MC1259826 High
Microsoft Purview: Data Security Investigations – role-based access simplification
Summary AI-generated
DSI Contributor role in Purview will be auto-added to key role groups for broader default access; rollout starts late April 2026 with no opt-in needed.
Suggested actions AI-generated
- Review membership of impacted role groups
- Confirm DSI access is appropriate
- Update access management documentation if needed
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1041756 (Updated) Microsoft Purview: IRM RBAC Change (related to Data Security Investigations) Preview
- MC1047912 (Updated) Microsoft Purview: New Purview Data Security Investigations (DSI) solution
- MC1259827 Microsoft Purview: Data Security Investigations – analyze files tied to audit log activities
- MC1266016 Microsoft Purview | Data Security Investigations – Introducing new personal data examination
- MC1239175 (Updated) Microsoft Purview: Data Security Investigations – AI analysis enhancements
- MC1199763 Microsoft Purview | Data Security Investigations – Introducing new purge mitigation action
Original post from Microsoft
[Introduction]
We’re simplifying how organizations manage access to Data Security Investigations (DSI) in Microsoft Purview. Based on customer feedback and continued alignment with Data Security Posture Management (DSPM), Insider Risk Management (IRM), and Microsoft Defender XDR, the DSI Admin and DSI Contributor roles will automatically be included in additional role groups. This reduces manual assignments and helps teams that frequently work across these solutions have the right access by default.
This message is associated with Microsoft 365 Roadmap ID 558546.
[When this will happen]
- General Availability (Worldwide): Rolling out in late April 2026 and expected to complete by late April 2026.
[How this affects your organization]
Who is affected
- Admins managing roles and permissions in the Microsoft Purview compliance portal
What will happen
- The Data Security Investigation Contributor role will automatically be added to these role groups:
- Organization Management
- Data Security Management
- Insider Risk Management
- Members of these role groups will automatically receive the corresponding DSI access.
- No existing permissions or role assignments will be removed.
- No opt-in is required; this change applies by default.
[What you can do to prepare]
No action is required before rollout.
You may want to:
- Review which users in your organization are members of the affected role groups.
- Confirm that the resulting DSI access is appropriate for those users.
- Update internal access management documentation, if needed.
Learn more:
- Learn about Data Security Investigations | Microsoft Purview | Microsoft Learn
- Permissions in the Microsoft Purview portal | Microsoft Purview | Microsoft Learn
[Compliance considerations]
This change will automatically grant DSI access to members of the affected role groups. Admins should review current role group membership and ensure DSI access aligns with their organization's security and compliance requirements.
Additional details from Microsoft
- RoadmapIds
- 558546
- Summary
- Microsoft Purview will simplify Data Security Investigations access by automatically adding the DSI Contributor role to key role groups, effective late April 2026. No action or opt-in is needed, but admins should review role memberships to ensure appropriate access and update documentation if necessary.
- Platforms
- Web