Forum Discussion
Least permissive role to access Content Explorer in Microsoft Purview
There are two roles that grant access to content explorer and it is granted using the https://go.microsoft.com/fwlink/p/?linkid=2173597:
Content Explorer List viewer: Membership in this role group allows you to see each item and its location in list view. The data classification list viewer role has been pre-assigned to this role group.
Content Explorer Content viewer: Membership in this role group allows you to view the contents of each item in the list. The data classification content viewer role has been pre-assigned to this role group.
You can also assign either or both of the roles to a custom role group to tailor access to content explorer.
A Global admin, can assign the necessary Content Explorer List Viewer, and Content Explorer Content Viewer role group membership.
- LiliO915Oct 10, 2024Copper Contributor
Surajpallagatti content explorer content viewer would give too much permission. So, its not "least privilege"