ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 21:06 UTC Customize Public modeDiscuss ChangeIntel on Discord

Roles and permissions

Explore Microsoft's documented roles and permissions, and follow changes to each public reference.

Purview and Defender for Office 365 role groups

Purview and Defender for Office 365 default roles and role groups

Microsoft reference
Source and coverage

Default role groups and their documented role bindings in the shared reference. These are separate from Defender unified RBAC and Exchange role groups; solution-specific permissions and tenant membership are not established.

1 of 1 reference page has a baseline · 0 failed their last read. A failed or unparsed page cannot establish that a role or permission disappeared.

These public references do not establish tenant assignments or effective access. Reference labels and anchors do not establish stable vendor template IDs or confirmed renames.

Observed changes and exact document comparisons

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

80 matching entries · captured 23 Oct 2026, 08:30 UTC

Article history
Role or permissionReference typeDocumented terms
AI Administratorslabel:AI AdministratorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • AI Administrator
Attack Simulator Administratorslabel:Attack Simulator AdministratorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Attack Simulator Admin
Attack Simulator Payload Authorslabel:Attack Simulator Payload AuthorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Attack Simulator Payload Author
Audit Managerlabel:Audit ManagerDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Audit Logs View-Only Audit Logs
Audit Readerlabel:Audit ReaderDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • View-Only Audit Logs
Billing Administratorlabel:Billing AdministratorDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Billing Admin
Communication Compliancelabel:Communication ComplianceDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Case Management Communication Compliance Admin Communication Compliance Analysis Communication Compliance Case Management Communication Compliance Investigation Communication Compliance Viewer Data Classification Feedback Provider Data Connector Admin Purview Copilot Workspace Contributor Scope Manager View-Only Case
Communication Compliance Administratorslabel:Communication Compliance AdministratorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Communication Compliance Admin Communication Compliance Case Management Data Connector Admin Scope Manager
Communication Compliance Analystslabel:Communication Compliance AnalystsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Communication Compliance Analysis Communication Compliance Case Management Purview Copilot Workspace Contributor
Communication Compliance Investigatorslabel:Communication Compliance InvestigatorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Case Management Communication Compliance Analysis Communication Compliance Case Management Communication Compliance Investigation Data Classification Feedback Provider Purview Copilot Workspace Contributor View-Only Case
Communication Compliance Viewerslabel:Communication Compliance ViewersDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Communication Compliance Case Management Communication Compliance Viewer
Compliance Administrator¹label:Compliance Administrator¹Default role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Admin Unit Extension Manager Case Management Communication Compliance Admin Communication Compliance Case Management Compliance Administrator Compliance Manager Administration Compliance Search Credential Reader Credential Writer Data Classification Feedback Provider Data Classification Feedback Reviewer Data Connector Admin Data Investigation Management Data Map Reader Data Security Investigation Admin Device Management Disposition Management DLP Compliance Management Hold IB Compliance Management Information Protection Admin Information Protection Analyst Information Protection Reader Insider Risk Management Admin Insights Reader Manage Alerts Organization Configuration Purview Agent Analysis Purview Agent Deployment Purview Copilot Workspace Contributor RecordManagement Retention Management Scan Reader Scan Writer Scope Manager Source Reader Source Writer View-Only Audit Logs View-Only Case View-Only Device Management View-Only DLP Compliance Management View-Only IB Compliance Management View-Only Manage Alerts View-Only Recipients View-Only Record Management View-Only Retention Management
Compliance Data Administratorlabel:Compliance Data AdministratorDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Compliance Administrator Compliance Manager Administration Compliance Search Device Management Disposition Management DLP Compliance Management IB Compliance Management Information Protection Admin Information Protection Analyst Information Protection Reader Manage Alerts Organization Configuration Purview Copilot Workspace Contributor RecordManagement Retention Management Scope Manager Sensitivity Label Administrator View-Only Audit Logs View-Only Device Management View-Only DLP Compliance Management View-Only IB Compliance Management View-Only Manage Alerts View-Only Recipients View-Only Record Management View-Only Retention Management
Compliance Manager Administratorslabel:Compliance Manager AdministratorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Compliance Manager Administration Compliance Manager Assessment Compliance Manager Contribution Compliance Manager Reader Data Connector Admin
Compliance Manager Assessorslabel:Compliance Manager AssessorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Compliance Manager Assessment Compliance Manager Contribution Compliance Manager Reader Data Connector Admin
Compliance Manager Contributorslabel:Compliance Manager ContributorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Compliance Manager Contribution Compliance Manager Reader Data Connector Admin
Compliance Manager Readerslabel:Compliance Manager ReadersDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Compliance Manager Reader
Content Explorer Content Viewerlabel:Content Explorer Content ViewerDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Data Classification Content Viewer
Content Explorer List Viewerlabel:Content Explorer List ViewerDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Data Classification List Viewer
Data Catalog Curatorslabel:Data Catalog CuratorsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Data Map Reader Data Map Writer
Data Estate Insights Adminslabel:Data Estate Insights AdminsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Data Map Reader Insights Reader Insights Writer
Data Estate Insights Readerslabel:Data Estate Insights ReadersDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Data Map Reader Insights Reader
Data Governancelabel:Data GovernanceDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Data Governance Administrator
Data Investigatorlabel:Data InvestigatorDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Communication Compliance Search Custodian Data Investigation Management Export Preview Review RMS Decrypt Search And Purge
Data Security AI Adminslabel:Data Security AI AdminsDefault role group (reference label)
1 documented terms

Default roles assigned (reference text)

  • Data Security AI Admin

Source: Microsoft, © Microsoft Corporation. Read the original for descriptions, exceptions and applicability.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 21:06 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.