Forum Discussion
Least permissive role to access Content Explorer in Microsoft Purview
There are two roles that grant access to content explorer and it is granted using the https://go.microsoft.com/fwlink/p/?linkid=2173597:
Content Explorer List viewer: Membership in this role group allows you to see each item and its location in list view. The data classification list viewer role has been pre-assigned to this role group.
Content Explorer Content viewer: Membership in this role group allows you to view the contents of each item in the list. The data classification content viewer role has been pre-assigned to this role group.
You can also assign either or both of the roles to a custom role group to tailor access to content explorer.
A Global admin, can assign the necessary Content Explorer List Viewer, and Content Explorer Content Viewer role group membership.
Surajpallagatti content explorer content viewer would give too much permission. So, its not "least privilege"
