Transcription management Q&A
Full whitepaper · Supporting references
Edited from a working Q&A log captured on 29–30 September 2026, with key claims spot-checked against Microsoft Learn on 2 November 2026. This page is editorial guidance for a customer conversation. It is not Microsoft guidance or legal advice.
What this page is
This page gives practical answers to one customer requirement: remove Teams meeting recordings and transcripts after 7 days, with deletion users can’t override, and restrict who can access them.
It has two kinds of source:
| Source | Status |
|---|---|
| Transcription Management in Microsoft 365 Copilot | Microsoft’s whitepaper (©2025; PDF metadata 17 March 2025), converted in full in this library. Statements drawn from it link to the relevant page. |
| Microsoft Learn and support documentation | Used for behaviour the whitepaper doesn’t cover or that has changed since: recycle bins, Teams Premium templates, Priority Cleanup, PowerShell and Graph. Linked inline and listed in Supporting references. |
The answers combine the two and add editorial recommendations. Where the whitepaper and current Learn pages disagree, both are recorded rather than silently reconciled. Product behaviour, licensing and preview status can change.
Questions
| # | Question | Short answer |
|---|---|---|
| 1 | What does the whitepaper say about retention? | Teams expiry is for storage, not compliance; Purview retention is the compliance control; legal holds override both. |
| 2 | How can a customer remove recordings and transcripts after 7 days? | 7-day Teams expiry as a baseline, plus a Purview delete-only policy if it must hold. |
| 3 | Does retention deletion still go through the 93-day recycle bins? | Yes. Only Priority Cleanup permanent deletion, manual purge or an API hard delete bypasses them. |
| 4 | Can users’ access to the recycle bins be removed? | No. A OneDrive owner can always reach both stages of their own bin. |
| 5 | What does the whitepaper say about sensitive meetings and Teams Premium? | Restrict who can record and who can access artefacts; labels override templates. |
| 6 | Does Teams Premium add anything for expiry or templates? | Nothing for expiry. It helps with prevention: templates, labels and E2EE. |
| 7 | Can a template set an expiry users can’t override? | No. Expiry is admin policy only; only Purview can’t be overridden. |
| 8 | What can a Teams admin policy do? | Turn recording off, set default expiry and require consent, but not enforce deletion. |
| 9 | Can Priority Cleanup be managed through Graph or PowerShell? | PowerShell partly; no Graph API found; approval is portal-based. |
| 10 | Can the 7-day removal be automated? | Yes: Purview policy, a scheduled Graph permanentDelete job, or Priority Cleanup with approval. |
| 11 | Can access be limited to organizers or specific people? | Yes, with Teams Premium or Copilot; channel meetings are the exception. |
Controls at a glance
From preventing a recording to purging it
Scroll sideways to read the full diagram →
| Control | Prevents creation | Sets expiry | Users can override | Bypasses recycle bins |
|---|---|---|---|---|
| Admin meeting policy (recording off) | Yes | — | No | — |
| Teams expiry (admin policy) | No | Yes, new files, per user or group | Yes | No |
| Sensitivity label or template (Teams Premium) | Restricts who records | No | Depends on lock | — |
| End-to-end encryption | Yes (no recording, transcript or Copilot) | — | — | — |
| “Copilot only during the meeting” | No transcript stored | — | — | — |
| Purview delete-only retention | No | Yes | No | No (93 days) |
| Priority Cleanup, permanent deletion (preview) | No | Deletes after approval | No | Yes |
Graph permanentDelete (custom script) |
No | Script-defined | No | Yes, but not documented as overriding holds |
Accuracy notes
Checked on 2 November 2026 against Microsoft Learn using the Learn documentation tools. Pages checked are marked in Supporting references; other details are carried over from the 29 September 2026 log without re-check.
Confirmed: Teams expiry range (1–99,999 days, default 120, new items only); owners can change expiry and restored files aren’t deleted again; the 93-day recycle-bin process and up to seven days for the timer job; Preservation Hold library timing of up to 37 days; the 14-day SharePoint backup window; second-stage purge is immediate. Also confirmed: Priority Cleanup permanent deletion (public preview from 24 August 2026), its approvals, two-person rule, audit events and review-set exclusion; -PriorityCleanup on the retention cmdlets; Graph permanentDelete and its permissions; the admin, label, template and organizer control matrix; two “who can record” options in current documentation; E2EE disabling recording, transcription and Copilot; Graph transcript access off by default.
Corrections and qualifications made to the original log:
| Original claim | Now reads | Source |
|---|---|---|
| Purview “wins over” the Teams expiry setting | Retention (retain) wins over expiry; with a Purview deletion policy, the earlier date applies | Recording compliance |
| Templates are opt-in per meeting unless combined with a label | A custom template can be set as the default in a meeting template policy (organizers need Teams Premium) | Set a custom meeting template as the default |
| Templates are the only way to enforce “who has access to the recording and transcript” | The matrix says templates can, but the template option list doesn’t show it; unconfirmed, verify in the Teams admin centre | Recording options for sensitive meetings; Create a custom meeting template |
| The 93-day period is fixed, with no supported setting to shorten it | Learn documents 93 days and no shortening setting was found, but Learn doesn’t state this explicitly, and one Teams page quotes “unless the administrator has changed the setting”; treated as fixed pending confirmation | Retention for SharePoint and OneDrive; Recording expiration policy |
| Priority Cleanup permanent deletion is the “permanently gone” route | Qualified: SharePoint keeps backups for 14 days beyond actual deletion (site-collection restore only); records and regulatory records are excluded | SharePoint data deletion; Override holds to clean up files |
| Download blocking needs SharePoint Advanced Management and Copilot | Learn lists SharePoint Advanced Management as the prerequisite; the whitepaper’s “and Copilot licences” is kept as a source statement. Org-wide, new files only | Block the download of meeting recordings; page 10 |
-ChannelRecordingDownload restricts channel downloads |
Qualified: it is an org-wide setting; channel owners keep full access | Manage Teams recording policies |
| Raw API deletes can’t override retention or holds | Kept, but labelled as an inference: the permanentDelete page is silent on retention |
driveItem: permanentDelete |
Additions from Learn: expiry deletion usually happens within a day (rarely up to five days); moving a recording removes it from expiry; -1 means never expire; A1 users are capped at 30 days; Work IQ transcript access is off by default and takes effect on 14 November 2026; Priority Cleanup can take up to seven days to enable and to delete after approval.
Not verified: the “Restore your OneDrive” rollback period; the support article on artefact access; whether a PowerShell-created Priority Cleanup policy can select permanent deletion; how Graph permanentDelete behaves on retained items.
What was left out
The source log’s first two sections, a workspace review and the whitepaper conversion and registration work, are project notes and aren’t reproduced. Three items were also removed or narrowed: an unsourced reference to “field reports” of inconsistent Graph deletes at scale (replaced by a reconciliation step); a “minimum period 1 day” claim for Purview delete-only policies, which wasn’t rechecked; and repeated recommendations, now consolidated. The original log remains in the repository as transcription-management-retention-and-access-qa.md.
1. Retention and deletion
Q&A index · Full whitepaper · Supporting references
Edited from a working Q&A log (29–30 September 2026). Whitepaper statements link to the converted page; other statements cite Microsoft Learn, spot-checked on 2 November 2026. The customer requirement throughout: remove Teams meeting recordings and transcripts after 7 days, with deletion users cannot override.
Q1. What does the whitepaper say about retention?
Short answer. Teams auto-expiration is the built-in control, but the whitepaper says it is for storage management and "not intended for compliance purposes". Microsoft Purview retention is the recommended compliance control, and legal holds override both (page 14).
| Control | What the whitepaper says | Page |
|---|---|---|
| Teams auto-expiration | Default 120 days for meeting recordings and transcripts, 60 days for call recordings; customers can change the periods; files are deleted automatically at expiry. The purpose is storage volume (about 400 MB per recorded hour), not compliance. Organizers and co-organizers can delete earlier. | 14 |
| Purview auto-apply retention labels | Target Teams recordings and transcripts alone; requires an E5/A5/G5 SKU. | 14 |
| Purview retention policies | General file-based retention that also covers recordings and transcripts; wider SKU list. "Configured policies supersede auto-expiration settings and user’s attempts to delete files manually." | 14 |
| Legal holds | Supersede other retention and deletion policies. | 14 |
| Copilot summaries in Exchange | Retention and deletion are tied to the transcript or recording for the same meeting; deleting a transcript in Teams deletes both the Exchange and OneDrive copies. | 15 |
| “Copilot only during the meeting” | No transcript is stored, so none of the governance controls apply. | 6, 13 |
If a user deletes a recording before a retention period ends, it disappears from their view but persists in the Preservation Hold library until the period ends (page 14). The whitepaper’s governance “dial” suggests a shorter expiry for organisations that want to minimise storage and exposure, and Purview for content-specific retention (page 16).
Q2. How can a customer remove recordings and transcripts after 7 days?
Short answer. Set the Teams expiry to 7 days as a baseline, then add a Purview delete-only retention policy or auto-apply label at 7 days if users must not be able to keep the files. Neither gives irreversible deletion at day 7 (see Q3).
| Step | Setting | Notes |
|---|---|---|
| 1. Meetings and events | Teams admin centre → Meetings → Meeting policies → Recording & transcription → Recordings and transcriptions automatically expire = On, Default expiration time = 7. PowerShell: Set-CsTeamsMeetingPolicy -Identity <policy> -NewMeetingRecordingExpirationDays 7 |
Range 1–99,999 days; -1 (PowerShell only) means never expire; A1 users are capped at 30 days. Applies to newly created recordings and transcripts only. |
| 2. Calls | Set-CsTeamsCallingPolicy -CallRecordingExpirationDays 7 |
Separate calling policy; the whitepaper gives a 60-day call default (page 14). |
| 3. Enforcement | Purview delete-only retention policy or auto-apply retention label for Teams recordings and transcripts, 7 days | Scope the organizer’s OneDrive (non-channel meetings) and the channel’s SharePoint site (channel meetings). |
| 4. Sensitive meetings | “Copilot only during the meeting”, or a sensitivity label restricting recording to organizers | Prevents the artefact rather than deleting it (page 13). |
How Teams expiry behaves, per Manage Teams recording expiration policy and Recording compliance:
- At expiry the file moves to the recycle bin of its storage location and the expiration date field is cleared. Deletion usually happens within a day of the expiry date, occasionally up to five days.
- The owner is emailed and pointed to the recycle bin. If they restore the file, the expiry setting does not delete it again.
- Owners can change the expiry date of recordings they control, and a recording moved from its original location is no longer affected by the setting.
How Teams expiry and Purview interact (corrected from the original log, which said simply that Purview wins):
| Combination | Outcome |
|---|---|
| Teams expiry + Purview retention (retain) policy | Retention wins. The expiry cannot delete the recording until the retention period ends. |
| Teams expiry + Purview deletion policy | The file is deleted at the earlier of the two dates. |
| Either + eDiscovery or legal hold | The hold wins; deletion is suspended. |
Source: Recording compliance; holds per page 14 and How retention works for SharePoint and OneDrive.
Q3. Does retention deletion still go through the 93-day recycle bins?
Short answer. Yes. A Purview delete-only (or retain-then-delete) policy removes the file from users’ view at the end of the period, but it moves to the recycle bins and is only permanently deleted at the end of 93 days. A 7-day expiry that users cannot override is achievable; automatic irreversible deletion at day 7 is not a standard retention behaviour.
Where a deleted recording goes
Scroll sideways to read the full diagram →
What happens at the end of a retention period, per How retention works for SharePoint and OneDrive:
| Stage | Behaviour |
|---|---|
| Timer job | Evaluates items periodically and can take up to seven days to run. |
| Unmodified item at end of period | Moved to the first-stage Recycle Bin. A single 93-day period spans both stages; at day 93 the item is permanently deleted wherever it sits. |
| Copy in the Preservation Hold library | Evaluated only after 30 days in the library, by a job that runs every seven days (up to 37 days), then moved to the second-stage Recycle Bin and deleted after 93 days. |
| Another retention policy, label or eDiscovery hold | Permanent deletion is suspended (first principle of retention). |
| eDiscovery | The Recycle Bin isn’t indexed, so eDiscovery searches can’t find or hold content there. |
Residual copies and recovery paths:
- Second stage: site collection admins can view and restore content during the 93 days.
- Backups: SharePoint keeps backups of all content for 14 days beyond actual deletion. They support only a site-collection-level restore through Microsoft Support, not single files (SharePoint data deletion).
- Configurability: Learn documents the 93-day period and states that recycle-bin quota values are not configurable. It does not document a tenant setting to shorten the 93 days. One Teams page quotes support text saying work or school recycle-bin items are deleted after 93 days "unless the administrator has changed the setting" (Manage Teams recording expiration policy); no such setting was found. Treat the 93 days as fixed unless Microsoft confirms otherwise.
Routes that bypass the 93 days:
| Route | Behaviour | Caveat |
|---|---|---|
| Manual purge | Items deleted from the second-stage (site collection) Recycle Bin are purged immediately (SharePoint data deletion). | Manual, per site; not a scheduled control. |
| Priority Cleanup, Delete data permanently (public preview from 24 August 2026) | Bypasses the SharePoint and OneDrive recycle bins; content is no longer discoverable in SharePoint search, Microsoft 365 Copilot or eDiscovery. Can override retention settings and eDiscovery holds (Permanently delete files with Priority Cleanup). | Requires simulation, a second admin to turn the policy on, and approvers. Not usable on records or regulatory records. Items already in an eDiscovery review set are not deleted. Confirm the option is available in the tenant. |
Graph permanentDelete or SharePoint CSOM/REST delete |
Item is purged and not sent to the recycle bin (driveItem: permanentDelete). | Not a governed compliance control. See Q10. |
Even after hard deletion, the 14-day SharePoint backup window above still applies. The Priority Cleanup documentation does not address backups, so this is an editorial inference from the SharePoint data-deletion page.
Recommended design
- Set the Teams meeting expiry to 7 days (new items only) as a hygiene baseline. Don’t present it as enforceable.
- Add a Purview delete-only retention policy at 7 days, scoped to organizers’ OneDrive and to channel SharePoint sites. Users lose access at day 7 and can’t extend it. Be explicit that the files persist in recycle bins for up to 93 days.
- If the requirement is “no recoverable copy”, use Priority Cleanup permanent deletion with its approval workflow (preview), or manual purge as a stopgap.
- Prevent artefacts for sensitive meetings: restrict who can record, or use “Copilot only during the meeting”.
- Include adjacent stores: Copilot summaries and prompts in Exchange (the Microsoft Copilot experiences retention location), meeting chat, and any eDiscovery review sets. Otherwise a transcript purge is not a full purge of the meeting’s AI-derived content.
Q4. Can users’ access to the first- and second-stage recycle bins be removed?
Short answer. No. There is no supported setting to disable or hide the recycle bins. In OneDrive, the owner is the site collection admin of their own OneDrive, so they can always reach both stages.
| Bin or location | Who can see and restore deleted items |
|---|---|
| First stage (site Recycle Bin) | Users with edit (Contribute) permission. Visibility follows the item’s permissions before deletion, so people who never had access don’t see it. |
| Second stage (site collection Recycle Bin) | Site collection admins only; not visible to end users (How retention works for SharePoint and OneDrive). |
| OneDrive (non-channel meetings) | The OneDrive owner, who is site collection admin of their own OneDrive, so both stages. Also “Restore your OneDrive” (point-in-time rollback). |
| Team or channel SharePoint site (channel meetings) | Site collection admins (typically team owners), plus SharePoint admins. |
| After 93 days | Only a site-collection-level restore from the 14-day backup, through Microsoft Support. |
Recordings of non-channel meetings are stored in the organizer’s OneDrive (page 8). The practical exposure is therefore the organizer and SharePoint admins; participants with a share link can’t restore someone else’s bin. For channel meetings, anyone with edit rights on the site who could see the item can see it in the first-stage bin.
What can be done:
- Narrow access in the first place. Restrict edit permission on team sites and use view-only or blocked download for participants. The bin only exposes what a user could already see.
- Control site collection admins on team sites. This isn’t possible on a user’s own OneDrive.
- Purge proactively. A site collection admin can empty both stages; items deleted from the second stage are purged immediately. There is no scheduled bin purge.
- Use Purview retention. While a retain policy applies, users can’t permanently delete; deletions land in the Preservation Hold library.
- Use Priority Cleanup permanent deletion (preview). This is the supported, audited route that bypasses the bins.
- Prevent creation. Use the admin policy to turn recording off, end-to-end encryption, labels or templates, or “Copilot only during the meeting”. No file means no bin.
Disclose the residual risk to the customer: unless content is permanently purged, the OneDrive owner can recover their own deleted recordings from both bins for up to 93 days.
3. Admin controls, Priority Cleanup and automation
Q&A index · Full whitepaper · Supporting references
Edited from a working Q&A log (29–30 September 2026). Statements cite Microsoft Learn, spot-checked on 2 November 2026, or the converted whitepaper. Priority Cleanup permanent deletion is in public preview; confirm availability in the tenant before relying on it.
Q8. What can a Teams admin policy do?
Short answer. The meeting policy (Teams admin centre → Meetings → Meeting policies, or Set-CsTeamsMeetingPolicy, assigned per user or group) is the only control that can turn recording or transcription off entirely. It also sets the default expiry and can require consent. It is the prevention and default layer; Purview is the enforcement and deletion layer.
Recording and transcription settings (Teams settings and policies reference; Manage recording options for sensitive meetings):
| Setting | What it does | PowerShell |
|---|---|---|
| Meeting recording | Allows or blocks recording for the users the policy applies to | -AllowCloudRecording |
| Transcription | Allows or blocks transcription, and captions during playback | -AllowTranscription |
| Recordings automatically expire, Default expiration time | Default expiry for new recordings and transcripts (1–99,999 days; default 120) | -NewMeetingRecordingExpirationDays |
| Require participant agreement | Participants are muted with cameras off until they agree; declining gives a view-only experience; consent is recorded in the attendance report | -ExplicitRecordingConsent |
| Copilot | Sets the organizer default; only On with saved transcript required can be enforced | -Copilot |
| Store recordings outside your country or region | Off by default | -AllowRecordingStorageOutsideRegion |
| Channel recording download | Org-wide. Block saves channel recordings to a Recordings\View only folder: members can watch but not download or edit; channel owners keep full access |
-ChannelRecordingDownload |
| Speaker attribution | Whether speakers are identified in transcripts; users can opt out by default | -SpeakerAttributionMode |
| Auto recording | Whether organizers see Record and transcribe automatically | -AutoRecording |
| Privacy and security URL | Custom privacy statement link for recordings and transcripts | Meeting policy |
Tenant-level and calling settings:
- Transcript API access (Meetings → Meeting settings): Microsoft Graph access is off by default; when off, apps and agents can’t read transcripts through Graph regardless of app permissions. A separate Work IQ access setting for real-time transcripts is also off by default and takes effect on 14 November 2026 (Manage transcript API access). PowerShell:
Set-CsTeamsMeetingConfiguration -EnableGraphTranscriptAccess. - Calling policy (Voice → Calling policies): call recording, call transcription, Copilot for calling (page 7), consent, and
-CallRecordingExpirationDaysfor call recording expiry. - Blocking downloads from OneDrive and SharePoint:
Set-SPOTenant -BlockDownloadFileTypePolicy $true -BlockDownloadFileTypeIds TeamsMeetingRecording. This is an org-wide policy for new recordings and transcripts, with security-group exemptions. Learn lists SharePoint Advanced Management as the prerequisite (Block the download of Teams meeting recording files); the whitepaper says SharePoint Advanced Management and Copilot licences (page 10). - Adjacent levers for sensitive meetings: lobby and anonymous join, who can present, meeting chat including in-meeting-only values (page 12), watermarks, screen sharing, attendance reports, and live events recording.
| Admin policy can | Admin policy can’t |
|---|---|
| Turn recording or transcription off for groups that must never have it. Templates and labels can’t. | Make the expiry non-overridable: the owner can change the expiry date of each file, and a file restored from the recycle bin isn’t deleted again. |
| Set a 7-day default expiry for one organizer group while others keep 120 days. | Set expiry per meeting, or through a template or label. |
| Require consent, restrict Copilot to saved-transcript mode, block channel downloads, and set the privacy URL. | Permanently delete or skip the recycle bins. That needs Purview, and Priority Cleanup for a true purge. |
For the customer: a group-scoped meeting policy for sensitive-meeting organizers (7-day expiry, consent on, recording restricted), plus a Purview delete-only policy if the 7 days must hold.
Q9. Can Priority Cleanup be managed through Graph or PowerShell?
Short answer. PowerShell: partly. Security & Compliance PowerShell exposes a -PriorityCleanup switch on the retention cmdlets. Graph: no Priority Cleanup API was found. The documented approval and disposal workflow is portal-based.
Cmdlets with a documented -PriorityCleanup switch (Security & Compliance PowerShell, Connect-IPPSSession):
| Cmdlet | Use |
|---|---|
New-RetentionCompliancePolicy -PriorityCleanup (with -SkipPriorityCleanupConfirmation) |
Create the cleanup policy |
New-RetentionComplianceRule -PriorityCleanup |
Create the rule; the KeyQL query goes in -ContentMatchQuery |
Set-RetentionCompliancePolicy, Remove-RetentionCompliancePolicy, Remove-RetentionComplianceRule |
Modify or remove |
Get-RetentionCompliancePolicy -PriorityCleanup, Get-RetentionComplianceRule -PriorityCleanup |
List |
The cmdlet reference pages list these switches but give little description. The following is an illustrative sketch, not a tested script:
Connect-IPPSSession -UserPrincipalName admin@contoso.com
New-RetentionCompliancePolicy -Name "Meeting recordings purge" `
-SharePointLocation All -OneDriveLocation All `
-PriorityCleanup -Comment "Reviewed cleanup of Teams recordings and transcripts"
New-RetentionComplianceRule -Name "Meeting recordings purge rule" `
-Policy "Meeting recordings purge" `
-ContentMatchQuery "ProgID:Media AND ProgID:Meeting" `
-PriorityCleanup
Priority Cleanup: who does what
Scroll sideways to read the full diagram →
Caveats, from Override holds to clean up files and Permanently delete files with Priority Cleanup:
- Portal workflow. For SharePoint and OneDrive, simulation must run at least once and after any change other than the description. A second Priority Cleanup admin turns the policy on, because the last editor can’t. Approvers then select Approve disposal under Pending cleanups. The cmdlet reference doesn’t document the turn-on or approval steps, so plan for human approval.
- Two deletion modes. Standard Priority Cleanup moves items to the second-stage Recycle Bin, where the normal 93-day process applies. Delete data permanently bypasses the bins and is documented only as a portal choice. No cmdlet parameter for it was found, so test what a PowerShell-created policy does before relying on it.
- Roles and approvals. Priority Cleanup Admin is needed to create policies, and every item needs approval from someone other than the creator. eDiscovery admin approval is also needed for items under eDiscovery hold. Auditing must be on at least one day before the first policy.
- Exclusions. Records and regulatory records can’t be cleaned up. Items already in an eDiscovery review set aren’t deleted.
- Timing. A policy can take up to seven days to reach Enabled (Success). Allow up to seven days after approval for deletion.
What can be automated around it:
- Monitoring: search the audit log with the policy’s Cleanup ID for
PriorityCleanupTagApplied,PriorityCleanupFileRecycled(standard mode) andPriorityCleanupFileDeleted(permanent mode). - Discovery: identify content with eDiscovery or Graph search before targeting a policy.
- Not a substitute: SharePoint CSOM/REST delete (as opposed to recycle) purges immediately without using the recycle bins (SharePoint data deletion). It is not documented as overriding retention or holds, which is the gap Priority Cleanup fills.
Q10. Can the 7-day removal be automated with a script, agent or CLI?
Short answer. Yes, by three routes that trade automation against governance. A Purview policy needs no script. A scheduled Graph permanentDelete job is fully automatic and irreversible but ungoverned. Priority Cleanup is governed but keeps a human approval step.
| Route | Automation | Outcome at day 7 | Governance |
|---|---|---|---|
| 1. Purview delete-only retention, 7 days | Service-side, no script | Removed from users’ view; 93-day recycle-bin process follows | Users can’t override; holds suspend deletion |
2. Scheduled Graph permanentDelete |
Fully scripted | Item purged, not sent to the recycle bin | Custom control; no approval or simulation |
| 3. Priority Cleanup policy | Policy runs continually; disposal needs approval | Deleted after approval, not exactly at day 7 | Simulation, two-person rule, approvers, audit |
Route 2: Graph permanentDelete. POST /drives/{drive-id}/items/{item-id}/permanentDelete permanently removes an item without sending it to the recycle bin. The least-privileged application permission is Files.ReadWrite.All; Sites.ReadWrite.All is the higher option (driveItem: permanentDelete). A workable design:
- Scheduler: Azure Functions, Logic Apps or an Azure Automation runbook with a managed identity. Daily runs are enough for a 7-day target.
- Discovery: enumerate organizers’ OneDrives and channel sites, or search with
ProgID:Media AND ProgID:Meeting(the query Learn gives for Priority Cleanup), then filter oncreatedDateTimeolder than 7 days. - Safety rails: a dry-run mode, an allow-list of drives, a strict date filter, and logging of every item ID and call.
Caveats:
- Retention and holds. The
permanentDeletepage doesn’t say how the call interacts with retention. Learn’s retention model says a deleted item under retention or hold is copied to the Preservation Hold library, and deletion of records is blocked. Expect retained copies to survive; Priority Cleanup exists to override holds. This is an editorial inference; test it in the tenant. - Blast radius. A bug hard-deletes the wrong files irreversibly, apart from the 14-day site-level backup (SharePoint data deletion).
- Reconciliation. Re-query after each run to confirm that deletions took effect.
Route 3: Priority Cleanup. PowerShell can create the policy and rule (Q9). Learn recommends leaving a policy for Teams recordings running continually. Disposal still needs approval in Pending cleanups, and no Graph or CLI route for that step was found. The gate is deliberate.
CLI options:
| Tool | Use |
|---|---|
Security & Compliance PowerShell (Connect-IPPSSession) |
Create, list, change and remove Priority Cleanup policies and rules |
| Microsoft Graph PowerShell SDK, or PnP PowerShell / CLI for Microsoft 365 | File deletion. Check whether the wrapper recycles or permanently deletes, or call permanentDelete directly |
| Purview audit search or the Office 365 Management Activity API | Monitor Priority Cleanup events by Cleanup ID |
Teams PowerShell (Set-CsTeamsMeetingPolicy, Set-CsTeamsCallingPolicy) |
Set expiry defaults per group |
Recommendation for the customer:
| Requirement | Approach |
|---|---|
| “Gone from users at day 7” | Purview delete-only retention. No script. |
| “Bytes gone at day 7”, with no legal or regulatory holds | A scheduled Graph permanentDelete job is technically viable. Build it with dry-run, a strict query and audit logging, and document it as a custom control, not a compliance feature. |
| Holds, records or audit requirements apply | Priority Cleanup with approval. Set the expectation as “not before day 7, plus review”, not an automatic 7-day purge. |
4. Access to recordings and transcripts
Q&A index · Full whitepaper · Supporting references
Edited from a working Q&A log (29–30 September 2026). Whitepaper statements link to the converted page; other statements cite Microsoft Learn, spot-checked on 2 November 2026. One template capability couldn’t be confirmed and is flagged below.
Q11. Can access to recordings and transcripts be limited to organizers or specific people?
Short answer. Yes. The meeting option Who has access to the recording and transcript offers Everyone (default), Organizers and co-organizers, or Specific people. It requires a Teams Premium or Copilot licence and is separate from who can record.
What the control covers (page 9, page 11):
| Option | Who gets access |
|---|---|
| Everyone (default) | Anyone with the meeting link or nudged into the meeting |
| Organizers and co-organizers | Only the people who organised the meeting |
| Specific people | The organizers plus named individuals |
The setting governs the transcript, the recording, the AI-generated recap and Copilot. Copilot respects permissions, so users need transcript access for its contents to appear in a Copilot response (page 11). Organizers can change it before the meeting starts. See also Customize who can access a recording or transcript (support article, not rechecked).
Don’t confuse it with Who can record and transcribe, the capture-side control. Both need Teams Premium or Copilot but are enforced in different places (Manage recording options for sensitive meetings):
| Setting | Admin policy | Sensitivity label | Template | Organizer |
|---|---|---|---|---|
| Who can record and transcribe | No | Yes | Yes | Yes |
| Who has access to the recording and transcript | No | No | Yes | Yes |
Unconfirmed: enforcing access through a template. The original log said templates are the only way to enforce the access setting for a meeting type, because Microsoft’s matrix shows Template: Yes. However, the template option list in Create a custom meeting template doesn’t include this option (checked 2 November 2026). Check in the Teams admin centre that the option exists and can be locked before designing around it. Sensitivity labels can’t enforce it, and admin policy can’t set either control.
Baseline access without Premium or Copilot (pages 8–10):
| Aspect | Meetings | Calls |
|---|---|---|
| Storage | Organizer’s OneDrive (since June 2024) | OneDrive of the person who started recording or transcription |
| View | Invitees and people who joined; no external or anonymous access | People who joined the call; no external or anonymous access |
| Share | Organizer approval, internal users only; no external sharing | Approval from the person who started recording, internal only |
| Download | Recording owner only (the organizer, since June 2024); transcripts match since June 2024 | — |
| Delete | Organizer, co-organizer and IT admin; only the owner can delete the transcript from Stream | — |
Caveats for the customer:
- Channel meetings are the exception. Every channel member can view, edit and download (page 10).
-ChannelRecordingDownload Blockis an org-wide setting that makes channel recordings view-only for members while channel owners keep full access (Manage Teams recording policies). Channel recordings can’t be made organizer-only. - Specific people is internal only; there is no external option.
- After the meeting, the owner can still change file permissions in OneDrive or Stream. Pair the meeting option with the download-blocking policy (SharePoint Advanced Management, org-wide, new files only) if view-only matters (Block the download of Teams meeting recording files).
- Restricting access also restricts Copilot. That is usually the intent for sensitive meetings, but tell users in advance.
Strongest access configuration found: Teams Premium or Copilot for meeting owners; a default or assigned template that locks who can record to organizers and co-organizers, and sets who has access to the same if the template supports it; a sensitivity label enforcing recording rights; and the download-blocking policy.
Supporting references
These are the references the answers rely on. A listing means the page was cited; it does not mean the whole page was converted. Pages marked “checked” were read on Microsoft Learn on 2 November 2026; the rest are carried over from the 29 September 2026 log.
Whitepaper
| Reference | Pages used |
|---|---|
| Transcription Management in Microsoft 365 Copilot (©2025; PDF metadata 17 March 2025) | 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17 |
Teams recording, expiry and meeting options
| Reference | Used for | Status |
|---|---|---|
| Manage Teams recording expiration policy | Expiry range, new-items-only behaviour, recycle-bin recovery | Checked |
| Manage compliance for Teams recordings | Expiry versus retention and deletion policies; user override | Checked |
| Manage recording and transcription options for sensitive meetings | Control matrix (admin policy, label, template, organizer) | Checked |
| Create a custom meeting template | Template option list | Checked |
| Set a custom meeting template as the default | Default templates through template policy | Checked |
| Configure Teams meetings with three tiers of protection | Highly sensitive tier; per-group expiry | Checked |
| Manage end-to-end encryption for Teams meetings and calls | Features unavailable under E2EE | Checked |
| Teams settings and policies reference | Meeting policy settings and defaults | Checked (in part) |
| Manage Teams recording policies for meetings and events | Channel recording download, consent | Checked |
| Manage transcript API access for Teams meetings | Graph and Work IQ transcript access | Checked |
| Block the download of Teams meeting recording files | Download-blocking policy and licensing | Checked |
| Set-CsTeamsMeetingPolicy | Parameter names | Checked |
| Set-CsTeamsCallingPolicy | -CallRecordingExpirationDays |
Checked |
| Customize who can access a recording or transcript | Artefact access option (support article) | Not rechecked |
Retention, deletion and recycle bins
| Reference | Used for | Status |
|---|---|---|
| Learn about retention for SharePoint and OneDrive | Timer job, Preservation Hold library, 93-day process | Checked |
| SharePoint data deletion in Microsoft 365 | Second-stage purge, CSOM/REST delete, 14-day backups | Checked |
| Restore deleted items from the site collection recycle bin | 93-day period; quota not configurable | Checked (search excerpt) |
Priority Cleanup and automation
| Reference | Used for | Status |
|---|---|---|
| Permanently delete files with Priority Cleanup | Permanent deletion (preview), approval, audit event | Checked |
| Override holds to clean up files for Copilot and reclaim storage | Standard Priority Cleanup, roles, approvers, exclusions, audit events | Checked |
| New-RetentionCompliancePolicy | -PriorityCleanup, -SkipPriorityCleanupConfirmation |
Checked |
| New-RetentionComplianceRule | -PriorityCleanup, -ContentMatchQuery |
Checked |
| Get-RetentionCompliancePolicy | -PriorityCleanup listing switch |
Checked |
| driveItem: permanentDelete | Graph hard delete, permissions | Checked |