Skip to main content
Question

Microsoft graph mail delete action(soft delete or hard delete)

  • January 19, 2026
  • 3 replies
  • 15 views

Nagarjuna11
Forum|alt.badge.img+5

Hi All,

In the Microsoft Graph Mail integration, there is an action called “Delete Mail.” If this action is executed via Google SecOps SOAR, will the email be permanently deleted, or is there any option to restore or release it back afterward?
 

3 replies

ylandovskyy
Staff
Forum|alt.badge.img+16
  • Staff
  • January 21, 2026

Hey ​@Nagarjuna11 ,

 

The action uses this API endpoint and based on what I see, it’s a soft delete. You can also move the emails to the folder: recoverableitemsdeletions, which does the same soft delete.

For Hard Delete, this API endpoint should be used.


Nagarjuna11
Forum|alt.badge.img+5
  • Author
  • Bronze 1
  • January 21, 2026

Thanks ​@ylandovskyy,
Is there any action from SOAR side to restore the email?


ylandovskyy
Staff
Forum|alt.badge.img+16
  • Staff
  • January 21, 2026

@Nagarjuna11 ,

 

That will be a FR, but maybe you can just move the email to some other folder and it will work as “restore”.