Microsoft Graph security.casesRoot API

openapi: 3.1.0
info:
  title: Microsoft Graph Admin Admin.admin security.casesRoot API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: security.casesRoot
  x-ms-docs-toc-type: page
paths:
  /security/cases:
    description: Provides operations to manage the cases property of the microsoft.graph.security entity.
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Get cases from security
      operationId: security.GetCases
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Update the navigation property cases in security
      operationId: security.UpdateCases
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.casesRoot'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Delete navigation property cases for security
      operationId: security.DeleteCases
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /security/cases/ediscoveryCases:
    description: Provides operations to manage the ediscoveryCases property of the microsoft.graph.security.casesRoot entity.
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph List ediscoveryCases
      description: Get a list of the ediscoveryCase objects and their properties.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-casesroot-list-ediscoverycases?view=graph-rest-1.0
      operationId: security.cases.ListEdiscoveryCases
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.security.ediscoveryCaseCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Create ediscoveryCase
      description: Create a new ediscoveryCase object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-casesroot-post-ediscoverycases?view=graph-rest-1.0
      operationId: security.cases.CreateEdiscoveryCases
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /security/cases/ediscoveryCases/{ediscoveryCase-id}:
    description: Provides operations to manage the ediscoveryCases property of the microsoft.graph.security.casesRoot entity.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Get ediscoveryCase
      description: Read the properties and relationships of an ediscoveryCase object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-get?view=graph-rest-1.0
      operationId: security.cases.GetEdiscoveryCases
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Update ediscoveryCase
      description: Update the properties of an ediscoveryCase object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-update?view=graph-rest-1.0
      operationId: security.cases.UpdateEdiscoveryCases
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCase'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Delete ediscoveryCase
      description: Delete an ediscoveryCase object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-casesroot-delete-ediscoverycases?view=graph-rest-1.0
      operationId: security.cases.DeleteEdiscoveryCases
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians:
    description: Provides operations to manage the custodians property of the microsoft.graph.security.ediscoveryCase entity.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph List ediscoveryCustodian
      description: Get a list of the custodian objects and their properties.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-list-custodians?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.ListCustodians
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.security.ediscoveryCustodianCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Create custodians
      description: "Create a new ediscoveryCustodian object.\r\nAfter the custodian object is created, you will need to create the custodian's userSource to reference their mailbox and OneDrive for Business site."
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycase-post-custodians?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.CreateCustodians
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCustodian'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCustodian'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}:
    description: Provides operations to manage the custodians property of the microsoft.graph.security.ediscoveryCase entity.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Get ediscoveryCustodian
      description: Read the properties and relationships of an ediscoveryCustodian object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-get?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.GetCustodians
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCustodian'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Update the navigation property custodians in security
      operationId: security.cases.ediscoveryCases.UpdateCustodians
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCustodian'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryCustodian'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Delete navigation property custodians for security
      operationId: security.cases.ediscoveryCases.DeleteCustodians
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/lastIndexOperation:
    description: Provides operations to manage the lastIndexOperation property of the microsoft.graph.security.ediscoveryCustodian entity.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph List lastIndexOperation
      description: Get a list of the ediscoveryIndexOperations associated with an ediscoveryCustodian.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-list-lastindexoperation?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.custodians.GetLastIndexOperation
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.ediscoveryIndexOperation'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/microsoft.graph.security.activate:
    description: Provides operations to call the activate method.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    x-ms-docs-grouped-path:
    - /security/identities/sensorCandidates/microsoft.graph.security.activate
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Invoke action activate
      description: Activate a custodian that has been released from a case to make them part of the case again. For details, see Manage custodians in an eDiscovery (Premium) case.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-activate?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.ediscoveryCase.custodians.ediscoveryCustodian.activate
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/microsoft.graph.security.applyHold:
    description: Provides operations to call the applyHold method.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    x-ms-docs-grouped-path:
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/microsoft.graph.security.applyHold
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/noncustodialDataSources/{ediscoveryNoncustodialDataSource-id}/microsoft.graph.security.applyHold
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/noncustodialDataSources/microsoft.graph.security.applyHold
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Invoke action applyHold
      description: Start the process of applying hold on eDiscovery custodians. After the operation is created, you can use Get ediscoveryCustodian to retrieve the status of an ediscoveryCustodian.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-applyhold?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.ediscoveryCase.custodians.ediscoveryCustodian.applyHold
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/microsoft.graph.security.release:
    description: Provides operations to call the release method.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    x-ms-docs-grouped-path:
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/noncustodialDataSources/{ediscoveryNoncustodialDataSource-id}/microsoft.graph.security.release
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Invoke action release
      description: Release a custodian from a case. For details, see Release a custodian from a case.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-release?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.ediscoveryCase.custodians.ediscoveryCustodian.release
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  ? /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/microsoft.graph.security.removeHold
  : description: Provides operations to call the removeHold method.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    x-ms-docs-grouped-path:
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/microsoft.graph.security.removeHold
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/noncustodialDataSources/{ediscoveryNoncustodialDataSource-id}/microsoft.graph.security.removeHold
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/noncustodialDataSources/microsoft.graph.security.removeHold
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Invoke action removeHold
      description: Start the process of removing hold from eDiscovery custodians. After the operation is created, you can get the status by retrieving the Location parameter from the response headers. The location provides a URL that will return an eDiscoveryHoldOperation object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-removehold?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.ediscoveryCase.custodians.ediscoveryCustodian.removeHold
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  ? /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/microsoft.graph.security.updateIndex
  : description: Provides operations to call the updateIndex method.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    x-ms-docs-grouped-path:
    - /security/cases/ediscoveryCases/{ediscoveryCase-id}/noncustodialDataSources/{ediscoveryNoncustodialDataSource-id}/microsoft.graph.security.updateIndex
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Invoke action updateIndex
      description: Trigger an indexOperation to make a custodian and associated sources searchable.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-updateindex?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.ediscoveryCase.custodians.ediscoveryCustodian.updateIndex
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/siteSources:
    description: Provides operations to manage the siteSources property of the microsoft.graph.security.ediscoveryCustodian entity.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph List siteSources
      description: Get a list of the siteSource objects associated with an ediscoveryCustodian.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-list-sitesources?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.custodians.ListSiteSources
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.security.siteSourceCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Create siteSource
      description: Create a new siteSource object associated with an eDiscovery custodian.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/security-ediscoverycustodian-post-sitesources?view=graph-rest-1.0
      operationId: security.cases.ediscoveryCases.custodians.CreateSiteSources
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.security.siteSource'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.siteSource'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /security/cases/ediscoveryCases/{ediscoveryCase-id}/custodians/{ediscoveryCustodian-id}/siteSources/{siteSource-id}:
    description: Provides operations to manage the siteSources property of the microsoft.graph.security.ediscoveryCustodian entity.
    parameters:
    - name: ediscoveryCase-id
      in: path
      description: The unique identifier of ediscoveryCase
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCase
    - name: ediscoveryCustodian-id
      in: path
      description: The unique identifier of ediscoveryCustodian
      required: true
      schema:
        type: string
      x-ms-docs-key-type: ediscoveryCustodian
    - name: siteSource-id
      in: path
      description: The unique identifier of siteSource
      required: true
      schema:
        type: string
      x-ms-docs-key-type: siteSource
    get:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Get siteSources from security
      description: Data source entity for SharePoint sites associated with the custodian.
      operationId: security.cases.ediscoveryCases.custodians.GetSiteSources
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.security.siteSource'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - security.casesRoot
      summary: Microsoft Graph Update the navigation property siteSources in security
      operationId: security.cases.ediscoveryCases.custodians.UpdateSiteSources
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.security.site

# --- truncated at 32 KB (1229 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-security-casesroot-api-openapi.yml