Forum Discussion
Internal Teams Video Calls
Hi - How do i query internal teams video calls (ie one employee calling another via Teams) in ediscovery - specifically what itemclass (or otherwise ) should i be reviewing. I can't seem to get any results despite seeing the activity in the Teams Admin centre ( eg appearing as a list of "Meetings" with type "Conference" in the manager user section). I've tried obvious ones ( like Meeting) but they dont return any results. Thanks
1 Reply
This is a really good question, and it confuses a lot of compliance admins because internal Teams audio and video calls are handled differently from regular chat messages or scheduled meetings in Microsoft Purview eDiscovery.
As of October 2025, one-to-one or group Teams calls (ad-hoc voice or video) do not generate an “ItemClass” object that can be directly queried or searched in eDiscovery the same way as emails or chats. These calls are treated as real-time communications events and are not stored as retrievable items in Exchange mailboxes or Teams chat storage. The metadata you see in the Teams Admin Center (Meetings and Calls reports) comes from the Call Records and Call Analytics service, not from the Microsoft 365 compliance storage that eDiscovery searches.
Here’s how this works:
eDiscovery (Standard or Premium) searches data stored in Exchange mailboxes, SharePoint, OneDrive, and Teams chat. It captures chat messages, shared files, and scheduled meeting invites.
Ad-hoc Teams calls between users (when someone clicks “Call” in Teams) generate call detail records (CDRs) that are logged in the Microsoft Teams Call Records API and surfaced in the Teams Admin Center, but those call sessions do not create stored conversation items that eDiscovery can index.
There is no ItemClass (such as “IPM.Appointment” or “IPM.Call”) for Teams voice or video calls in Exchange.
If your goal is to retrieve evidence of the call occurrence—who called whom, when, and for how long—you must use one of the following supported sources:
Microsoft Graph Call Records API or Export Call Data in Teams Admin Center. This is the only place where the complete metadata for internal Teams calls is stored.
Audit Logs (Microsoft Purview Audit) which contain entries like UserMadeAP2PCall, UserJoinedMeeting, or CallStarted. These audit records include the timestamp, user, and session correlation ID, and they are searchable in the Purview Audit portal or via PowerShell.
eDiscovery can only capture content associated with Teams chats, files, or scheduled meetings, not live call sessions.
So, the internal Teams video and audio calls do not produce searchable items in eDiscovery because they are transient communications logged only in call analytics and audit logs. For compliance or investigative purposes, use the Audit log search or Call Records API instead of eDiscovery queries.
Please hit like if you like the solution.
