MC515536Microsoft Purview | Data Lifecycle Management and Records Management – Microsoft Graph APIs for extensibility

Updated March 27, 2024: We have updated the rollout timeline below. Thank you for your patience.

As a part of our extensibility vision and first release to Microsoft Graph, we are introducing three new APIs for retention labels, events, and event types in the Microsoft Graph beta environment. These APIs will enable you to customize and extend on what we have built in the product so far.

These APIs can be used by compliance admins and developers to manage retention labels in Data Lifecycle and Records Management solutions.  

This message is associated with Microsoft 365 Roadmap ID 88276

When this will happen:

Rollout will begin in late March 2023 (previously late February) and is expected to be complete by late April 2024 (previously mid-March).

How this will affect your organization:

If your organization needs to automate any operation related to retention labels or events, we recommend you achieve this by using the new Graph APIs instead of using PowerShell cmdlets. With Graph, we use REST APIs that support better security, extensibility, and app authentication features.

The three APIs are available under the security node and the endpoints to access them are as follows:  

Entity name	Endpoints	Solution
Labels	security/labels/retentionLabels	Data Lifecycle, Records Management
Events	security/triggers/retentionEvents	Records Management
Event types	security/triggerTypes/retentionEventTypes	Records Management

What you need to do to prepare:

Permissions

Currently, these APIs are supported through delegated permissions only, which are managed through the Graph interface. We are introducing two new permissions which you will need to access these APIs:

• recordsmanagement.read.all
  
• recordsmanagement.readwrite.all 
  

Licensing

Access to Data Lifecycle Management and Records Management features varies based on your Microsoft 365 license level. See Microsoft 365 guidance for security & compliance - Service Descriptions for licensing requirement details. 

Get started with Data Lifecycle Management and Records Management in the Microsoft Purview compliance portal: 

• Microsoft Purview compliance portal for WW and GCC cloud environments 
  
• Microsoft Purview compliance portal for GCC-High cloud environments 
  
• Microsoft Purview compliance portal for DoD cloud environments 
  

Learn more: 

• Use the Microsoft Graph records management API 
  
• Create retention labels for exceptions 
  
• Start retention when an event occurs