Open eDiscovery Cases & Legal Holds
The question it answers: Which open eDiscovery cases keep legal holds active although nobody has touched them for months?
Legal holds keep mailboxes, OneDrives and sites - including data of people who left long ago - until someone releases them. Open cases with active holds that nobody has touched for six months or more are listed first: either the matter is still live, or the hold is keeping data (and licences) for no reason.
At a glance
Section titled “At a glance”| Where in the app | Tenant › eDiscovery Cases & Holds |
| Workload | Compliance |
| Kind | Table |
| Data | Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once. |
| Licence | Microsoft Purview eDiscovery (Premium) - Microsoft 365 E5 or E5 eDiscovery & Audit add-on. |
| Report id (API and MCP) | tenant.compliance.ediscovery-cases |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| Case | DisplayName | Text |
| Status | Status | Status |
| Idle days | IdleDays | Text |
| Holds (active / all) | EnabledHolds | Text |
| Last modified | LastModified | Date |
| Modified by | LastModifiedBy | Text |
| Created | Created | Date |
| Created by | CreatedBy | Text |
| External id | ExternalId | Text |
Filters
Section titled “Filters”| Filter | Key (API) | On when the page opens |
|---|---|---|
| Only open cases | open | Yes |
What it needs
Section titled “What it needs”Licence: Microsoft Purview eDiscovery (Premium) - Microsoft 365 E5 or E5 eDiscovery & Audit add-on.
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
eDiscovery.Read.All | Microsoft Graph | Read all eDiscovery objects |
Data sources it reads
GET /v1.0/security/cases/ediscoveryCasesGET /v1.0/security/cases/ediscoveryCases/{id}/legalHolds
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/tenant.compliance.ediscovery-cases?size=100GET /ir-api/v1/reports/tenant.compliance.ediscovery-cases?filter=openAn AI assistant reads it with the MCP tool get_report and the id tenant.compliance.ediscovery-cases. The client needs the Read grant for Compliance. See Using the API.