In the instructions, it states to use the Data Investigator role group. However, the Data Investigator role group doesn't provide the necessary permissions to run any of the hold or compliance creation or deletion scripts.
Data Investigator Roles:
Communication
Compliance Search
Custodian
Data Investigation Management
Export
Preview
Review
RMS Decrypt
Search And Purge
Without the Hold and Case Management roles, it can't manage holds or manage any cases that aren't already assigned to it.
Screenshots
Environment
OS: [e.g. Windows]
Browser: [e.g. chrome, safari, firefox..]
Browser Version:
Suggested fix
Direct admins to create a custom role group with the following roles:
Case Management
Communication
Compliance Search
Custodian
Data Investigation Management
Export
Hold
Preview
Review
RMS Decrypt
Search And Purge
Hi and welcome to our Content Developer Docs project!
Thanks and congrats for opening your very first issue.
If you know the fix, you may also submit a PR to fix the issue if you like!
Describe the problem
In the instructions, it states to use the Data Investigator role group. However, the Data Investigator role group doesn't provide the necessary permissions to run any of the hold or compliance creation or deletion scripts.
Data Investigator Roles: Communication Compliance Search Custodian Data Investigation Management Export Preview Review RMS Decrypt Search And Purge
Without the Hold and Case Management roles, it can't manage holds or manage any cases that aren't already assigned to it.
Screenshots
Environment
Suggested fix
Direct admins to create a custom role group with the following roles: Case Management Communication Compliance Search Custodian Data Investigation Management Export Hold Preview Review RMS Decrypt Search And Purge
The permissions issue can be validated here: Microsoft Learn | Roles and Role Groups for Office 365 and Microsoft Purview
Instructions for role group are here: Microsoft Learn | Create a custom Microsoft Purview role group