Microsoft Purview: DLP diagnostics enabled for all roles with DLP policy access

Microsoft Purview is updating permissions so all roles with DLP policy view access can also run diagnostics, enhancing troubleshooting and visibility without changing enforcement. This rollout begins late April 2026 and affects various admin and compliance roles. No action is required from organizations. Introduction We’re updating permissions in Microsoft Purview so that all roles that can view Data Loss Prevention (DLP) policies can also run diagnostics on those policies. This change improves visibility and helps authorized users more easily troubleshoot, validate, and understand DLP policy behavior without requiring elevated permissions. This message is associated with Microsoft 365 Roadmap ID 557192. When this will happen General Availability (Worldwide): We will begin rolling out in late April 2026 and expect to complete rollout by late May 2026. How this affects your organization Who is affected Administrators and security or compliance roles that already have permission to view DLP policies in Microsoft Purview. What will happen Users in the following roles will be able to run DLP diagnostics in addition to viewing DLP policies: Organization Configuration View-Only Configuration Compliance Admin Security Admin Security Reader DLP Compliance Management View-Only DLP Compliance Management Insider Risk Management Admin Information Protection Admin Information Protection Analyst Information Protection Investigator Data Security AI Admin This change does not modify DLP policy enforcement or behavior. It only expands diagnostic access for existing, authorized roles. What you can do to prepare Learn more:  No action is required. Diagnostics | Microsoft Purview Self-help diagnostics for Microsoft Purview | Microsoft Purview Troubleshooting | Troubleshooting | Microsoft 365 | Microsoft Learn Compliance considerations Question Answer Does the change alter how admins can monitor, report on, or demonstrate compliance activities? Yes. The change expands diagnostic access so that more existing roles can run DLP diagnostics, improving visibility and troubleshooting without changing enforcement or audit behavior. Message ID: MC1275563

The post Microsoft Purview: DLP diagnostics enabled for all roles with DLP policy access appeared first on M365 Admin.