---
title: "List email violations"
method: GET
path: "/sdg/v1/emailViolations"
tags: ["Sensitive Data Governance"]
---

# List email violations

`GET /sdg/v1/emailViolations`

## Request

- Base URL: `https://apis.druva.com/insync`
- URL: `https://apis.druva.com/insync/sdg/v1/emailViolations`
- Auth: API key in header `Authorization`

Get the list of email violations.

## Query parameters

- `policyID` integer
- `pageToken` string
- `violationType` 'all' | 'critical' | 'nonCritical'
- `violationStatus` 'pendingOnAdmin' | 'pendingOnUser'
- `resolutionType` 'active' | 'resolved' | 'quarantined'

## Response `200`

OK

- EmailViolationsResponse
  - `violations` EmailViolation[]: List of email violations.
    - `id` integer: The unique ID of the email violation.
    - `emailReceivedFrom` string: The sender of the email for which violation was reported.
    - `mailTime` string, date-time: The date and time of the violated email.
    - `emailSubject` string: The subject of the email for which the violation was reported.
    - `resourceParentID` integer: The unique ID of the user associated with the violated email.
    - `violatedPolicies` integer[]: List of ID(s) of the Sensitive Data Governance policy(s) using which the violation was reported.
    - `violatedDatatypes` integer[]: List of ID(s) of the sensitive data type(s) using which the violation was reported.
    - `versionCount` integer: The total version count of the email for which the violation was reported.
    - `lastUpdated` string, date-time: The date and time when the email violation was last reported.
    - `datatypeCount` integer: The total count of the sensitive data type(s) using which the violation was reported.
    - `version` integer: The exact version of the email for which the violation was reported.
    - `resourceID` integer: The unique ID of the device associated with the email for which violation was reported.
    - `violationStatus` string: The current violation status of the email, that is whether it is Pending on User or Pending on Admin.
    - `severity` string: The severity of the email violation, whether it critical or non-critical.
  - `pageToken` string: The token to access the next page of results.

## Other responses

- `400`: Bad Request
- `403`: Access denied: Insufficient permissions. User requires specific access rights and minimum permissions. Details: https://help.druva.com/en/articles/15069296

---

[API](https://skmtc.dev/druva/apis/insync-cloud.md) - [All operations](https://skmtc.dev/druva/apis/insync-cloud/llms.txt) - [OpenAPI document](https://skmtc.dev/druva/apis/insync-cloud/revisions/a0ce6d05033c?raw)
