Microsoft Purview

Microsoft Purview Sensitivity Labels API

Operations for accessing tenant-level sensitivity labels

GitHub OpenAPI

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /security/dataSecurityAndGovernance/sensitivityLabels List sensitivity labels for the whole tenant · Microsoft Purview List tenant sensitivity labels #
Ask an LLM
“Which sensitivity labels exist across our entire tenant?”
“Can I count tenant-wide labels or filter them?”
Tell an agent
List all tenant-wide sensitivity labels.
Show tenant sensitivity labels matching {filter}.
GET /security/dataSecurityAndGovernance/sensitivityLabels/{sensitivityLabelId} Get a tenant-level sensitivity label · Microsoft Purview Get a tenant sensitivity label #
Ask an LLM
“Where can I read a sensitivity label's tenant-level definition?”
“What does one label look like at the data security and governance level?”
Tell an agent
Get tenant sensitivity label {label}.
Show the tenant-level definition of label {label}.
GET /security/informationProtection/sensitivityLabels List information protection sensitivity labels · Microsoft Purview List sensitivity labels #
Ask an LLM
“What sensitivity labels are available to the organization under information protection?”
“Can I sort and page through information protection labels?”
Tell an agent
List the organization's information protection sensitivity labels.
Show information protection labels ordered by {order}, skipping {skip}.
GET /security/informationProtection/sensitivityLabels/{sensitivityLabelId} Get an information protection sensitivity label · Microsoft Purview Get a sensitivity label #
Ask an LLM
“What are the settings of one information protection label?”
“Can I look up an information protection sensitivity label by ID?”
Tell an agent
Get information protection sensitivity label {label}.
Show the information protection details of label {label}.
GET /users/{userId}/security/informationProtection/sensitivityLabels List sensitivity labels available to a user · Microsoft Purview List sensitivity labels for user #
Ask an LLM
“Which sensitivity labels can a specific user apply?”
“Can I filter the labels available to one person?”
Tell an agent
List the sensitivity labels available to user {user}.
Show labels user {user} can apply matching {filter}.
GET /me/security/informationProtection/sensitivityLabels List my own sensitivity labels · Microsoft Purview List my sensitivity labels #
Ask an LLM
“Which sensitivity labels am I allowed to apply?”
“What labels does the signed-in account see?”
Tell an agent
List the sensitivity labels available to me.
Show my top {top} sensitivity labels.
POST /security/informationProtection/sensitivityLabels/microsoft.graph.security.evaluateApplication Work out which sensitivity label to apply · Microsoft Purview Evaluate sensitivity label application #
Ask an LLM
“Which sensitivity label should be applied to a document, and what actions follow?”
“What marking or protection actions come with applying a label?”
Tell an agent
Evaluate the sensitivity label to apply to content {content}.
Compute labeling actions for {content} with options {options}.
POST /security/informationProtection/sensitivityLabels/microsoft.graph.security.evaluateRemoval Work out how to remove a sensitivity label · Microsoft Purview Evaluate sensitivity label removal #
Ask an LLM
“What has to happen to strip a sensitivity label from a file?”
“Can I give a justification when downgrading a label?”
Tell an agent
Evaluate removing the sensitivity label from content {content}.
Compute label removal actions for {content} with justification {justification}.
POST /security/informationProtection/sensitivityLabels/microsoft.graph.security.evaluateClassificationResults Pick a label from classification results · Microsoft Purview Evaluate classification results #
Ask an LLM
“Can Purview recommend a label based on sensitive info types found in content?”
“Which label fits content given its classification results?”
Tell an agent
Evaluate classification results {results} for content {content}.
Choose a label for {content} using detected classifications {results}.
POST /drives/{driveId}/items/{driveItemId}/assignSensitivityLabel Apply a sensitivity label to a file · Microsoft Purview Assign sensitivity label to drive item #
Ask an LLM
“How do I label a SharePoint or OneDrive file as confidential?”
“Can I give a justification when assigning a label to a file?”
Tell an agent
Assign label {label} to item {item} in drive {drive}.
Label file {item} in drive {drive} as {label} with justification {justification}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/
📖
Authentication
https://learn.microsoft.com/en-us/purview/tutorial-using-rest-apis
📖
GettingStarted
https://learn.microsoft.com/en-us/purview/data-gov-api-create-assets
📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/scanning
📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/account
📖
Authentication
https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow
📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/datamap
📖
GettingStarted
https://learn.microsoft.com/en-us/purview/legacy/how-to-purview-custom-lineage-api-user-guide
📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/metadatapolicies
📖
GettingStarted
https://learn.microsoft.com/en-us/purview/legacy/tutorial-metadata-policy-collections-apis
📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/workflow
📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/unified-catalog-api-overview
📖
Authentication
https://learn.microsoft.com/en-us/purview/data-gov-api-rest-data-plane
📖
Documentation
https://learn.microsoft.com/en-us/rest/api/purview/unified-catalog-data-quality
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/security-ediscovery-apioverview?view=graph-rest-1.0
📖
Authentication
https://learn.microsoft.com/en-us/graph/security-ediscovery-appauthsetup
📖
GettingStarted
https://learn.microsoft.com/en-us/purview/edisc-ref-api-guide
📖
Documentation
https://learn.microsoft.com/en-us/graph/security-information-protection-overview
📖
Documentation
https://learn.microsoft.com/en-us/graph/security-datasecurityandgovernance-overview
📖
GettingStarted
https://learn.microsoft.com/en-us/purview/developer/use-the-api
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/security-recordsmanagement-overview?view=graph-rest-1.0

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/microsoft-purview/refs/heads/main/openapi/microsoft-purview-sensitivity-labels-api-openapi.yml

Other Resources

🔗
Pricing
https://azure.microsoft.com/en-us/pricing/details/purview/
🔗
Reference
https://learn.microsoft.com/en-us/purview/data-map-data-sources
🔗
Reference
https://learn.microsoft.com/en-us/purview/unified-catalog-data-quality
🔗
Reference
https://learn.microsoft.com/en-us/purview/sensitivity-labels
🔗
Reference
https://learn.microsoft.com/en-us/purview/developer/
🔗
Reference
https://learn.microsoft.com/en-us/graph/compliance-concept-overview

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/microsoft-purview:microsoft-purview-sensitivity-labels-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

microsoft-purview-sensitivity-labels-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Microsoft Purview Sensitivity Labels API
  version: v1.0
  license:
    name: Microsoft API License
    url: https://azure.microsoft.com/en-us/support/legal/
  description: 'Operations tagged Sensitivity Labels across 2 of this provider''s published API definitions: microsoft-purview-data-security-governance-openapi.yml, microsoft-purview-information-protection-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph v1.0 endpoint
security:
- oauth2: []
tags:
- name: Sensitivity Labels
  description: Operations for accessing tenant-level sensitivity labels
paths:
  /security/dataSecurityAndGovernance/sensitivityLabels:
    get:
      operationId: listTenantSensitivityLabels
      summary: Microsoft Purview List tenant sensitivity labels
      description: List the sensitivity labels available for the entire tenant. When using application permissions, returns all labels for the tenant by default.
      tags:
      - Sensitivity Labels
      parameters:
      - name: $top
        in: query
        schema:
          type: integer
          format: int32
      - name: $filter
        in: query
        schema:
          type: string
      - name: $select
        in: query
        schema:
          type: string
      - name: $count
        in: query
        schema:
          type: boolean
      responses:
        '200':
          description: Sensitivity labels listed successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  value:
                    type: array
                    items:
                      $ref: '#/components/schemas/SensitivityLabel'
                  '@odata.nextLink':
                    type: string
                  '@odata.count':
                    type: integer
                    format: int64
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /security/dataSecurityAndGovernance/sensitivityLabels/{sensitivityLabelId}:
    get:
      operationId: getTenantSensitivityLabel
      summary: Microsoft Purview Get a tenant sensitivity label
      description: Get a sensitivity label by its identifier at the tenant level.
      tags:
      - Sensitivity Labels
      parameters:
      - name: sensitivityLabelId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Sensitivity label retrieved successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SensitivityLabel'
        '401':
          description: Unauthorized
        '404':
          description: Not found
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /security/informationProtection/sensitivityLabels:
    get:
      operationId: listSensitivityLabels
      summary: Microsoft Purview List sensitivity labels
      description: Get a list of sensitivity labels available to the signed-in user or the organization.
      tags:
      - Sensitivity Labels
      parameters:
      - name: $top
        in: query
        schema:
          type: integer
          format: int32
      - name: $skip
        in: query
        schema:
          type: integer
          format: int32
      - name: $filter
        in: query
        schema:
          type: string
      - name: $select
        in: query
        schema:
          type: string
      - name: $orderby
        in: query
        schema:
          type: string
      - name: $count
        in: query
        schema:
          type: boolean
      responses:
        '200':
          description: Sensitivity labels listed successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  value:
                    type: array
                    items:
                      $ref: '#/components/schemas/SensitivityLabel_2'
                  '@odata.nextLink':
                    type: string
                  '@odata.count':
                    type: integer
                    format: int64
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /security/informationProtection/sensitivityLabels/{sensitivityLabelId}:
    get:
      operationId: getSensitivityLabel
      summary: Microsoft Purview Get a sensitivity label
      description: Get a sensitivity label by its identifier.
      tags:
      - Sensitivity Labels
      parameters:
      - name: sensitivityLabelId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Sensitivity label retrieved successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SensitivityLabel_2'
        '401':
          description: Unauthorized
        '404':
          description: Sensitivity label not found
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /users/{userId}/security/informationProtection/sensitivityLabels:
    get:
      operationId: listUserSensitivityLabels
      summary: Microsoft Purview List sensitivity labels for user
      description: Get a list of sensitivity labels available to a specific user.
      tags:
      - Sensitivity Labels
      parameters:
      - name: userId
        in: path
        required: true
        schema:
          type: string
      - name: $top
        in: query
        schema:
          type: integer
          format: int32
      - name: $filter
        in: query
        schema:
          type: string
      responses:
        '200':
          description: User sensitivity labels listed successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  value:
                    type: array
                    items:
                      $ref: '#/components/schemas/SensitivityLabel_2'
        '401':
          description: Unauthorized
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /me/security/informationProtection/sensitivityLabels:
    get:
      operationId: listMySensitivityLabels
      summary: Microsoft Purview List my sensitivity labels
      description: Get a list of sensitivity labels available to the signed-in user.
      tags:
      - Sensitivity Labels
      parameters:
      - name: $top
        in: query
        schema:
          type: integer
          format: int32
      - name: $filter
        in: query
        schema:
          type: string
      responses:
        '200':
          description: Sensitivity labels listed successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  value:
                    type: array
                    items:
                      $ref: '#/components/schemas/SensitivityLabel_2'
        '401':
          description: Unauthorized
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /security/informationProtection/sensitivityLabels/microsoft.graph.security.evaluateApplication:
    post:
      operationId: evaluateApplication
      summary: Microsoft Purview Evaluate sensitivity label application
      description: Compute the sensitivity label that should be applied and return the set of actions that must be taken to correctly label the information.
      tags:
      - Sensitivity Labels
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                contentInfo:
                  $ref: '#/components/schemas/ContentInfo'
                labelingOptions:
                  $ref: '#/components/schemas/LabelingOptions'
      responses:
        '200':
          description: Evaluation result
          content:
            application/json:
              schema:
                type: object
                properties:
                  value:
                    type: array
                    items:
                      $ref: '#/components/schemas/InformationProtectionAction'
        '401':
          description: Unauthorized
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /security/informationProtection/sensitivityLabels/microsoft.graph.security.evaluateRemoval:
    post:
      operationId: evaluateRemoval
      summary: Microsoft Purview Evaluate sensitivity label removal
      description: Indicate to the consuming application what actions should be taken to remove the label information.
      tags:
      - Sensitivity Labels
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                contentInfo:
                  $ref: '#/components/schemas/ContentInfo'
                downgradeJustification:
                  $ref: '#/components/schemas/DowngradeJustification'
      responses:
        '200':
          description: Removal evaluation result
          content:
            application/json:
              schema:
                type: object
                properties:
                  value:
                    type: array
                    items:
                      $ref: '#/components/schemas/InformationProtectionAction'
        '401':
          description: Unauthorized
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /security/informationProtection/sensitivityLabels/microsoft.graph.security.evaluateClassificationResults:
    post:
      operationId: evaluateClassificationResults
      summary: Microsoft Purview Evaluate classification results
      description: Using classification results, compute the sensitivity label that should be applied and the set of actions that must be taken.
      tags:
      - Sensitivity Labels
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                contentInfo:
                  $ref: '#/components/schemas/ContentInfo'
                classificationResults:
                  type: array
                  items:
                    $ref: '#/components/schemas/ClassificationResult'
      responses:
        '200':
          description: Classification evaluation result
          content:
            application/json:
              schema:
                type: object
                properties:
                  value:
                    type: array
                    items:
                      $ref: '#/components/schemas/InformationProtectionAction'
        '401':
          description: Unauthorized
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
  /drives/{driveId}/items/{driveItemId}/assignSensitivityLabel:
    post:
      operationId: assignSensitivityLabelToDriveItem
      summary: Microsoft Purview Assign sensitivity label to drive item
      description: Asynchronously assign a sensitivity label to a file in SharePoint or OneDrive.
      tags:
      - Sensitivity Labels
      parameters:
      - name: driveId
        in: path
        required: true
        schema:
          type: string
      - name: driveItemId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                sensitivityLabelId:
                  type: string
                assignmentMethod:
                  type: string
                  enum:
                  - standard
                  - privileged
                  - auto
                justificationText:
                  type: string
      responses:
        '202':
          description: Label assignment accepted
          headers:
            Location:
              description: URL for checking the status of the operation
              schema:
                type: string
        '401':
          description: Unauthorized
    servers:
    - url: https://graph.microsoft.com/v1.0
      description: Microsoft Graph v1.0 endpoint
components:
  schemas:
    SensitivityLabel:
      type: object
      properties:
        id:
          type: string
          readOnly: true
        name:
          type: string
        description:
          type: string
        color:
          type: string
        sensitivity:
          type: integer
          format: int32
        tooltip:
          type: string
        isActive:
          type: boolean
        isAppliable:
          type: boolean
        contentFormats:
          type: array
          items:
            type: string
        hasProtection:
          type: boolean
    ClassificationResult:
      type: object
      properties:
        sensitiveTypeId:
          type: string
        confidenceLevel:
          type: integer
          format: int32
        count:
          type: integer
          format: int32
    SensitivityLabel_2:
      type: object
      description: A sensitivity label for information protection
      properties:
        id:
          type: string
          readOnly: true
        name:
          type: string
        description:
          type: string
        color:
          type: string
        sensitivity:
          type: integer
          format: int32
        tooltip:
          type: string
        isActive:
          type: boolean
        isAppliable:
          type: boolean
        contentFormats:
          type: array
          items:
            type: string
        hasProtection:
          type: boolean
        parent:
          type: object
          properties:
            id:
              type: string
            name:
              type: string
    LabelingOptions:
      type: object
      properties:
        assignmentMethod:
          type: string
          enum:
          - standard
          - privileged
          - auto
        labelId:
          type: string
          format: uuid
        downgradeJustification:
          $ref: '#/components/schemas/DowngradeJustification'
    ContentInfo:
      type: object
      properties:
        contentFormat:
          type: string
        identifier:
          type: string
        state:
          type: string
          enum:
          - rest
          - motion
          - use
        metadata:
          type: array
          items:
            $ref: '#/components/schemas/KeyValuePair'
    DowngradeJustification:
      type: object
      properties:
        isDowngradeJustified:
          type: boolean
        justificationMessage:
          type: string
    InformationProtectionAction:
      type: object
      properties:
        '@odata.type':
          type: string
    KeyValuePair:
      type: object
      properties:
        name:
          type: string
        value:
          type: string
  securitySchemes:
    oauth2:
      type: oauth2
      description: Microsoft Identity Platform OAuth2
      flows:
        clientCredentials:
          tokenUrl: https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token
          scopes:
            InformationProtectionPolicy.Read.All: Read all information protection policies
x-refined-from:
- microsoft-purview-data-security-governance-openapi.yml
- microsoft-purview-information-protection-openapi.yml