Forum Discussion

ss8787645's avatar
ss8787645
Copper Contributor
Oct 16, 2025

Data Explorer does not see Access Controlled items in SharePoint & OneDrive

I have recently started working with sensitivity labels.  I have one label that is access controlled (Confidential - Encrypted) that I have published and appears to be working.  My question is, when ...
AladinH's avatar
AladinH
Copper Contributor
Oct 17, 2025

Hi ss8787645​,

This is expected. Files labeled with encryption/access control (like “Confidential – Encrypted”) in OneDrive/SharePoint won’t appear in Purview/Data Explorer because the scanning service cannot read encrypted content.

To make them visible, you have a few options:

- Adjust the label’s encryption: In Microsoft Purview Compliance Portal > Information Protection > Sensitivity Labels, edit the label and in the Encryption section, allow read access for compliance/scanning accounts or broader groups. Save and republish the label - Purview can then index the files while the label remains applied.

- Grant explicit permissions to the files or site for the Purview scanning account.

- Use a label without encryption for items that need to appear in Purview.

This keeps your labels applied while letting Purview index the files.

ss8787645's avatar
ss8787645
Copper Contributor
Oct 19, 2025

Hi AladinH, Thank you for the information.  I find that interesting, I expected the Purview would be able to "see" the file and read the label but not see the content.  do you know what would be the "Purview Scanning Account" for OneDrive and SharePoint?

Resources