Skip to content

Latest commit

 

History

History
31 lines (26 loc) · 2.63 KB

File metadata and controls

31 lines (26 loc) · 2.63 KB
title Compliance Administrator
description Compliance Administrator
ms.topic include
ms.date 01/26/2026
ms.custom include file

Users with this role have permissions to manage compliance-related features in the Microsoft Purview portal, Microsoft 365 admin center, Azure, and Microsoft 365 Defender portal. Assignees can also manage all features within the Exchange admin center and create support tickets for Azure and Microsoft 365. For more information, see Roles and role groups in Microsoft Defender for Office 365 and Microsoft Purview compliance.

In Can do
Microsoft Purview portal Protect and manage your organization's data across Microsoft 365 services
Manage compliance alerts
Microsoft Purview Compliance Manager Track, assign, and verify your organization's regulatory compliance activities
Microsoft 365 Defender portal Manage data governance
Perform legal and data investigation
Manage Data Subject Request

This role has the same permissions as the Compliance Administrator role group in Microsoft 365 Defender portal role-based access control.
Intune View all Intune audit data
Microsoft Defender for Cloud Apps Has read-only permissions and can manage alerts
Can create and modify file policies and allow file governance actions
Can view all the built-in reports under Data Management

[!div class="mx-tableFixed"]

Actions Description
microsoft.azure.serviceHealth/allEntities/allTasks Read and configure Azure Service Health
microsoft.azure.supportTickets/allEntities/allTasks Create and manage Azure support tickets
microsoft.directory/entitlementManagement/allProperties/read Read all properties in Microsoft Entra entitlement management
microsoft.office365.complianceManager/allEntities/allTasks Manage all aspects of Office 365 Compliance Manager
microsoft.office365.serviceHealth/allEntities/allTasks Read and configure Service Health in the Microsoft 365 admin center
microsoft.office365.supportTickets/allEntities/allTasks Create and manage Microsoft 365 service requests
microsoft.office365.webPortal/allEntities/standard/read Read basic properties on all resources in the Microsoft 365 admin center