Skip to content

Latest commit

 

History

History
34 lines (28 loc) · 3 KB

File metadata and controls

34 lines (28 loc) · 3 KB
title Compliance Data Administrator
description Compliance Data Administrator
ms.topic include
ms.date 01/26/2026
ms.custom include file

Users with this role have permissions to track data in the Microsoft Purview portal, Microsoft 365 admin center, and Azure. Users can also track compliance data within the Exchange admin center, Compliance Manager, and Teams & Skype for Business admin center and create support tickets for Azure and Microsoft 365. For more information about the differences between Compliance Administrator and Compliance Data Administrator, see Roles and role groups in Microsoft Defender for Office 365 and Microsoft Purview compliance.

In Can do
Microsoft Purview portal Monitor compliance-related policies across Microsoft 365 services
Manage compliance alerts
Microsoft Purview Compliance Manager Track, assign, and verify your organization's regulatory compliance activities
Microsoft 365 Defender portal Manage data governance
Perform legal and data investigation
Manage Data Subject Request

This role has the same permissions as the Compliance Data Administrator role group in Microsoft 365 Defender portal role-based access control.
Intune View all Intune audit data
Microsoft Defender for Cloud Apps Has read-only permissions and can manage alerts
Can create and modify file policies and allow file governance actions
Can view all the built-in reports under Data Management

[!div class="mx-tableFixed"]

Actions Description
microsoft.azure.informationProtection/allEntities/allTasks Manage all aspects of Azure Information Protection
microsoft.azure.serviceHealth/allEntities/allTasks Read and configure Azure Service Health
microsoft.azure.supportTickets/allEntities/allTasks Create and manage Azure support tickets
microsoft.directory/authorizationPolicy/standard/read Read standard properties of authorization policy
microsoft.directory/cloudAppSecurity/allProperties/allTasks Create and delete all resources, and read and update standard properties in Microsoft Defender for Cloud Apps
microsoft.office365.complianceManager/allEntities/allTasks Manage all aspects of Office 365 Compliance Manager
microsoft.office365.serviceHealth/allEntities/allTasks Read and configure Service Health in the Microsoft 365 admin center
microsoft.office365.supportTickets/allEntities/allTasks Create and manage Microsoft 365 service requests
microsoft.office365.webPortal/allEntities/standard/read Read basic properties on all resources in the Microsoft 365 admin center