Microsoft 365 Message Center item MC1275563
MC1275563 - Microsoft Purview: DLP diagnostics enabled for all roles with DLP policy access
Microsoft Purview is updating permissions so all roles with DLP policy view access can also run diagnostics, enhancing troubleshooting and visibility without changing enforcement. This rollout begins late April 2026 and affects various admin and compliance roles. No action is required from organizations.
- Message Center ID
- MC1275563
- Category
- stay Informed
- Severity
- normal
- Services
- Microsoft Purview
- Tags
- New feature, User impact, Admin impact
- Roadmap ID
- 557192
- Platforms
- Web
- Published
- 2026-04-09
- Last updated
- 2026-04-09
- Expires
- 2026-06-30
[Introduction]We’re updating permissions in Microsoft Purview so that all roles that can view Data Loss Prevention (DLP) policies can also run diagnostics on those policies. This change improves visibility and helps authorized users more easily troubleshoot, validate, and understand DLP policy behavior without requiring elevated permissions.This message is associated with Microsoft 365 Roadmap ID 557192.[When this will happen]General Availability (Worldwide): We will begin rolling out in late April 2026 and expect to complete rollout by late May 2026.[How this affects your organization]Who is affectedAdministrators and security or compliance roles that already have permission to view DLP policies in Microsoft Purview.What will happenUsers in the following roles will be able to run DLP diagnostics in addition to viewing DLP policies:Organization ConfigurationView-Only ConfigurationCompliance AdminSecurity AdminSecurity ReaderDLP Compliance ManagementView-Only DLP Compliance ManagementInsider Risk Management AdminInformation Protection AdminInformation Protection AnalystInformation Protection InvestigatorData Security AI AdminThis change does not modify DLP policy enforcement or behavior. It only expands diagnostic access for existing, authorized roles.[What you can do to prepare]No action is required.Learn more: Diagnostics | Microsoft PurviewSelf-help diagnostics for Microsoft Purview | Microsoft Purview Troubleshooting | Troubleshooting | Microsoft 365 | Microsoft Learn[Compliance considerations]QuestionAnswerDoes the change alter how admins can monitor, report on, or demonstrate compliance activities?Yes. The change expands diagnostic access so that more existing roles can run DLP diagnostics, improving visibility and troubleshooting without changing enforcement or audit behavior.