Create Noncustodial Data Source - BlinkOps Documentation

Create a new Noncustodial data source object.

Least privileged Microsoft Graph permission to access the action via application: eDiscovery.Read.All.
Higher privileged Microsoft Graph permission to access the action via application: eDiscovery.ReadWrite.All.

External DocumentationTo learn more, visit the Microsoft E-Discovery documentation.

Parameters

Parameter	Description
E-Discovery Case ID	The e-Discovery case ID. Can be obtained by using the `List Cases` action.
Email	Email address of a user’s mailbox.
Select Source	Select the Noncustodial source type to create. For `User Source`, select `microsoft.graph.security.userSource`. For `Site Source`, select `microsoft.graph.security.siteSource`.
Site Web URL	The URL of a site.

Example Output

{
	"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#security/cases/ediscoveryCases('b0073e4e-4184-41c6-9eb7-8c8cc3e2288b')/noncustodialDataSources/$entity",
	"status": "active",
	"holdStatus": "notApplied",
	"createdDateTime": "2022-05-23T03:15:08.5354451Z",
	"lastModifiedDateTime": "2022-05-23T03:15:08.5354451Z",
	"releasedDateTime": "0001-01-01T00:00:00Z",
	"id": "43373338343345303943344434423032",
	"displayName": "Design - top secret"
}

Workflow Library Example

Create Noncustodial Data Source with Microsoft E Discovery and Send Results Via Email

Preview this Workflow on desktop

Create E-Discovery Search Download From URL

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example