Data Inventory

The following table(s) contains detailed examples of the metadata fields available from the Microsoft Teams API endpoints Worklytics leverages. In order to pseudonymize and sanitize PII and other potentially sensitive data, Worklytics provides access to a Data Loss Prevention (DLP) Proxy, which allows customers to pre-filter metadata, within customer infrastructure, before it is sent to Worklytics for processing.

These are the fields Worklytics recommends but the Worklytics DLP Proxy provides full field-level control and therefore any field may be removed or sanitized.

Field descriptions are taken from third party API documentation, these are maintained on a best effort basis and Worklytics can not guarantee their indefinite accuracy. Please refer to the source API site for the most up-to-date documentation.

How to read the "DLP Proxy" column in the table(s):

🔴 This field is completely redacted by the DLP Proxy

⭕ This field is transformed, usually partially redacted

🟡 This field is "pseudonymized" by the DLP Proxy: only a SHA256 hash of its value is sent to Worklytics; never the value itself

To see only the fully sanitized version of this document, click here.

Worklytics requires access to the following API primary endpoints:

Model	Description	API docs
Call	Used to retrieve a single existing call Endpoints: /v1.0/communications/calls/{callId}	🔗↗️
CallRecord	Used to retrieve a collection of call records (or a single call record) Endpoints: /v1.0/communications/callRecords /v1.0/communications/callRecords/{callRecordId}	🔗↗️
Channel	Used to retrieve a collection of existing channels for a given team Endpoints: /v1.0/teams/{teamId}/allChannels	🔗↗️
Chat	Used to retrieve a collection of existing chats Endpoints: /v1.0/users/{userId}/chats	🔗↗️
ChatMessage	Used to retrieve a collection of existing chat messages Endpoints: /v1.0/teams/{teamId}/channels/{channelId}/messages /v1.0/teams/{teamId}/channels/{channelId}/messages/delta /v1.0/chats/{chatId}/messages	🔗↗️
DirectRoutingCall	Used to retrieve a collection of direct routing call records Endpoints: /v1.0/communications/callRecords/getDirectRoutingCalls	🔗↗️
MeetingAttendanceReport	Used to retrieve a collection of meeting attendance reports (or a single one) Endpoints: /v1.0/users/{userId}/onlineMeetings/{meetingId}/attendanceReports /v1.0/users/{userId}/onlineMeetings/{meetingId}/attendanceReports/{reportId}	🔗↗️
OnlineMeeting	Used to retrieve a collection of online meetings Endpoints: /v1.0/users/{userId}/onlineMeetings	🔗↗️
PSTNCall	Used to retrieve a collection of PSTN call records Endpoints: /v1.0/communications/callRecords/getPstnCalls	🔗↗️
Team	Used to retrieve a collection of existing teams Endpoints: /v1.0/teams	🔗↗️

Call

API docs: https://learn.microsoft.com/en-us/graph/api/resources/call?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🔴 Redacted	@odata.context	N/A
🔴 Redacted	@odata.type	N/A
🟢 Allowed	callChainId	String
🟢 Allowed	chatInfo	ChatInfo
🟢 Allowed	chatInfo.messageId	String
🟢 Allowed	chatInfo.replyChainMessageId	String
🟢 Allowed	chatInfo.threadId	String
🟢 Allowed	direction	String
🟢 Allowed	id	String
🔴 Redacted	languageId	N/A
🔴 Redacted	mediaConfig	N/A
🟢 Allowed	mediaState	String
🟡 Pseudonymized	meetingInfo	MeetingInfo
🟢 Allowed	meetingInfo.allowConversationWithoutHost	Boolean
🟡 Pseudonymized	meetingInfo.organizer	IdentitySet
🟡 Pseudonymized	meetingInfo.organizer.application	Identity
🔴 Redacted	meetingInfo.organizer.application.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.application.id	String
🟢 Allowed	meetingInfo.organizer.application.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.applicationInstance	Identity
🔴 Redacted	meetingInfo.organizer.applicationInstance.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.applicationInstance.id	String
🟢 Allowed	meetingInfo.organizer.applicationInstance.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.conversation	Identity
🔴 Redacted	meetingInfo.organizer.conversation.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.conversation.id	String
🟢 Allowed	meetingInfo.organizer.conversation.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.conversationIdentityType	Identity
🔴 Redacted	meetingInfo.organizer.conversationIdentityType.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.conversationIdentityType.id	String
🟢 Allowed	meetingInfo.organizer.conversationIdentityType.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.device	Identity
🔴 Redacted	meetingInfo.organizer.device.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.device.id	String
🟢 Allowed	meetingInfo.organizer.device.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.encrypted	Identity
🔴 Redacted	meetingInfo.organizer.encrypted.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.encrypted.id	String
🟢 Allowed	meetingInfo.organizer.encrypted.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.guest	Identity
🔴 Redacted	meetingInfo.organizer.guest.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.guest.id	String
🟢 Allowed	meetingInfo.organizer.guest.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.onPremises	Identity
🔴 Redacted	meetingInfo.organizer.onPremises.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.onPremises.id	String
🟢 Allowed	meetingInfo.organizer.onPremises.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.phone	Identity
🔴 Redacted	meetingInfo.organizer.phone.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.phone.id	String
🟢 Allowed	meetingInfo.organizer.phone.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.user	Identity
🔴 Redacted	meetingInfo.organizer.user.displayName	String
🟡 Pseudonymized	meetingInfo.organizer.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.user.id	String
🟢 Allowed	meetingInfo.organizer.user.tenantId	String
🟢 Allowed	requestModalities	List of String
🔴 Redacted	ringingTimeout	N/A
🟡 Pseudonymized	source	ParticipantInfo
🟢 Allowed	source.countryCode	String
🟢 Allowed	source.endpointType	String
🟡 Pseudonymized	source.identity	IdentitySet
🟡 Pseudonymized	source.identity.application	Identity
🔴 Redacted	source.identity.application.displayName	String
🟡 Pseudonymized	source.identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.application.id	String
🟢 Allowed	source.identity.application.tenantId	String
🟡 Pseudonymized	source.identity.applicationInstance	Identity
🔴 Redacted	source.identity.applicationInstance.displayName	String
🟡 Pseudonymized	source.identity.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.applicationInstance.id	String
🟢 Allowed	source.identity.applicationInstance.tenantId	String
🟡 Pseudonymized	source.identity.conversation	Identity
🔴 Redacted	source.identity.conversation.displayName	String
🟡 Pseudonymized	source.identity.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.conversation.id	String
🟢 Allowed	source.identity.conversation.tenantId	String
🟡 Pseudonymized	source.identity.conversationIdentityType	Identity
🔴 Redacted	source.identity.conversationIdentityType.displayName	String
🟡 Pseudonymized	source.identity.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.conversationIdentityType.id	String
🟢 Allowed	source.identity.conversationIdentityType.tenantId	String
🟡 Pseudonymized	source.identity.device	Identity
🔴 Redacted	source.identity.device.displayName	String
🟡 Pseudonymized	source.identity.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.device.id	String
🟢 Allowed	source.identity.device.tenantId	String
🟡 Pseudonymized	source.identity.encrypted	Identity
🔴 Redacted	source.identity.encrypted.displayName	String
🟡 Pseudonymized	source.identity.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.encrypted.id	String
🟢 Allowed	source.identity.encrypted.tenantId	String
🟡 Pseudonymized	source.identity.guest	Identity
🔴 Redacted	source.identity.guest.displayName	String
🟡 Pseudonymized	source.identity.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.guest.id	String
🟢 Allowed	source.identity.guest.tenantId	String
🟡 Pseudonymized	source.identity.onPremises	Identity
🔴 Redacted	source.identity.onPremises.displayName	String
🟡 Pseudonymized	source.identity.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.onPremises.id	String
🟢 Allowed	source.identity.onPremises.tenantId	String
🟡 Pseudonymized	source.identity.phone	Identity
🔴 Redacted	source.identity.phone.displayName	String
🟡 Pseudonymized	source.identity.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.phone.id	String
🟢 Allowed	source.identity.phone.tenantId	String
🟡 Pseudonymized	source.identity.user	Identity
🔴 Redacted	source.identity.user.displayName	String
🟡 Pseudonymized	source.identity.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.user.id	String
🟢 Allowed	source.identity.user.tenantId	String
🟢 Allowed	source.participantId	String
🟢 Allowed	source.region	String
🟢 Allowed	state	String
🔴 Redacted	subject	N/A
🟢 Allowed	targets[]	List of ParticipantInfo
🔴 Redacted	transcription	N/A

CallRecord

API docs: https://learn.microsoft.com/en-us/graph/api/resources/callrecords-callrecord?view=graph-rest-1.0

DLP Proxy	Property Name	Type	Description
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	joinWebUrl	String
🟢 Allowed	lastModifiedDateTime	ZonedDateTime
🟢 Allowed	modalities	List of String
🟡 Pseudonymized	organizer	IdentitySet
🟡 Pseudonymized	organizer.application	Identity
🔴 Redacted	organizer.application.displayName	String
🟡 Pseudonymized	organizer.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.application.id	String
🟢 Allowed	organizer.application.tenantId	String
🟡 Pseudonymized	organizer.applicationInstance	Identity
🔴 Redacted	organizer.applicationInstance.displayName	String
🟡 Pseudonymized	organizer.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.applicationInstance.id	String
🟢 Allowed	organizer.applicationInstance.tenantId	String
🟡 Pseudonymized	organizer.conversation	Identity
🔴 Redacted	organizer.conversation.displayName	String
🟡 Pseudonymized	organizer.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.conversation.id	String
🟢 Allowed	organizer.conversation.tenantId	String
🟡 Pseudonymized	organizer.conversationIdentityType	Identity
🔴 Redacted	organizer.conversationIdentityType.displayName	String
🟡 Pseudonymized	organizer.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.conversationIdentityType.id	String
🟢 Allowed	organizer.conversationIdentityType.tenantId	String
🟡 Pseudonymized	organizer.device	Identity
🔴 Redacted	organizer.device.displayName	String
🟡 Pseudonymized	organizer.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.device.id	String
🟢 Allowed	organizer.device.tenantId	String
🟡 Pseudonymized	organizer.encrypted	Identity
🔴 Redacted	organizer.encrypted.displayName	String
🟡 Pseudonymized	organizer.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.encrypted.id	String
🟢 Allowed	organizer.encrypted.tenantId	String
🟡 Pseudonymized	organizer.guest	Identity
🔴 Redacted	organizer.guest.displayName	String
🟡 Pseudonymized	organizer.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.guest.id	String
🟢 Allowed	organizer.guest.tenantId	String
🟡 Pseudonymized	organizer.onPremises	Identity
🔴 Redacted	organizer.onPremises.displayName	String
🟡 Pseudonymized	organizer.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.onPremises.id	String
🟢 Allowed	organizer.onPremises.tenantId	String
🟡 Pseudonymized	organizer.phone	Identity
🔴 Redacted	organizer.phone.displayName	String
🟡 Pseudonymized	organizer.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.phone.id	String
🟢 Allowed	organizer.phone.tenantId	String
🟡 Pseudonymized	organizer.user	Identity
🔴 Redacted	organizer.user.displayName	String
🟡 Pseudonymized	organizer.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.user.id	String
🟢 Allowed	organizer.user.tenantId	String
🟢 Allowed	participants[]	List of IdentitySet
🟡 Pseudonymized	sessions[]	List of Session
🟡 Pseudonymized	sessions[].callee	CallerInfo
🟡 Pseudonymized	sessions[].callee.identity	IdentitySet
🟡 Pseudonymized	sessions[].callee.identity.application	Identity
🔴 Redacted	sessions[].callee.identity.application.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.application.id	String
🟢 Allowed	sessions[].callee.identity.application.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.applicationInstance	Identity
🔴 Redacted	sessions[].callee.identity.applicationInstance.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.applicationInstance.id	String
🟢 Allowed	sessions[].callee.identity.applicationInstance.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.conversation	Identity
🔴 Redacted	sessions[].callee.identity.conversation.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.conversation.id	String
🟢 Allowed	sessions[].callee.identity.conversation.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.conversationIdentityType	Identity
🔴 Redacted	sessions[].callee.identity.conversationIdentityType.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.conversationIdentityType.id	String
🟢 Allowed	sessions[].callee.identity.conversationIdentityType.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.device	Identity
🔴 Redacted	sessions[].callee.identity.device.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.device.id	String
🟢 Allowed	sessions[].callee.identity.device.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.encrypted	Identity
🔴 Redacted	sessions[].callee.identity.encrypted.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.encrypted.id	String
🟢 Allowed	sessions[].callee.identity.encrypted.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.guest	Identity
🔴 Redacted	sessions[].callee.identity.guest.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.guest.id	String
🟢 Allowed	sessions[].callee.identity.guest.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.onPremises	Identity
🔴 Redacted	sessions[].callee.identity.onPremises.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.onPremises.id	String
🟢 Allowed	sessions[].callee.identity.onPremises.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.phone	Identity
🔴 Redacted	sessions[].callee.identity.phone.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.phone.id	String
🟢 Allowed	sessions[].callee.identity.phone.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.user	Identity
🔴 Redacted	sessions[].callee.identity.user.displayName	String
🟡 Pseudonymized	sessions[].callee.identity.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.user.id	String
🟢 Allowed	sessions[].callee.identity.user.tenantId	String
🟡 Pseudonymized	sessions[].caller	CallerInfo
🟡 Pseudonymized	sessions[].caller.identity	IdentitySet
🟡 Pseudonymized	sessions[].caller.identity.application	Identity
🔴 Redacted	sessions[].caller.identity.application.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.application.id	String
🟢 Allowed	sessions[].caller.identity.application.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.applicationInstance	Identity
🔴 Redacted	sessions[].caller.identity.applicationInstance.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.applicationInstance.id	String
🟢 Allowed	sessions[].caller.identity.applicationInstance.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.conversation	Identity
🔴 Redacted	sessions[].caller.identity.conversation.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.conversation.id	String
🟢 Allowed	sessions[].caller.identity.conversation.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.conversationIdentityType	Identity
🔴 Redacted	sessions[].caller.identity.conversationIdentityType.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.conversationIdentityType.id	String
🟢 Allowed	sessions[].caller.identity.conversationIdentityType.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.device	Identity
🔴 Redacted	sessions[].caller.identity.device.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.device.id	String
🟢 Allowed	sessions[].caller.identity.device.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.encrypted	Identity
🔴 Redacted	sessions[].caller.identity.encrypted.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.encrypted.id	String
🟢 Allowed	sessions[].caller.identity.encrypted.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.guest	Identity
🔴 Redacted	sessions[].caller.identity.guest.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.guest.id	String
🟢 Allowed	sessions[].caller.identity.guest.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.onPremises	Identity
🔴 Redacted	sessions[].caller.identity.onPremises.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.onPremises.id	String
🟢 Allowed	sessions[].caller.identity.onPremises.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.phone	Identity
🔴 Redacted	sessions[].caller.identity.phone.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.phone.id	String
🟢 Allowed	sessions[].caller.identity.phone.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.user	Identity
🔴 Redacted	sessions[].caller.identity.user.displayName	String
🟡 Pseudonymized	sessions[].caller.identity.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.user.id	String
🟢 Allowed	sessions[].caller.identity.user.tenantId	String
🟢 Allowed	sessions[].endDateTime	ZonedDateTime
🟢 Allowed	sessions[].failureInfo	FailureInfo
🟢 Allowed	sessions[].failureInfo.reason	String
🟢 Allowed	sessions[].failureInfo.stage	String
🟢 Allowed	sessions[].id	String
🟢 Allowed	sessions[].isTest	Boolean
🟢 Allowed	sessions[].modalities	List of String
🟢 Allowed	sessions[].startDateTime	ZonedDateTime
🔴 Redacted	sessions[].segments	N/A
🟢 Allowed	startDateTime	ZonedDateTime
🟢 Allowed	type	String
🟢 Allowed	version	Long

Channel

API docs: https://docs.microsoft.com/en-us/graph/api/resources/channel?view=graph-rest-beta

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🔴 Redacted	@odata.id	N/A
🟢 Allowed	createdDateTime	ZonedDateTime
🔴 Redacted	description	N/A
🔴 Redacted	displayName	String
🔴 Redacted	email	N/A
🟢 Allowed	id	String
🟢 Allowed	isArchived	boolean
🟢 Allowed	isFavoriteByDefault	Boolean
🟢 Allowed	membershipType	String
🔴 Redacted	moderationSettings	N/A
🟢 Allowed	summary	ChannelSummary
🟢 Allowed	summary.guestsCount	Integer
🟢 Allowed	summary.hasMembersFromOtherTenants	Boolean
🟢 Allowed	summary.membersCount	Integer
🟢 Allowed	summary.ownersCount	Integer
🟢 Allowed	teamId	String
🟢 Allowed	tenantId	String
🟢 Allowed	webUrl	String

Chat

API docs: https://learn.microsoft.com/en-us/graph/api/resources/chat?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	chatType	String
🟢 Allowed	createdDateTime	ZonedDateTime
🔴 Redacted	description	N/A
🟢 Allowed	id	String
🟡 Pseudonymized	lastMessagePreview	ChatMessage
🔴 Redacted	lastMessagePreview.attachmentList[]	List of ChatMessageAttachment
🔴 Redacted	lastMessagePreview.attachmentList[].content	String
🔴 Redacted	lastMessagePreview.attachmentList[].contentType	String
🔴 Redacted	lastMessagePreview.attachmentList[].contentUrl	String
🔴 Redacted	lastMessagePreview.attachmentList[].id	String
🔴 Redacted	lastMessagePreview.attachmentList[].name	String
🔴 Redacted	lastMessagePreview.attachmentList[].thumbnailUrl	String
🟢 Allowed	lastMessagePreview.channelIdentity	ChannelIdentity
🟢 Allowed	lastMessagePreview.channelIdentity.channelId	String
🟢 Allowed	lastMessagePreview.channelIdentity.teamId	String
🟢 Allowed	lastMessagePreview.chatId	String
🟢 Allowed	lastMessagePreview.createdDateTime	ZonedDateTime
🟢 Allowed	lastMessagePreview.deletedDateTime	Date
🟢 Allowed	lastMessagePreview.eventDetail	EventDetail
🟢 Allowed	[e-mail]	String
🟢 Allowed	lastMessagePreview.eventDetail.initiator	IdentitySet
🟡 Pseudonymized	lastMessagePreview.from	IdentitySet
🟡 Pseudonymized	lastMessagePreview.from.application	Identity
🔴 Redacted	lastMessagePreview.from.application.displayName	String
🟡 Pseudonymized	lastMessagePreview.from.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	lastMessagePreview.from.application.id	String
🟢 Allowed	lastMessagePreview.from.application.tenantId	String
🟢 Allowed	lastMessagePreview.from.applicationInstance	Identity
🟢 Allowed	lastMessagePreview.from.conversation	Identity
🟢 Allowed	lastMessagePreview.from.conversationIdentityType	Identity
🟢 Allowed	lastMessagePreview.from.device	Identity
🟢 Allowed	lastMessagePreview.from.encrypted	Identity
🟢 Allowed	lastMessagePreview.from.guest	Identity
🟢 Allowed	lastMessagePreview.from.onPremises	Identity
🟢 Allowed	lastMessagePreview.from.phone	Identity
🟢 Allowed	lastMessagePreview.from.user	Identity
🟢 Allowed	lastMessagePreview.id	String
🟢 Allowed	lastMessagePreview.importance	String
🟢 Allowed	lastMessagePreview.lastModifiedDateTime	ZonedDateTime
🟢 Allowed	lastMessagePreview.locale	String
🔴 Redacted	lastMessagePreview.mentions[]	List of ChatMessageMention
🔴 Redacted	lastMessagePreview.mentions[].id	int
🔴 Redacted	lastMessagePreview.mentions[].mentioned	IdentitySet
🟢 Allowed	lastMessagePreview.messageType	String
🟢 Allowed	lastMessagePreview.reactions[]	List of ChatMessageReaction
🟢 Allowed	lastMessagePreview.reactions[].createdDateTime	Date
🟢 Allowed	lastMessagePreview.reactions[].reactionType	String
🟢 Allowed	lastMessagePreview.reactions[].user	IdentitySet
🟢 Allowed	lastMessagePreview.replies[]	List of ChatMessage
🟢 Allowed	lastMessagePreview.replyToId	String
🔴 Redacted	lastMessagePreview.attachments	N/A
🔴 Redacted	lastMessagePreview.body.content	N/A
🔴 Redacted	lastMessagePreview.mentions	N/A
🔴 Redacted	[e-mail]	N/A
🟢 Allowed	lastUpdatedDateTime	ZonedDateTime
🟡 Pseudonymized	onlineMeetingInfo	TeamworkOnlineMeetingInfo
🟢 Allowed	onlineMeetingInfo.calendarEventId	String
🟢 Allowed	onlineMeetingInfo.joinWebUrl	String
🟡 Pseudonymized	onlineMeetingInfo.organizer	TeamWorkUserIdentity
🔴 Redacted	onlineMeetingInfo.organizer.displayName	String
🟢 Allowed	onlineMeetingInfo.organizer.id	String
🟢 Allowed	onlineMeetingInfo.organizer.tenantId	String
🟢 Allowed	onlineMeetingInfo.organizer.userIdentityType	String
🟢 Allowed	tenantId	String
🔴 Redacted	topic	String
🟢 Allowed	viewpoint	ChatViewpoint
🟢 Allowed	viewpoint.isHidden	Boolean
🟢 Allowed	viewpoint.lastMessageReadDateTime	ZonedDateTime
🟢 Allowed	webUrl	String

ChatMessage

API docs: https://docs.microsoft.com/en-us/graph/api/resources/chatmessage?view=graph-rest-beta

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🔴 Redacted	@odata.type	N/A
🔴 Redacted	attachmentList[]	List of ChatMessageAttachment
🔴 Redacted	attachmentList[].content	String
🔴 Redacted	attachmentList[].contentType	String
🔴 Redacted	attachmentList[].contentUrl	String
🔴 Redacted	attachmentList[].id	String
🔴 Redacted	attachmentList[].name	String
🔴 Redacted	attachmentList[].thumbnailUrl	String
🔴 Redacted	attachments	N/A
🔴 Redacted	body	N/A
🟢 Allowed	channelIdentity	ChannelIdentity
🟢 Allowed	channelIdentity.channelId	String
🟢 Allowed	channelIdentity.teamId	String
🟢 Allowed	chatId	String
🟢 Allowed	createdDateTime	ZonedDateTime
🟢 Allowed	deletedDateTime	Date
🔴 Redacted	etag	N/A
🟡 Pseudonymized	eventDetail	EventDetail
🟢 Allowed	[e-mail]	String
🟡 Pseudonymized	eventDetail.initiator	IdentitySet
🟡 Pseudonymized	eventDetail.initiator.application	Identity
🔴 Redacted	eventDetail.initiator.application.displayName	String
🟡 Pseudonymized	eventDetail.initiator.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.application.id	String
🟢 Allowed	eventDetail.initiator.application.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.applicationInstance	Identity
🔴 Redacted	eventDetail.initiator.applicationInstance.displayName	String
🟡 Pseudonymized	eventDetail.initiator.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.applicationInstance.id	String
🟢 Allowed	eventDetail.initiator.applicationInstance.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.conversation	Identity
🔴 Redacted	eventDetail.initiator.conversation.displayName	String
🟡 Pseudonymized	eventDetail.initiator.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.conversation.id	String
🟢 Allowed	eventDetail.initiator.conversation.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.conversationIdentityType	Identity
🔴 Redacted	eventDetail.initiator.conversationIdentityType.displayName	String
🟡 Pseudonymized	eventDetail.initiator.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.conversationIdentityType.id	String
🟢 Allowed	eventDetail.initiator.conversationIdentityType.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.device	Identity
🔴 Redacted	eventDetail.initiator.device.displayName	String
🟡 Pseudonymized	eventDetail.initiator.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.device.id	String
🟢 Allowed	eventDetail.initiator.device.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.encrypted	Identity
🔴 Redacted	eventDetail.initiator.encrypted.displayName	String
🟡 Pseudonymized	eventDetail.initiator.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.encrypted.id	String
🟢 Allowed	eventDetail.initiator.encrypted.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.guest	Identity
🔴 Redacted	eventDetail.initiator.guest.displayName	String
🟡 Pseudonymized	eventDetail.initiator.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.guest.id	String
🟢 Allowed	eventDetail.initiator.guest.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.onPremises	Identity
🔴 Redacted	eventDetail.initiator.onPremises.displayName	String
🟡 Pseudonymized	eventDetail.initiator.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.onPremises.id	String
🟢 Allowed	eventDetail.initiator.onPremises.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.phone	Identity
🔴 Redacted	eventDetail.initiator.phone.displayName	String
🟡 Pseudonymized	eventDetail.initiator.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.phone.id	String
🟢 Allowed	eventDetail.initiator.phone.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.user	Identity
🔴 Redacted	eventDetail.initiator.user.displayName	String
🟡 Pseudonymized	eventDetail.initiator.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.user.id	String
🟢 Allowed	eventDetail.initiator.user.tenantId	String
🟡 Pseudonymized	from	IdentitySet
🟡 Pseudonymized	from.application	Identity
🔴 Redacted	from.application.displayName	String
🟡 Pseudonymized	from.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.application.id	String
🟢 Allowed	from.application.tenantId	String
🟡 Pseudonymized	from.applicationInstance	Identity
🔴 Redacted	from.applicationInstance.displayName	String
🟡 Pseudonymized	from.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.applicationInstance.id	String
🟢 Allowed	from.applicationInstance.tenantId	String
🟡 Pseudonymized	from.conversation	Identity
🔴 Redacted	from.conversation.displayName	String
🟡 Pseudonymized	from.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.conversation.id	String
🟢 Allowed	from.conversation.tenantId	String
🟡 Pseudonymized	from.conversationIdentityType	Identity
🔴 Redacted	from.conversationIdentityType.displayName	String
🟡 Pseudonymized	from.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.conversationIdentityType.id	String
🟢 Allowed	from.conversationIdentityType.tenantId	String
🟡 Pseudonymized	from.device	Identity
🔴 Redacted	from.device.displayName	String
🟡 Pseudonymized	from.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.device.id	String
🟢 Allowed	from.device.tenantId	String
🟡 Pseudonymized	from.encrypted	Identity
🔴 Redacted	from.encrypted.displayName	String
🟡 Pseudonymized	from.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.encrypted.id	String
🟢 Allowed	from.encrypted.tenantId	String
🟡 Pseudonymized	from.guest	Identity
🔴 Redacted	from.guest.displayName	String
🟡 Pseudonymized	from.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.guest.id	String
🟢 Allowed	from.guest.tenantId	String
🟡 Pseudonymized	from.onPremises	Identity
🔴 Redacted	from.onPremises.displayName	String
🟡 Pseudonymized	from.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.onPremises.id	String
🟢 Allowed	from.onPremises.tenantId	String
🟡 Pseudonymized	from.phone	Identity
🔴 Redacted	from.phone.displayName	String
🟡 Pseudonymized	from.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.phone.id	String
🟢 Allowed	from.phone.tenantId	String
🟡 Pseudonymized	from.user	Identity
🔴 Redacted	from.user.displayName	String
🟡 Pseudonymized	from.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.user.id	String
🟢 Allowed	from.user.tenantId	String
🟢 Allowed	id	String
🟢 Allowed	importance	String
🔴 Redacted	lastEditedDateTime	N/A
🟢 Allowed	lastModifiedDateTime	ZonedDateTime
🟢 Allowed	locale	String
🔴 Redacted	mentions[]	List of ChatMessageMention
🔴 Redacted	mentions[].id	int
🔴 Redacted	mentions[].mentioned	IdentitySet
🔴 Redacted	mentions[].mentioned.application	Identity
🔴 Redacted	mentions[].mentioned.application.displayName	String
🔴 Redacted	mentions[].mentioned.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.application.id	String
🔴 Redacted	mentions[].mentioned.application.tenantId	String
🔴 Redacted	mentions[].mentioned.applicationInstance	Identity
🔴 Redacted	mentions[].mentioned.applicationInstance.displayName	String
🔴 Redacted	mentions[].mentioned.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.applicationInstance.id	String
🔴 Redacted	mentions[].mentioned.applicationInstance.tenantId	String
🔴 Redacted	mentions[].mentioned.conversation	Identity
🔴 Redacted	mentions[].mentioned.conversation.displayName	String
🔴 Redacted	mentions[].mentioned.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.conversation.id	String
🔴 Redacted	mentions[].mentioned.conversation.tenantId	String
🔴 Redacted	mentions[].mentioned.conversationIdentityType	Identity
🔴 Redacted	mentions[].mentioned.conversationIdentityType.displayName	String
🔴 Redacted	mentions[].mentioned.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.conversationIdentityType.id	String
🔴 Redacted	mentions[].mentioned.conversationIdentityType.tenantId	String
🔴 Redacted	mentions[].mentioned.device	Identity
🔴 Redacted	mentions[].mentioned.device.displayName	String
🔴 Redacted	mentions[].mentioned.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.device.id	String
🔴 Redacted	mentions[].mentioned.device.tenantId	String
🔴 Redacted	mentions[].mentioned.encrypted	Identity
🔴 Redacted	mentions[].mentioned.encrypted.displayName	String
🔴 Redacted	mentions[].mentioned.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.encrypted.id	String
🔴 Redacted	mentions[].mentioned.encrypted.tenantId	String
🔴 Redacted	mentions[].mentioned.guest	Identity
🔴 Redacted	mentions[].mentioned.guest.displayName	String
🔴 Redacted	mentions[].mentioned.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.guest.id	String
🔴 Redacted	mentions[].mentioned.guest.tenantId	String
🔴 Redacted	mentions[].mentioned.onPremises	Identity
🔴 Redacted	mentions[].mentioned.onPremises.displayName	String
🔴 Redacted	mentions[].mentioned.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.onPremises.id	String
🔴 Redacted	mentions[].mentioned.onPremises.tenantId	String
🔴 Redacted	mentions[].mentioned.phone	Identity
🔴 Redacted	mentions[].mentioned.phone.displayName	String
🔴 Redacted	mentions[].mentioned.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.phone.id	String
🔴 Redacted	mentions[].mentioned.phone.tenantId	String
🔴 Redacted	mentions[].mentioned.user	Identity
🔴 Redacted	mentions[].mentioned.user.displayName	String
🔴 Redacted	mentions[].mentioned.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🔴 Redacted	mentions[].mentioned.user.id	String
🔴 Redacted	mentions[].mentioned.user.tenantId	String
🟢 Allowed	messageType	String
🔴 Redacted	nextVersion	N/A
🔴 Redacted	policyViolation	N/A
🟡 Pseudonymized	reactions[]	List of ChatMessageReaction
🟢 Allowed	reactions[].createdDateTime	Date
🟢 Allowed	reactions[].reactionType	String
🟡 Pseudonymized	reactions[].user	IdentitySet
🟡 Pseudonymized	reactions[].user.application	Identity
🔴 Redacted	reactions[].user.application.displayName	String
🟡 Pseudonymized	reactions[].user.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.application.id	String
🟢 Allowed	reactions[].user.application.tenantId	String
🟡 Pseudonymized	reactions[].user.applicationInstance	Identity
🔴 Redacted	reactions[].user.applicationInstance.displayName	String
🟡 Pseudonymized	reactions[].user.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.applicationInstance.id	String
🟢 Allowed	reactions[].user.applicationInstance.tenantId	String
🟡 Pseudonymized	reactions[].user.conversation	Identity
🔴 Redacted	reactions[].user.conversation.displayName	String
🟡 Pseudonymized	reactions[].user.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.conversation.id	String
🟢 Allowed	reactions[].user.conversation.tenantId	String
🟡 Pseudonymized	reactions[].user.conversationIdentityType	Identity
🔴 Redacted	reactions[].user.conversationIdentityType.displayName	String
🟡 Pseudonymized	reactions[].user.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.conversationIdentityType.id	String
🟢 Allowed	reactions[].user.conversationIdentityType.tenantId	String
🟡 Pseudonymized	reactions[].user.device	Identity
🔴 Redacted	reactions[].user.device.displayName	String
🟡 Pseudonymized	reactions[].user.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.device.id	String
🟢 Allowed	reactions[].user.device.tenantId	String
🟡 Pseudonymized	reactions[].user.encrypted	Identity
🔴 Redacted	reactions[].user.encrypted.displayName	String
🟡 Pseudonymized	reactions[].user.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.encrypted.id	String
🟢 Allowed	reactions[].user.encrypted.tenantId	String
🟡 Pseudonymized	reactions[].user.guest	Identity
🔴 Redacted	reactions[].user.guest.displayName	String
🟡 Pseudonymized	reactions[].user.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.guest.id	String
🟢 Allowed	reactions[].user.guest.tenantId	String
🟡 Pseudonymized	reactions[].user.onPremises	Identity
🔴 Redacted	reactions[].user.onPremises.displayName	String
🟡 Pseudonymized	reactions[].user.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.onPremises.id	String
🟢 Allowed	reactions[].user.onPremises.tenantId	String
🟡 Pseudonymized	reactions[].user.phone	Identity
🔴 Redacted	reactions[].user.phone.displayName	String
🟡 Pseudonymized	reactions[].user.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.phone.id	String
🟢 Allowed	reactions[].user.phone.tenantId	String
🟡 Pseudonymized	reactions[].user.user	Identity
🔴 Redacted	reactions[].user.user.displayName	String
🟡 Pseudonymized	reactions[].user.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.user.id	String
🟢 Allowed	reactions[].user.user.tenantId	String
🟡 Pseudonymized	replies[]	List of ChatMessage
🔴 Redacted	replies[].attachmentList[]	List of ChatMessageAttachment
🟢 Allowed	replies[].channelIdentity	ChannelIdentity
🟢 Allowed	replies[].channelIdentity.channelId	String
🟢 Allowed	replies[].channelIdentity.teamId	String
🟢 Allowed	replies[].chatId	String
🟢 Allowed	replies[].createdDateTime	ZonedDateTime
🟢 Allowed	replies[].deletedDateTime	Date
🟡 Pseudonymized	replies[].eventDetail	EventDetail
🟢 Allowed	replies[][e-mail]	String
🟡 Pseudonymized	replies[].eventDetail.initiator	IdentitySet
🟡 Pseudonymized	replies[].eventDetail.initiator.application	Identity
🔴 Redacted	replies[].eventDetail.initiator.application.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.application.id	String
🟢 Allowed	replies[].eventDetail.initiator.application.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.applicationInstance	Identity
🔴 Redacted	replies[].eventDetail.initiator.applicationInstance.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.applicationInstance.id	String
🟢 Allowed	replies[].eventDetail.initiator.applicationInstance.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.conversation	Identity
🔴 Redacted	replies[].eventDetail.initiator.conversation.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.conversation.id	String
🟢 Allowed	replies[].eventDetail.initiator.conversation.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.conversationIdentityType	Identity
🔴 Redacted	replies[].eventDetail.initiator.conversationIdentityType.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.conversationIdentityType.id	String
🟢 Allowed	replies[].eventDetail.initiator.conversationIdentityType.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.device	Identity
🔴 Redacted	replies[].eventDetail.initiator.device.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.device.id	String
🟢 Allowed	replies[].eventDetail.initiator.device.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.encrypted	Identity
🔴 Redacted	replies[].eventDetail.initiator.encrypted.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.encrypted.id	String
🟢 Allowed	replies[].eventDetail.initiator.encrypted.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.guest	Identity
🔴 Redacted	replies[].eventDetail.initiator.guest.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.guest.id	String
🟢 Allowed	replies[].eventDetail.initiator.guest.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.onPremises	Identity
🔴 Redacted	replies[].eventDetail.initiator.onPremises.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.onPremises.id	String
🟢 Allowed	replies[].eventDetail.initiator.onPremises.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.phone	Identity
🔴 Redacted	replies[].eventDetail.initiator.phone.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.phone.id	String
🟢 Allowed	replies[].eventDetail.initiator.phone.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.user	Identity
🔴 Redacted	replies[].eventDetail.initiator.user.displayName	String
🟡 Pseudonymized	replies[].eventDetail.initiator.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.user.id	String
🟢 Allowed	replies[].eventDetail.initiator.user.tenantId	String
🟡 Pseudonymized	replies[].from	IdentitySet
🟡 Pseudonymized	replies[].from.application	Identity
🔴 Redacted	replies[].from.application.displayName	String
🟡 Pseudonymized	replies[].from.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.application.id	String
🟢 Allowed	replies[].from.application.tenantId	String
🟡 Pseudonymized	replies[].from.applicationInstance	Identity
🔴 Redacted	replies[].from.applicationInstance.displayName	String
🟡 Pseudonymized	replies[].from.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.applicationInstance.id	String
🟢 Allowed	replies[].from.applicationInstance.tenantId	String
🟡 Pseudonymized	replies[].from.conversation	Identity
🔴 Redacted	replies[].from.conversation.displayName	String
🟡 Pseudonymized	replies[].from.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.conversation.id	String
🟢 Allowed	replies[].from.conversation.tenantId	String
🟡 Pseudonymized	replies[].from.conversationIdentityType	Identity
🔴 Redacted	replies[].from.conversationIdentityType.displayName	String
🟡 Pseudonymized	replies[].from.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.conversationIdentityType.id	String
🟢 Allowed	replies[].from.conversationIdentityType.tenantId	String
🟡 Pseudonymized	replies[].from.device	Identity
🔴 Redacted	replies[].from.device.displayName	String
🟡 Pseudonymized	replies[].from.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.device.id	String
🟢 Allowed	replies[].from.device.tenantId	String
🟡 Pseudonymized	replies[].from.encrypted	Identity
🔴 Redacted	replies[].from.encrypted.displayName	String
🟡 Pseudonymized	replies[].from.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.encrypted.id	String
🟢 Allowed	replies[].from.encrypted.tenantId	String
🟡 Pseudonymized	replies[].from.guest	Identity
🔴 Redacted	replies[].from.guest.displayName	String
🟡 Pseudonymized	replies[].from.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.guest.id	String
🟢 Allowed	replies[].from.guest.tenantId	String
🟡 Pseudonymized	replies[].from.onPremises	Identity
🔴 Redacted	replies[].from.onPremises.displayName	String
🟡 Pseudonymized	replies[].from.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.onPremises.id	String
🟢 Allowed	replies[].from.onPremises.tenantId	String
🟡 Pseudonymized	replies[].from.phone	Identity
🔴 Redacted	replies[].from.phone.displayName	String
🟡 Pseudonymized	replies[].from.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.phone.id	String
🟢 Allowed	replies[].from.phone.tenantId	String
🟡 Pseudonymized	replies[].from.user	Identity
🔴 Redacted	replies[].from.user.displayName	String
🟡 Pseudonymized	replies[].from.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.user.id	String
🟢 Allowed	replies[].from.user.tenantId	String
🟢 Allowed	replies[].id	String
🟢 Allowed	replies[].importance	String
🟢 Allowed	replies[].lastModifiedDateTime	ZonedDateTime
🟢 Allowed	replies[].locale	String
🔴 Redacted	replies[].mentions[]	List of ChatMessageMention
🟢 Allowed	replies[].messageType	String
🟢 Allowed	replies[].reactions[]	List of ChatMessageReaction
🟢 Allowed	replies[].replies[]	List of ChatMessage
🟢 Allowed	replies[].replyToId	String
🟢 Allowed	replyToId	String
🔴 Redacted	subject	N/A
🔴 Redacted	summary	N/A
🔴 Redacted	webUrl	N/A

DirectRoutingCall

API docs: https://learn.microsoft.com/en-us/graph/api/resources/callrecords-directroutinglogrow?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🔴 Redacted	@odata.count	N/A
🔴 Redacted	@odata.type	N/A
🟢 Allowed	callType	String
🔴 Redacted	calleeNumber	N/A
🟢 Allowed	correlationId	String
🟢 Allowed	duration	Integer
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	failureDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	inviteDateTime	ZonedDateTime
🟢 Allowed	mediaBypassEnabled	Boolean
🟢 Allowed	mediaPathLocation	String
🟢 Allowed	signalingLocation	String
🟢 Allowed	startDateTime	ZonedDateTime
🟢 Allowed	successfulCall	Boolean
🟢 Allowed	trunkFullyQualifiedDomainName	String
🔴 Redacted	userDisplayName	N/A
🟢 Allowed	userId	String
🔴 Redacted	userPrincipalName	N/A

MeetingAttendanceReport

API docs: https://learn.microsoft.com/en-us/graph/api/resources/meetingattendancereport?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🔴 Redacted	@odata.context	N/A
🟡 Pseudonymized	attendanceRecords[]	List of AttendanceReport
🟢 Allowed	attendanceRecords[].attendanceIntervals[]	List of AttendanceInterval
🟢 Allowed	attendanceRecords[].attendanceIntervals[].durationInSeconds	Integer
🟢 Allowed	attendanceRecords[].attendanceIntervals[].joinDateTime	ZonedDateTime
🟢 Allowed	attendanceRecords[].attendanceIntervals[].leaveDateTime	ZonedDateTime
🟡 Pseudonymized	attendanceRecords[].emailAddress	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟡 Pseudonymized	attendanceRecords[].identity	Identity
🔴 Redacted	attendanceRecords[].identity.displayName	String
🟡 Pseudonymized	attendanceRecords[].identity.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	attendanceRecords[].identity.id	String
🟢 Allowed	attendanceRecords[].identity.tenantId	String
🟢 Allowed	attendanceRecords[].role	String
🟢 Allowed	attendanceRecords[].totalAttendanceInSeconds	Integer
🟢 Allowed	id	String
🟢 Allowed	meetingEndDateTime	ZonedDateTime
🟢 Allowed	meetingStartDateTime	ZonedDateTime
🟢 Allowed	totalParticipantCount	Integer

OnlineMeeting

API docs: https://learn.microsoft.com/en-us/graph/api/resources/onlinemeeting?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🔴 Redacted	@odata.context	N/A
🟢 Allowed	allowAttendeeToEnableCamera	Boolean
🟢 Allowed	allowAttendeeToEnableMic	Boolean
🟢 Allowed	allowMeetingChat	String
🟢 Allowed	allowParticipantsToChangeName	Boolean
🟢 Allowed	allowTeamworkReactions	Boolean
🟢 Allowed	allowedPresenters	String
🔴 Redacted	audioConferencing	N/A
🟢 Allowed	chatInfo	ChatInfo
🟢 Allowed	chatInfo.messageId	String
🟢 Allowed	chatInfo.replyChainMessageId	String
🟢 Allowed	chatInfo.threadId	String
🟢 Allowed	creationDateTime	ZonedDateTime
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	id	String
🔴 Redacted	joinInformation	N/A
🔴 Redacted	joinMeetingIdSettings	N/A
🟢 Allowed	joinWebUrl	String
🟢 Allowed	lobbyBypassSettings	LobbyBypassSettings
🟢 Allowed	lobbyBypassSettings.isLobbyBypassEnabled	boolean
🟢 Allowed	lobbyBypassSettings.lobbyBypassDuration	int
🟡 Pseudonymized	participants	MeetingParticipant
🟡 Pseudonymized	participants.attendees[]	List of MeetingParticipantInfo
🟡 Pseudonymized	participants.attendees[].identity	IdentitySet
🟡 Pseudonymized	participants.attendees[].identity.application	Identity
🔴 Redacted	participants.attendees[].identity.application.displayName	String
🟡 Pseudonymized	participants.attendees[].identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	participants.attendees[].identity.application.id	String
🟢 Allowed	participants.attendees[].identity.application.tenantId	String
🟢 Allowed	participants.attendees[].identity.applicationInstance	Identity
🟢 Allowed	participants.attendees[].identity.conversation	Identity
🟢 Allowed	participants.attendees[].identity.conversationIdentityType	Identity
🟢 Allowed	participants.attendees[].identity.device	Identity
🟢 Allowed	participants.attendees[].identity.encrypted	Identity
🟢 Allowed	participants.attendees[].identity.guest	Identity
🟢 Allowed	participants.attendees[].identity.onPremises	Identity
🟢 Allowed	participants.attendees[].identity.phone	Identity
🟢 Allowed	participants.attendees[].identity.user	Identity
🟢 Allowed	participants.attendees[].role	String
🟢 Allowed	participants.attendees[].upn	String
🟢 Allowed	participants.organizer	MeetingParticipantInfo
🟢 Allowed	shareMeetingChatHistoryDefault	String
🟢 Allowed	startDateTime	ZonedDateTime
🔴 Redacted	subject	N/A
🟢 Allowed	videoTeleconferenceId	String
🟢 Allowed	watermarkProtection	WatermarkProtection
🟢 Allowed	watermarkProtection.isEnabledForContentSharing	boolean
🟢 Allowed	watermarkProtection.isEnabledForVideo	boolean

PSTNCall

API docs: https://learn.microsoft.com/en-us/graph/api/resources/callrecords-pstncalllogrow?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🔴 Redacted	@odata.count	N/A
🔴 Redacted	@odata.type	N/A
🟢 Allowed	callDurationSource	String
🟢 Allowed	callId	String
🟢 Allowed	callType	String
🔴 Redacted	calleeNumber	N/A
🔴 Redacted	callerNumber	N/A
🟢 Allowed	charge	Double
🟢 Allowed	conferenceId	String
🟢 Allowed	connectionCharge	Double
🟢 Allowed	currency	String
🟢 Allowed	destinationContext	String
🟢 Allowed	destinationName	String
🟢 Allowed	duration	Integer
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	inventoryType	String
🟢 Allowed	licenseCapability	String
🟢 Allowed	operator	String
🟢 Allowed	startDateTime	ZonedDateTime
🟢 Allowed	tenantCountryCode	String
🟢 Allowed	usageCountryCode	String
🔴 Redacted	userDisplayName	N/A
🟢 Allowed	userId	String
🔴 Redacted	userPrincipalName	N/A

Team

API docs: https://learn.microsoft.com/en-us/graph/api/resources/team?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	id	String
🟢 Allowed	internalId	String
🟢 Allowed	isArchived	Boolean
🟢 Allowed	visibility	String