Forum Discussion
Data Explorer does not see Access Controlled items in SharePoint & OneDrive
Hi ss8787645,
This is expected. Files labeled with encryption/access control (like “Confidential – Encrypted”) in OneDrive/SharePoint won’t appear in Purview/Data Explorer because the scanning service cannot read encrypted content.
To make them visible, you have a few options:
- Adjust the label’s encryption: In Microsoft Purview Compliance Portal > Information Protection > Sensitivity Labels, edit the label and in the Encryption section, allow read access for compliance/scanning accounts or broader groups. Save and republish the label - Purview can then index the files while the label remains applied.
- Grant explicit permissions to the files or site for the Purview scanning account.
- Use a label without encryption for items that need to appear in Purview.
This keeps your labels applied while letting Purview index the files.
Hi ss8787645,
This is expected. Files labeled with encryption/access control (like “Confidential – Encrypted”) in OneDrive/SharePoint won’t appear in Purview/Data Explorer because the scanning service cannot read encrypted content.
To make them visible, you have a few options:
- Adjust the label’s encryption: In Microsoft Purview Compliance Portal > Information Protection > Sensitivity Labels, edit the label and in the Encryption section, allow read access for compliance/scanning accounts or broader groups. Save and republish the label - Purview can then index the files while the label remains applied.
- Grant explicit permissions to the files or site for the Purview scanning account.
- Use a label without encryption for items that need to appear in Purview.
This keeps your labels applied while letting Purview index the files.
Hi AladinH, Thank you for the information. I find that interesting, I expected the Purview would be able to "see" the file and read the label but not see the content. do you know what would be the "Purview Scanning Account" for OneDrive and SharePoint?