558546 – Microsoft Purview: Data Security Investigations – role-based access simplification

Product:

Defender, Purview, Purview Information Protection, Purview Insider Risk Management, SharePoint

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

We are simplifying Data Security Investigations (DSI) roles following customer feedback and the continued integration with Data Security Posture Management (DSPM), Insider Risk Management (IRM), and Defender XDR. We added the Data Security Investigation Admin role to the Compliance Administrator role group. We added the Data Security Investigation Contributor role to the: Organization Management role group; Data Security Management role group; Insider Risk management role group.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2026-03-13

updated:
2026-03-13

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft is simplifying role management within its Purview platform by introducing new roles like the Data Security Investigation Admin and Contributor, aimed at enhancing data security and compliance by ensuring appropriate access levels for efficient duty performance.

Direct effects for Operations**

Role Confusion and Access Issues
Without proper preparation, the introduction of new roles may lead to confusion among users regarding their access rights, potentially causing unauthorized access or denial of access to critical data.
   - roles: Compliance Administrator, Data Security Management Admin
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-security-investigations-role-based-access/ba-p/3741230

Increased Security Risks
If changes are implemented without adequate training and communication, users may inadvertently expose sensitive data or fail to utilize new security features effectively, increasing the risk of data breaches.
   - roles: Data Security Investigation Admin, Insider Risk Management Admin
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-security-investigations-role-based-access/ba-p/3741230

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only