include it, e.g.
"exportOptions": "originalFiles,tags"
The summary and item report come along either way. The service tracks these as distinct operations internally too — caseAction includes both exportReport and exportResult.
"Export type" — browser download vs your own Azure Storage
Bring-your-own-storage was previously available as azureBlobContainer + azureBlobToken. In the current microsoft.graph.security beta API both are marked deprecated and have "stopped returning data," and they aren't in the v1.0 request body at all. They only still function in the legacy microsoft.graph.ediscovery beta namespace, which carries its own deprecation warning — so don't build on it.
The supported path now is Microsoft-managed storage plus a download URL:
-
POST .../export→202 Acceptedwith aLocationheader pointing at the export operation -
GETthat location untilstatusissucceeded - Read
exportFileMetadata, which gives youdownloadUrl,fileName, andsize
Two gotchas while you're building this
-
exportStructure: "directory"is deprecated — retained in v1.0 for backward compatibility only. Usepstormsg. Same forfileInfoinexportOptions, which has stopped returning data. -
splitSource,includeFolderAndPath,friendlyName, andcondensePathsare evolvable-enum members. SendPrefer: include-unknown-enum-membersor the service won't return them to you.
One operational deadline: export processes are retained for the life of the case, but you must download the content within 30 days of the export completing. Worth building into your automation. Also note an export that runs more than seven days without completing is cancelled automatically — batch large review sets.
References
- ediscoveryReviewSet: export (v1.0)
- ediscoveryReviewSetQuery: export (beta)
- ediscoveryExportOperation resource type — full
exportOptions/exportFileStructuremember tables andexportFileMetadata - Export items from a review set in eDiscovery — the UI options being mapped
If you tell me which subset you're trying to reach, I can help shape the review set query.
Kind Regards,
Microsoft Support Team.