Forum Discussion
Data Explorer does not see Access Controlled items in SharePoint & OneDrive
I have recently started working with sensitivity labels. I have one label that is access controlled (Confidential - Encrypted) that I have published and appears to be working. My question is, when I look in Data Explorer, at that label, it only shows that I have items in Exchange, no items in OneDrive where I have stored files with that label?
What am I missing, why can Purview not see files with this label?
2 Replies
Hi ss8787645,
This is expected. Files labeled with encryption/access control (like “Confidential – Encrypted”) in OneDrive/SharePoint won’t appear in Purview/Data Explorer because the scanning service cannot read encrypted content.
To make them visible, you have a few options:
- Adjust the label’s encryption: In Microsoft Purview Compliance Portal > Information Protection > Sensitivity Labels, edit the label and in the Encryption section, allow read access for compliance/scanning accounts or broader groups. Save and republish the label - Purview can then index the files while the label remains applied.
- Grant explicit permissions to the files or site for the Purview scanning account.
- Use a label without encryption for items that need to appear in Purview.
This keeps your labels applied while letting Purview index the files.
Hi AladinH, Thank you for the information. I find that interesting, I expected the Purview would be able to "see" the file and read the label but not see the content. do you know what would be the "Purview Scanning Account" for OneDrive and SharePoint?
