Microsoft Teams Sanitized Data

The following table(s) contains detailed examples of the metadata fields available from the Microsoft Teams API endpoints Worklytics leverages. In order to pseudonymize and sanitize PII and other potentially sensitive data, Worklytics provides access to a Data Loss Prevention (DLP) Proxy, which allows customers to pre-filter metadata, within customer infrastructure, before it is sent to Worklytics for processing.

These are the fields Worklytics recommends but the Worklytics DLP Proxy provides full field-level control and therefore any field may be removed or sanitized.

Field descriptions are taken from third party API documentation, these are maintained on a best effort basis and Worklytics can not guarantee their indefinite accuracy. Please refer to the source API site for the most up-to-date documentation.

How to read the "DLP Proxy" column in the table(s):

⭕ This field is transformed, usually partially redacted

🟡 This field is "pseudonymized" by the DLP Proxy: only a SHA256 hash of its value is sent to Worklytics; never the value itself

To see the full (unsanitized) version of this document, click here.

Worklytics requires access to the following API primary endpoints:

Model	Description	API docs
Call	Used to retrieve a single existing call Endpoints: /v1.0/communications/calls/{callId}	🔗↗️
CallRecord	Used to retrieve a collection of call records (or a single call record) Endpoints: /v1.0/communications/callRecords /v1.0/communications/callRecords/{callRecordId}	🔗↗️
Channel	Used to retrieve a collection of existing channels for a given team Endpoints: /v1.0/teams/{teamId}/allChannels	🔗↗️
Chat	Used to retrieve a collection of existing chats Endpoints: /v1.0/users/{userId}/chats	🔗↗️
ChatMessage	Used to retrieve a collection of existing chat messages Endpoints: /v1.0/teams/{teamId}/channels/{channelId}/messages /v1.0/teams/{teamId}/channels/{channelId}/messages/delta /v1.0/chats/{chatId}/messages	🔗↗️
DirectRoutingCall	Used to retrieve a collection of direct routing call records Endpoints: /v1.0/communications/callRecords/getDirectRoutingCalls	🔗↗️
MeetingAttendanceReport	Used to retrieve a collection of meeting attendance reports (or a single one) Endpoints: /v1.0/users/{userId}/onlineMeetings/{meetingId}/attendanceReports /v1.0/users/{userId}/onlineMeetings/{meetingId}/attendanceReports/{reportId}	🔗↗️
OnlineMeeting	Used to retrieve a collection of online meetings Endpoints: /v1.0/users/{userId}/onlineMeetings	🔗↗️
PSTNCall	Used to retrieve a collection of PSTN call records Endpoints: /v1.0/communications/callRecords/getPstnCalls	🔗↗️
Team	Used to retrieve a collection of existing teams Endpoints: /v1.0/teams	🔗↗️

Call

API docs: https://learn.microsoft.com/en-us/graph/api/resources/call?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	callChainId	String
🟢 Allowed	chatInfo	ChatInfo
🟢 Allowed	chatInfo.messageId	String
🟢 Allowed	chatInfo.replyChainMessageId	String
🟢 Allowed	chatInfo.threadId	String
🟢 Allowed	direction	String
🟢 Allowed	id	String
🟢 Allowed	mediaState	String
🟡 Pseudonymized	meetingInfo	MeetingInfo
🟢 Allowed	meetingInfo.allowConversationWithoutHost	Boolean
🟡 Pseudonymized	meetingInfo.organizer	IdentitySet
🟡 Pseudonymized	meetingInfo.organizer.application	Identity
🟡 Pseudonymized	meetingInfo.organizer.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.application.id	String
🟢 Allowed	meetingInfo.organizer.application.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.applicationInstance	Identity
🟡 Pseudonymized	meetingInfo.organizer.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.applicationInstance.id	String
🟢 Allowed	meetingInfo.organizer.applicationInstance.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.conversation	Identity
🟡 Pseudonymized	meetingInfo.organizer.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.conversation.id	String
🟢 Allowed	meetingInfo.organizer.conversation.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.conversationIdentityType	Identity
🟡 Pseudonymized	meetingInfo.organizer.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.conversationIdentityType.id	String
🟢 Allowed	meetingInfo.organizer.conversationIdentityType.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.device	Identity
🟡 Pseudonymized	meetingInfo.organizer.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.device.id	String
🟢 Allowed	meetingInfo.organizer.device.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.encrypted	Identity
🟡 Pseudonymized	meetingInfo.organizer.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.encrypted.id	String
🟢 Allowed	meetingInfo.organizer.encrypted.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.guest	Identity
🟡 Pseudonymized	meetingInfo.organizer.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.guest.id	String
🟢 Allowed	meetingInfo.organizer.guest.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.onPremises	Identity
🟡 Pseudonymized	meetingInfo.organizer.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.onPremises.id	String
🟢 Allowed	meetingInfo.organizer.onPremises.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.phone	Identity
🟡 Pseudonymized	meetingInfo.organizer.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.phone.id	String
🟢 Allowed	meetingInfo.organizer.phone.tenantId	String
🟡 Pseudonymized	meetingInfo.organizer.user	Identity
🟡 Pseudonymized	meetingInfo.organizer.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	meetingInfo.organizer.user.id	String
🟢 Allowed	meetingInfo.organizer.user.tenantId	String
🟢 Allowed	requestModalities	List of String
🟡 Pseudonymized	source	ParticipantInfo
🟢 Allowed	source.countryCode	String
🟢 Allowed	source.endpointType	String
🟡 Pseudonymized	source.identity	IdentitySet
🟡 Pseudonymized	source.identity.application	Identity
🟡 Pseudonymized	source.identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.application.id	String
🟢 Allowed	source.identity.application.tenantId	String
🟡 Pseudonymized	source.identity.applicationInstance	Identity
🟡 Pseudonymized	source.identity.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.applicationInstance.id	String
🟢 Allowed	source.identity.applicationInstance.tenantId	String
🟡 Pseudonymized	source.identity.conversation	Identity
🟡 Pseudonymized	source.identity.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.conversation.id	String
🟢 Allowed	source.identity.conversation.tenantId	String
🟡 Pseudonymized	source.identity.conversationIdentityType	Identity
🟡 Pseudonymized	source.identity.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.conversationIdentityType.id	String
🟢 Allowed	source.identity.conversationIdentityType.tenantId	String
🟡 Pseudonymized	source.identity.device	Identity
🟡 Pseudonymized	source.identity.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.device.id	String
🟢 Allowed	source.identity.device.tenantId	String
🟡 Pseudonymized	source.identity.encrypted	Identity
🟡 Pseudonymized	source.identity.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.encrypted.id	String
🟢 Allowed	source.identity.encrypted.tenantId	String
🟡 Pseudonymized	source.identity.guest	Identity
🟡 Pseudonymized	source.identity.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.guest.id	String
🟢 Allowed	source.identity.guest.tenantId	String
🟡 Pseudonymized	source.identity.onPremises	Identity
🟡 Pseudonymized	source.identity.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.onPremises.id	String
🟢 Allowed	source.identity.onPremises.tenantId	String
🟡 Pseudonymized	source.identity.phone	Identity
🟡 Pseudonymized	source.identity.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.phone.id	String
🟢 Allowed	source.identity.phone.tenantId	String
🟡 Pseudonymized	source.identity.user	Identity
🟡 Pseudonymized	source.identity.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	source.identity.user.id	String
🟢 Allowed	source.identity.user.tenantId	String
🟢 Allowed	source.participantId	String
🟢 Allowed	source.region	String
🟢 Allowed	state	String
🟢 Allowed	targets[]	List of ParticipantInfo

CallRecord

API docs: https://learn.microsoft.com/en-us/graph/api/resources/callrecords-callrecord?view=graph-rest-1.0

DLP Proxy	Property Name	Type	Description
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	joinWebUrl	String
🟢 Allowed	lastModifiedDateTime	ZonedDateTime
🟢 Allowed	modalities	List of String
🟡 Pseudonymized	organizer	IdentitySet
🟡 Pseudonymized	organizer.application	Identity
🟡 Pseudonymized	organizer.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.application.id	String
🟢 Allowed	organizer.application.tenantId	String
🟡 Pseudonymized	organizer.applicationInstance	Identity
🟡 Pseudonymized	organizer.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.applicationInstance.id	String
🟢 Allowed	organizer.applicationInstance.tenantId	String
🟡 Pseudonymized	organizer.conversation	Identity
🟡 Pseudonymized	organizer.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.conversation.id	String
🟢 Allowed	organizer.conversation.tenantId	String
🟡 Pseudonymized	organizer.conversationIdentityType	Identity
🟡 Pseudonymized	organizer.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.conversationIdentityType.id	String
🟢 Allowed	organizer.conversationIdentityType.tenantId	String
🟡 Pseudonymized	organizer.device	Identity
🟡 Pseudonymized	organizer.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.device.id	String
🟢 Allowed	organizer.device.tenantId	String
🟡 Pseudonymized	organizer.encrypted	Identity
🟡 Pseudonymized	organizer.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.encrypted.id	String
🟢 Allowed	organizer.encrypted.tenantId	String
🟡 Pseudonymized	organizer.guest	Identity
🟡 Pseudonymized	organizer.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.guest.id	String
🟢 Allowed	organizer.guest.tenantId	String
🟡 Pseudonymized	organizer.onPremises	Identity
🟡 Pseudonymized	organizer.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.onPremises.id	String
🟢 Allowed	organizer.onPremises.tenantId	String
🟡 Pseudonymized	organizer.phone	Identity
🟡 Pseudonymized	organizer.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.phone.id	String
🟢 Allowed	organizer.phone.tenantId	String
🟡 Pseudonymized	organizer.user	Identity
🟡 Pseudonymized	organizer.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	organizer.user.id	String
🟢 Allowed	organizer.user.tenantId	String
🟢 Allowed	participants[]	List of IdentitySet
🟡 Pseudonymized	sessions[]	List of Session
🟡 Pseudonymized	sessions[].callee	CallerInfo
🟡 Pseudonymized	sessions[].callee.identity	IdentitySet
🟡 Pseudonymized	sessions[].callee.identity.application	Identity
🟡 Pseudonymized	sessions[].callee.identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.application.id	String
🟢 Allowed	sessions[].callee.identity.application.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.applicationInstance	Identity
🟡 Pseudonymized	sessions[].callee.identity.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.applicationInstance.id	String
🟢 Allowed	sessions[].callee.identity.applicationInstance.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.conversation	Identity
🟡 Pseudonymized	sessions[].callee.identity.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.conversation.id	String
🟢 Allowed	sessions[].callee.identity.conversation.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.conversationIdentityType	Identity
🟡 Pseudonymized	sessions[].callee.identity.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.conversationIdentityType.id	String
🟢 Allowed	sessions[].callee.identity.conversationIdentityType.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.device	Identity
🟡 Pseudonymized	sessions[].callee.identity.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.device.id	String
🟢 Allowed	sessions[].callee.identity.device.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.encrypted	Identity
🟡 Pseudonymized	sessions[].callee.identity.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.encrypted.id	String
🟢 Allowed	sessions[].callee.identity.encrypted.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.guest	Identity
🟡 Pseudonymized	sessions[].callee.identity.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.guest.id	String
🟢 Allowed	sessions[].callee.identity.guest.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.onPremises	Identity
🟡 Pseudonymized	sessions[].callee.identity.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.onPremises.id	String
🟢 Allowed	sessions[].callee.identity.onPremises.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.phone	Identity
🟡 Pseudonymized	sessions[].callee.identity.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.phone.id	String
🟢 Allowed	sessions[].callee.identity.phone.tenantId	String
🟡 Pseudonymized	sessions[].callee.identity.user	Identity
🟡 Pseudonymized	sessions[].callee.identity.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].callee.identity.user.id	String
🟢 Allowed	sessions[].callee.identity.user.tenantId	String
🟡 Pseudonymized	sessions[].caller	CallerInfo
🟡 Pseudonymized	sessions[].caller.identity	IdentitySet
🟡 Pseudonymized	sessions[].caller.identity.application	Identity
🟡 Pseudonymized	sessions[].caller.identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.application.id	String
🟢 Allowed	sessions[].caller.identity.application.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.applicationInstance	Identity
🟡 Pseudonymized	sessions[].caller.identity.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.applicationInstance.id	String
🟢 Allowed	sessions[].caller.identity.applicationInstance.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.conversation	Identity
🟡 Pseudonymized	sessions[].caller.identity.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.conversation.id	String
🟢 Allowed	sessions[].caller.identity.conversation.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.conversationIdentityType	Identity
🟡 Pseudonymized	sessions[].caller.identity.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.conversationIdentityType.id	String
🟢 Allowed	sessions[].caller.identity.conversationIdentityType.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.device	Identity
🟡 Pseudonymized	sessions[].caller.identity.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.device.id	String
🟢 Allowed	sessions[].caller.identity.device.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.encrypted	Identity
🟡 Pseudonymized	sessions[].caller.identity.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.encrypted.id	String
🟢 Allowed	sessions[].caller.identity.encrypted.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.guest	Identity
🟡 Pseudonymized	sessions[].caller.identity.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.guest.id	String
🟢 Allowed	sessions[].caller.identity.guest.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.onPremises	Identity
🟡 Pseudonymized	sessions[].caller.identity.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.onPremises.id	String
🟢 Allowed	sessions[].caller.identity.onPremises.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.phone	Identity
🟡 Pseudonymized	sessions[].caller.identity.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.phone.id	String
🟢 Allowed	sessions[].caller.identity.phone.tenantId	String
🟡 Pseudonymized	sessions[].caller.identity.user	Identity
🟡 Pseudonymized	sessions[].caller.identity.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	sessions[].caller.identity.user.id	String
🟢 Allowed	sessions[].caller.identity.user.tenantId	String
🟢 Allowed	sessions[].endDateTime	ZonedDateTime
🟢 Allowed	sessions[].failureInfo	FailureInfo
🟢 Allowed	sessions[].failureInfo.reason	String
🟢 Allowed	sessions[].failureInfo.stage	String
🟢 Allowed	sessions[].id	String
🟢 Allowed	sessions[].isTest	Boolean
🟢 Allowed	sessions[].modalities	List of String
🟢 Allowed	sessions[].startDateTime	ZonedDateTime
🟢 Allowed	startDateTime	ZonedDateTime
🟢 Allowed	type	String
🟢 Allowed	version	Long

Channel

API docs: https://docs.microsoft.com/en-us/graph/api/resources/channel?view=graph-rest-beta

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	createdDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	isArchived	boolean
🟢 Allowed	isFavoriteByDefault	Boolean
🟢 Allowed	membershipType	String
🟢 Allowed	summary	ChannelSummary
🟢 Allowed	summary.guestsCount	Integer
🟢 Allowed	summary.hasMembersFromOtherTenants	Boolean
🟢 Allowed	summary.membersCount	Integer
🟢 Allowed	summary.ownersCount	Integer
🟢 Allowed	teamId	String
🟢 Allowed	tenantId	String
🟢 Allowed	webUrl	String

Chat

API docs: https://learn.microsoft.com/en-us/graph/api/resources/chat?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	chatType	String
🟢 Allowed	createdDateTime	ZonedDateTime
🟢 Allowed	id	String
🟡 Pseudonymized	lastMessagePreview	ChatMessage
🟢 Allowed	lastMessagePreview.channelIdentity	ChannelIdentity
🟢 Allowed	lastMessagePreview.channelIdentity.channelId	String
🟢 Allowed	lastMessagePreview.channelIdentity.teamId	String
🟢 Allowed	lastMessagePreview.chatId	String
🟢 Allowed	lastMessagePreview.createdDateTime	ZonedDateTime
🟢 Allowed	lastMessagePreview.deletedDateTime	Date
🟢 Allowed	lastMessagePreview.eventDetail	EventDetail
🟢 Allowed	[e-mail]	String
🟢 Allowed	lastMessagePreview.eventDetail.initiator	IdentitySet
🟡 Pseudonymized	lastMessagePreview.from	IdentitySet
🟡 Pseudonymized	lastMessagePreview.from.application	Identity
🟡 Pseudonymized	lastMessagePreview.from.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	lastMessagePreview.from.application.id	String
🟢 Allowed	lastMessagePreview.from.application.tenantId	String
🟢 Allowed	lastMessagePreview.from.applicationInstance	Identity
🟢 Allowed	lastMessagePreview.from.conversation	Identity
🟢 Allowed	lastMessagePreview.from.conversationIdentityType	Identity
🟢 Allowed	lastMessagePreview.from.device	Identity
🟢 Allowed	lastMessagePreview.from.encrypted	Identity
🟢 Allowed	lastMessagePreview.from.guest	Identity
🟢 Allowed	lastMessagePreview.from.onPremises	Identity
🟢 Allowed	lastMessagePreview.from.phone	Identity
🟢 Allowed	lastMessagePreview.from.user	Identity
🟢 Allowed	lastMessagePreview.id	String
🟢 Allowed	lastMessagePreview.importance	String
🟢 Allowed	lastMessagePreview.lastModifiedDateTime	ZonedDateTime
🟢 Allowed	lastMessagePreview.locale	String
🟢 Allowed	lastMessagePreview.messageType	String
🟢 Allowed	lastMessagePreview.reactions[]	List of ChatMessageReaction
🟢 Allowed	lastMessagePreview.reactions[].createdDateTime	Date
🟢 Allowed	lastMessagePreview.reactions[].reactionType	String
🟢 Allowed	lastMessagePreview.reactions[].user	IdentitySet
🟢 Allowed	lastMessagePreview.replies[]	List of ChatMessage
🟢 Allowed	lastMessagePreview.replyToId	String
🟢 Allowed	lastUpdatedDateTime	ZonedDateTime
🟢 Allowed	onlineMeetingInfo	TeamworkOnlineMeetingInfo
🟢 Allowed	onlineMeetingInfo.calendarEventId	String
🟢 Allowed	onlineMeetingInfo.joinWebUrl	String
🟢 Allowed	onlineMeetingInfo.organizer	TeamWorkUserIdentity
🟢 Allowed	onlineMeetingInfo.organizer.id	String
🟢 Allowed	onlineMeetingInfo.organizer.tenantId	String
🟢 Allowed	onlineMeetingInfo.organizer.userIdentityType	String
🟢 Allowed	tenantId	String
🟢 Allowed	viewpoint	ChatViewpoint
🟢 Allowed	viewpoint.isHidden	Boolean
🟢 Allowed	viewpoint.lastMessageReadDateTime	ZonedDateTime
🟢 Allowed	webUrl	String

ChatMessage

API docs: https://docs.microsoft.com/en-us/graph/api/resources/chatmessage?view=graph-rest-beta

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	channelIdentity	ChannelIdentity
🟢 Allowed	channelIdentity.channelId	String
🟢 Allowed	channelIdentity.teamId	String
🟢 Allowed	chatId	String
🟢 Allowed	createdDateTime	ZonedDateTime
🟢 Allowed	deletedDateTime	Date
🟡 Pseudonymized	eventDetail	EventDetail
🟢 Allowed	[e-mail]	String
🟡 Pseudonymized	eventDetail.initiator	IdentitySet
🟡 Pseudonymized	eventDetail.initiator.application	Identity
🟡 Pseudonymized	eventDetail.initiator.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.application.id	String
🟢 Allowed	eventDetail.initiator.application.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.applicationInstance	Identity
🟡 Pseudonymized	eventDetail.initiator.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.applicationInstance.id	String
🟢 Allowed	eventDetail.initiator.applicationInstance.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.conversation	Identity
🟡 Pseudonymized	eventDetail.initiator.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.conversation.id	String
🟢 Allowed	eventDetail.initiator.conversation.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.conversationIdentityType	Identity
🟡 Pseudonymized	eventDetail.initiator.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.conversationIdentityType.id	String
🟢 Allowed	eventDetail.initiator.conversationIdentityType.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.device	Identity
🟡 Pseudonymized	eventDetail.initiator.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.device.id	String
🟢 Allowed	eventDetail.initiator.device.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.encrypted	Identity
🟡 Pseudonymized	eventDetail.initiator.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.encrypted.id	String
🟢 Allowed	eventDetail.initiator.encrypted.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.guest	Identity
🟡 Pseudonymized	eventDetail.initiator.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.guest.id	String
🟢 Allowed	eventDetail.initiator.guest.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.onPremises	Identity
🟡 Pseudonymized	eventDetail.initiator.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.onPremises.id	String
🟢 Allowed	eventDetail.initiator.onPremises.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.phone	Identity
🟡 Pseudonymized	eventDetail.initiator.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.phone.id	String
🟢 Allowed	eventDetail.initiator.phone.tenantId	String
🟡 Pseudonymized	eventDetail.initiator.user	Identity
🟡 Pseudonymized	eventDetail.initiator.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	eventDetail.initiator.user.id	String
🟢 Allowed	eventDetail.initiator.user.tenantId	String
🟡 Pseudonymized	from	IdentitySet
🟡 Pseudonymized	from.application	Identity
🟡 Pseudonymized	from.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.application.id	String
🟢 Allowed	from.application.tenantId	String
🟡 Pseudonymized	from.applicationInstance	Identity
🟡 Pseudonymized	from.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.applicationInstance.id	String
🟢 Allowed	from.applicationInstance.tenantId	String
🟡 Pseudonymized	from.conversation	Identity
🟡 Pseudonymized	from.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.conversation.id	String
🟢 Allowed	from.conversation.tenantId	String
🟡 Pseudonymized	from.conversationIdentityType	Identity
🟡 Pseudonymized	from.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.conversationIdentityType.id	String
🟢 Allowed	from.conversationIdentityType.tenantId	String
🟡 Pseudonymized	from.device	Identity
🟡 Pseudonymized	from.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.device.id	String
🟢 Allowed	from.device.tenantId	String
🟡 Pseudonymized	from.encrypted	Identity
🟡 Pseudonymized	from.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.encrypted.id	String
🟢 Allowed	from.encrypted.tenantId	String
🟡 Pseudonymized	from.guest	Identity
🟡 Pseudonymized	from.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.guest.id	String
🟢 Allowed	from.guest.tenantId	String
🟡 Pseudonymized	from.onPremises	Identity
🟡 Pseudonymized	from.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.onPremises.id	String
🟢 Allowed	from.onPremises.tenantId	String
🟡 Pseudonymized	from.phone	Identity
🟡 Pseudonymized	from.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.phone.id	String
🟢 Allowed	from.phone.tenantId	String
🟡 Pseudonymized	from.user	Identity
🟡 Pseudonymized	from.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	from.user.id	String
🟢 Allowed	from.user.tenantId	String
🟢 Allowed	id	String
🟢 Allowed	importance	String
🟢 Allowed	lastModifiedDateTime	ZonedDateTime
🟢 Allowed	locale	String
🟢 Allowed	messageType	String
🟡 Pseudonymized	reactions[]	List of ChatMessageReaction
🟢 Allowed	reactions[].createdDateTime	Date
🟢 Allowed	reactions[].reactionType	String
🟡 Pseudonymized	reactions[].user	IdentitySet
🟡 Pseudonymized	reactions[].user.application	Identity
🟡 Pseudonymized	reactions[].user.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.application.id	String
🟢 Allowed	reactions[].user.application.tenantId	String
🟡 Pseudonymized	reactions[].user.applicationInstance	Identity
🟡 Pseudonymized	reactions[].user.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.applicationInstance.id	String
🟢 Allowed	reactions[].user.applicationInstance.tenantId	String
🟡 Pseudonymized	reactions[].user.conversation	Identity
🟡 Pseudonymized	reactions[].user.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.conversation.id	String
🟢 Allowed	reactions[].user.conversation.tenantId	String
🟡 Pseudonymized	reactions[].user.conversationIdentityType	Identity
🟡 Pseudonymized	reactions[].user.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.conversationIdentityType.id	String
🟢 Allowed	reactions[].user.conversationIdentityType.tenantId	String
🟡 Pseudonymized	reactions[].user.device	Identity
🟡 Pseudonymized	reactions[].user.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.device.id	String
🟢 Allowed	reactions[].user.device.tenantId	String
🟡 Pseudonymized	reactions[].user.encrypted	Identity
🟡 Pseudonymized	reactions[].user.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.encrypted.id	String
🟢 Allowed	reactions[].user.encrypted.tenantId	String
🟡 Pseudonymized	reactions[].user.guest	Identity
🟡 Pseudonymized	reactions[].user.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.guest.id	String
🟢 Allowed	reactions[].user.guest.tenantId	String
🟡 Pseudonymized	reactions[].user.onPremises	Identity
🟡 Pseudonymized	reactions[].user.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.onPremises.id	String
🟢 Allowed	reactions[].user.onPremises.tenantId	String
🟡 Pseudonymized	reactions[].user.phone	Identity
🟡 Pseudonymized	reactions[].user.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.phone.id	String
🟢 Allowed	reactions[].user.phone.tenantId	String
🟡 Pseudonymized	reactions[].user.user	Identity
🟡 Pseudonymized	reactions[].user.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	reactions[].user.user.id	String
🟢 Allowed	reactions[].user.user.tenantId	String
🟡 Pseudonymized	replies[]	List of ChatMessage
🟢 Allowed	replies[].channelIdentity	ChannelIdentity
🟢 Allowed	replies[].channelIdentity.channelId	String
🟢 Allowed	replies[].channelIdentity.teamId	String
🟢 Allowed	replies[].chatId	String
🟢 Allowed	replies[].createdDateTime	ZonedDateTime
🟢 Allowed	replies[].deletedDateTime	Date
🟡 Pseudonymized	replies[].eventDetail	EventDetail
🟢 Allowed	replies[][e-mail]	String
🟡 Pseudonymized	replies[].eventDetail.initiator	IdentitySet
🟡 Pseudonymized	replies[].eventDetail.initiator.application	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.application.id	String
🟢 Allowed	replies[].eventDetail.initiator.application.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.applicationInstance	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.applicationInstance.id	String
🟢 Allowed	replies[].eventDetail.initiator.applicationInstance.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.conversation	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.conversation.id	String
🟢 Allowed	replies[].eventDetail.initiator.conversation.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.conversationIdentityType	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.conversationIdentityType.id	String
🟢 Allowed	replies[].eventDetail.initiator.conversationIdentityType.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.device	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.device.id	String
🟢 Allowed	replies[].eventDetail.initiator.device.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.encrypted	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.encrypted.id	String
🟢 Allowed	replies[].eventDetail.initiator.encrypted.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.guest	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.guest.id	String
🟢 Allowed	replies[].eventDetail.initiator.guest.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.onPremises	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.onPremises.id	String
🟢 Allowed	replies[].eventDetail.initiator.onPremises.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.phone	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.phone.id	String
🟢 Allowed	replies[].eventDetail.initiator.phone.tenantId	String
🟡 Pseudonymized	replies[].eventDetail.initiator.user	Identity
🟡 Pseudonymized	replies[].eventDetail.initiator.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].eventDetail.initiator.user.id	String
🟢 Allowed	replies[].eventDetail.initiator.user.tenantId	String
🟡 Pseudonymized	replies[].from	IdentitySet
🟡 Pseudonymized	replies[].from.application	Identity
🟡 Pseudonymized	replies[].from.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.application.id	String
🟢 Allowed	replies[].from.application.tenantId	String
🟡 Pseudonymized	replies[].from.applicationInstance	Identity
🟡 Pseudonymized	replies[].from.applicationInstance.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.applicationInstance.id	String
🟢 Allowed	replies[].from.applicationInstance.tenantId	String
🟡 Pseudonymized	replies[].from.conversation	Identity
🟡 Pseudonymized	replies[].from.conversation.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.conversation.id	String
🟢 Allowed	replies[].from.conversation.tenantId	String
🟡 Pseudonymized	replies[].from.conversationIdentityType	Identity
🟡 Pseudonymized	replies[].from.conversationIdentityType.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.conversationIdentityType.id	String
🟢 Allowed	replies[].from.conversationIdentityType.tenantId	String
🟡 Pseudonymized	replies[].from.device	Identity
🟡 Pseudonymized	replies[].from.device.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.device.id	String
🟢 Allowed	replies[].from.device.tenantId	String
🟡 Pseudonymized	replies[].from.encrypted	Identity
🟡 Pseudonymized	replies[].from.encrypted.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.encrypted.id	String
🟢 Allowed	replies[].from.encrypted.tenantId	String
🟡 Pseudonymized	replies[].from.guest	Identity
🟡 Pseudonymized	replies[].from.guest.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.guest.id	String
🟢 Allowed	replies[].from.guest.tenantId	String
🟡 Pseudonymized	replies[].from.onPremises	Identity
🟡 Pseudonymized	replies[].from.onPremises.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.onPremises.id	String
🟢 Allowed	replies[].from.onPremises.tenantId	String
🟡 Pseudonymized	replies[].from.phone	Identity
🟡 Pseudonymized	replies[].from.phone.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.phone.id	String
🟢 Allowed	replies[].from.phone.tenantId	String
🟡 Pseudonymized	replies[].from.user	Identity
🟡 Pseudonymized	replies[].from.user.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	replies[].from.user.id	String
🟢 Allowed	replies[].from.user.tenantId	String
🟢 Allowed	replies[].id	String
🟢 Allowed	replies[].importance	String
🟢 Allowed	replies[].lastModifiedDateTime	ZonedDateTime
🟢 Allowed	replies[].locale	String
🟢 Allowed	replies[].messageType	String
🟢 Allowed	replies[].reactions[]	List of ChatMessageReaction
🟢 Allowed	replies[].replies[]	List of ChatMessage
🟢 Allowed	replies[].replyToId	String
🟢 Allowed	replyToId	String

DirectRoutingCall

API docs: https://learn.microsoft.com/en-us/graph/api/resources/callrecords-directroutinglogrow?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	callType	String
🟢 Allowed	correlationId	String
🟢 Allowed	duration	Integer
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	failureDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	inviteDateTime	ZonedDateTime
🟢 Allowed	mediaBypassEnabled	Boolean
🟢 Allowed	mediaPathLocation	String
🟢 Allowed	signalingLocation	String
🟢 Allowed	startDateTime	ZonedDateTime
🟢 Allowed	successfulCall	Boolean
🟢 Allowed	trunkFullyQualifiedDomainName	String
🟢 Allowed	userId	String

MeetingAttendanceReport

API docs: https://learn.microsoft.com/en-us/graph/api/resources/meetingattendancereport?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟡 Pseudonymized	attendanceRecords[]	List of AttendanceReport
🟢 Allowed	attendanceRecords[].attendanceIntervals[]	List of AttendanceInterval
🟢 Allowed	attendanceRecords[].attendanceIntervals[].durationInSeconds	Integer
🟢 Allowed	attendanceRecords[].attendanceIntervals[].joinDateTime	ZonedDateTime
🟢 Allowed	attendanceRecords[].attendanceIntervals[].leaveDateTime	ZonedDateTime
🟡 Pseudonymized	attendanceRecords[].emailAddress	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟡 Pseudonymized	attendanceRecords[].identity	Identity
🟡 Pseudonymized	attendanceRecords[].identity.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	attendanceRecords[].identity.id	String
🟢 Allowed	attendanceRecords[].identity.tenantId	String
🟢 Allowed	attendanceRecords[].role	String
🟢 Allowed	attendanceRecords[].totalAttendanceInSeconds	Integer
🟢 Allowed	id	String
🟢 Allowed	meetingEndDateTime	ZonedDateTime
🟢 Allowed	meetingStartDateTime	ZonedDateTime
🟢 Allowed	totalParticipantCount	Integer

OnlineMeeting

API docs: https://learn.microsoft.com/en-us/graph/api/resources/onlinemeeting?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	allowAttendeeToEnableCamera	Boolean
🟢 Allowed	allowAttendeeToEnableMic	Boolean
🟢 Allowed	allowMeetingChat	String
🟢 Allowed	allowParticipantsToChangeName	Boolean
🟢 Allowed	allowTeamworkReactions	Boolean
🟢 Allowed	allowedPresenters	String
🟢 Allowed	chatInfo	ChatInfo
🟢 Allowed	chatInfo.messageId	String
🟢 Allowed	chatInfo.replyChainMessageId	String
🟢 Allowed	chatInfo.threadId	String
🟢 Allowed	creationDateTime	ZonedDateTime
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	joinWebUrl	String
🟢 Allowed	lobbyBypassSettings	LobbyBypassSettings
🟢 Allowed	lobbyBypassSettings.isLobbyBypassEnabled	boolean
🟢 Allowed	lobbyBypassSettings.lobbyBypassDuration	int
🟡 Pseudonymized	participants	MeetingParticipant
🟡 Pseudonymized	participants.attendees[]	List of MeetingParticipantInfo
🟡 Pseudonymized	participants.attendees[].identity	IdentitySet
🟡 Pseudonymized	participants.attendees[].identity.application	Identity
🟡 Pseudonymized	participants.attendees[].identity.application.email	String	Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	participants.attendees[].identity.application.id	String
🟢 Allowed	participants.attendees[].identity.application.tenantId	String
🟢 Allowed	participants.attendees[].identity.applicationInstance	Identity
🟢 Allowed	participants.attendees[].identity.conversation	Identity
🟢 Allowed	participants.attendees[].identity.conversationIdentityType	Identity
🟢 Allowed	participants.attendees[].identity.device	Identity
🟢 Allowed	participants.attendees[].identity.encrypted	Identity
🟢 Allowed	participants.attendees[].identity.guest	Identity
🟢 Allowed	participants.attendees[].identity.onPremises	Identity
🟢 Allowed	participants.attendees[].identity.phone	Identity
🟢 Allowed	participants.attendees[].identity.user	Identity
🟢 Allowed	participants.attendees[].role	String
🟢 Allowed	participants.attendees[].upn	String
🟢 Allowed	participants.organizer	MeetingParticipantInfo
🟢 Allowed	shareMeetingChatHistoryDefault	String
🟢 Allowed	startDateTime	ZonedDateTime
🟢 Allowed	videoTeleconferenceId	String
🟢 Allowed	watermarkProtection	WatermarkProtection
🟢 Allowed	watermarkProtection.isEnabledForContentSharing	boolean
🟢 Allowed	watermarkProtection.isEnabledForVideo	boolean

PSTNCall

API docs: https://learn.microsoft.com/en-us/graph/api/resources/callrecords-pstncalllogrow?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	callDurationSource	String
🟢 Allowed	callId	String
🟢 Allowed	callType	String
🟢 Allowed	charge	Double
🟢 Allowed	conferenceId	String
🟢 Allowed	connectionCharge	Double
🟢 Allowed	currency	String
🟢 Allowed	destinationContext	String
🟢 Allowed	destinationName	String
🟢 Allowed	duration	Integer
🟢 Allowed	endDateTime	ZonedDateTime
🟢 Allowed	id	String
🟢 Allowed	inventoryType	String
🟢 Allowed	licenseCapability	String
🟢 Allowed	operator	String
🟢 Allowed	startDateTime	ZonedDateTime
🟢 Allowed	tenantCountryCode	String
🟢 Allowed	usageCountryCode	String
🟢 Allowed	userId	String

Team

API docs: https://learn.microsoft.com/en-us/graph/api/resources/team?view=graph-rest-1.0

DLP Proxy docs: Microsoft Teams

DLP Proxy	Property Name	Type	Description
🟢 Allowed	id	String
🟢 Allowed	internalId	String
🟢 Allowed	isArchived	Boolean
🟢 Allowed	visibility	String