title	ediscoveryReviewSet: addToReviewSet
description	Start the process of adding a collection from Microsoft 365 services to a review set.
author	SeunginLyu
ms.localizationpriority	medium
ms.subservice	ediscovery
doc_type	apiPageType
ms.date	06/10/2024

ediscoveryReviewSet: addToReviewSet

Namespace: microsoft.graph.security

Start the process of adding a collection from Microsoft 365 services to a review set. After the operation is created, you can get the status of the operation by retrieving the Location parameter from the response headers. The location provides a URL that returns an Add to review set operation.

[!INCLUDE national-cloud-support]

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

[!INCLUDE permissions-table]

[!INCLUDE rbac-ediscovery-reviewset]

HTTP request

POST /security/cases/ediscoveryCases/{eDiscoveryCaseId}/reviewSets/{eDiscoveryReviewSetId}/addToReviewSet

Request headers

Name	Description
Authorization	Bearer {token}. Required. Learn more about authentication and authorization.
Content-Type	application/json. Required.

Request body

In the request body, supply a JSON representation of the parameters.

The following table shows the parameters that can be used with this action.

Parameter	Type	Description
additionalDataOptions	microsoft.graph.security.additionalDataOptions	The options to add items to the review set. The possible values are: `allVersions`, `linkedFiles`, `unknownFutureValue`, `advancedIndexing`, `listAttachments`, `htmlTranscripts`, `messageConversationExpansion`, `locationsWithoutHits`, `allItemsInFolder`. Use the `Prefer: include-unknown-enum-members` request header to get the following values from this evolvable enum: `advancedIndexing`, `listAttachments`, `htmlTranscripts`, `messageConversationExpansion`, `locationsWithoutHits`, `allItemsInFolder`. The `locationsWithoutHits` and `advancedIndexing` values are only considered if itemsToIncude is set to `partiallyIndexed`.
cloudAttachmentVersion	microsoft.graph.security.cloudAttachmentVersion	Specifies the number of cloud attachment versions to collect. The possible values are: `latest`, `recent10`, `recent100`, `all`, `unknownFutureValue`. The default value is `latest`.
documentVersion	microsoft.graph.security.documentVersion	Specifies the number of document versions to collect. The possible values are: `latest`, `recent10`, `recent100`, `all`, `unknownFutureValue`. The default value is `latest`.
itemsToInclude	microsoft.graph.security.itemsToInclude	The items to include in the review set. The possible values are: `searchHits`, `partiallyIndexed`, `unknownFutureValue`.
search	microsoft.graph.security.ediscoverySearch	The ID of the eDiscovery search you'd like to add to the review set.

Response

If successful, this action returns a 202 Accepted response code.

Examples

Request

The following example shows a request.

HTTP

POST https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/58399dff-cebe-478f-b1af-d3227f1fd645/reviewSets/63ef0fd7-0db2-45eb-a9d7-7d75c8239873/addToReviewSet
Content-Type: application/json

{
  "search": {
      "id": "c17e91d6-6bc0-4ecb-b388-269ea3d4ffb7"
  },
  "additionalDataOptions": "linkedFiles",
  "cloudAttachmentVersion": "latest",
  "documentVersion": "recent10"
}