Services
Summary
Microsoft Purview Content Explorer and Data Explorer will enforce the Data Classification List Viewer role for accessing classified data starting May 2026. Admins must assign this role to users needing access, ensuring consistent role-based access without new permissions or configuration changes.
Details
Introduction
Microsoft Purview Content Explorer and Data Explorer continue to require the Data Classification List Viewer role to view and navigate classified data. With this update, Content Explorer and Data Explorer consistently enforce the role requirements across the full experience. This update provides a consistent and predictable access experience aligned with already documented Microsoft Purview role-based access controls.
When this will happen:
- General Availability (Production, GCC, GCC High, and DoD): We began rolling out in early May 2026 and expect to complete by mid-May 2026.
How this affects your organization:
Who is affected:
- Admins managing Microsoft Purview roles and permissions
- Users accessing Microsoft Purview Content Explorer and Data Explorer
What will happen:
- Users must have the Data Classification List Viewer role to view and navigate classified data in Content Explorer and Data Explorer.
- Users without the Data Classification List Viewer role may not be able to view or navigate Content Explorer and Data Explorer as expected.
- The role requirement will be consistently enforced across the full Content Explorer and Data Explorer experience.
- No new permissions are introduced as part of this change.
What you can do to prepare:
Required action:
- Assign the Content Explorer List Viewer role group or a custom role group that includes the Data Classification List Viewer role to users who need access to Content Explorer or Data Explorer.
Recommended steps:
- Review current users accessing Content Explorer and Data Explorer.
- Validate role assignments for those users.
- Update permissions where needed.
No additional configuration changes are required.
Compliance considerations:
| Does the change alter how existing customer data is processed, stored, or accessed? | The change enforces role-based access controls for viewing and navigating classified data. |
| Does the change alter how admins can monitor, report on, or demonstrate compliance activities? | Admins must ensure appropriate role assignments to maintain access to classified data within Content Explorer and Data Explorer. |