Microsoft Defender for Office 365
Email and collaborationScc Permissions
In brief
The documentation now describes Data Security AI Admins and the Data Security AI Admin role as editing Data Loss Prevention policies without the previous “related to Copilot” qualifier. Access to view AI content remains documented, while prompt and response access remains excluded.
What Defender admins need to know
Administrators should use the updated descriptions when reviewing or communicating role permissions. No action is required.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| Data Estate Insights Readers | Provides read-only access to all insights reports across platforms and providers. | Data Map Reader Insights Reader |
| Data Governance | Grants access to data governance roles within Microsoft Purview. | Data Governance Administrator |
| Data Investigator | Perform searches on mailboxes, SharePoint sites, and OneDrive locations. | Communication Compliance Search Custodian Data Investigation Management Export Preview Review RMS Decrypt Search And Purge |
| Data Security AI Admins | Use this group to assign editing capabilities for Data Loss Prevention policies related to Copilot and viewing AI content in Data Security Posture Management. Review the role description for access details. | Data Security AI Admin |
| Data Security AI Content Viewers | Use this group to grant permissions for users to view extended prompt and response details in AI application interactions within Data Security Posture Management for AI (classic) and the preview version of Data Security Posture Management. | Data Security AI Content Viewer |
| Data Security AI Viewers | Use this group to assign read-only permissions to users for Data Security Posture Management for AI (classic) and the preview version of Data Security Posture Management. | Data Security AI Viewer |
| Data Security DLP Triage Agent | Intended exclusively for non-interactive agent users to triage and remediate data loss prevention alerts. | Data Classification Content Download Data Classification Content Viewer Information Protection Analyst Purview Content Analyst Purview Copilot Workspace Contributor |
| ^*^Data Investigation Management | Create, edit, delete, and control access to data investigation. | Compliance Administrator Data Investigator |
| ^*^Data Map Reader | Read actions on data map objects. | Compliance Administrator Data Catalog Curators Data Estate Insights Admins Data Estate Insights Readers Data Security Management Information Protection Information Protection Admins Information Protection Analysts Information Protection Investigators Privacy Management Privacy Management Administrators Privacy Management Analysts Privacy Management Contributors Privacy Management Investigators Privacy Management Viewers |
| ^*^Data Map Writer | Create, read, modify, and delete actions on data map objects and establish relationships between objects. | Data Catalog Curators |
| ^*^Data Security AI Admin | Role for editing Data Loss Prevention policies related to Copilot and viewing AI content in Data Security Posture Management. This role does not have access to read prompts and responses of AI interactions. | Data Security AI Admins |
| ^*^Data Security AI Content Viewer | Role for read-only access to prompts and responses of AI interactions in Data Security Posture Management for AI (classic) and the preview version of Data Security Posture Management. | Data Security AI Content Viewers |
| ^*^Data Security AI Viewer | Role for read-only access to all pages in Data Security Posture Management for AI (classic) and AI-related data in the preview version of Data Security Posture Management. This role does not have access to read prompts and responses of AI interactions. | Data Security AI Viewers |
| ^*^Data Security Investigation Admin | Used to create and manage investigations, processes, and settings in Data Security Investigation. | Compliance Administrator Data Security Investigation Admins Organization Management |
@@ -112,7 +112,7 @@ To view the **Permissions** tab as described in this article, you need to be an | **Data Estate Insights Readers** | Provides read-only access to all insights reports across platforms and providers. | Data Map Reader Insights Reader |
| **Data Governance** | Grants access to data governance roles within Microsoft Purview. | Data Governance Administrator |
| **Data Investigator** | Perform searches on mailboxes, SharePoint sites, and OneDrive locations. | Communication Compliance Search Custodian Data Investigation Management Export Preview Review RMS Decrypt Search And Purge |
-| **Data Security AI Admins** | Use this group to assign editing capabilities for Data Loss Prevention policies related to Copilot and viewing AI content in Data Security Posture Management. Review the role description for access details. | Data Security AI Admin |
+| **Data Security AI Admins** | Use this group to assign editing capabilities for Data Loss Prevention policies and viewing AI content in Data Security Posture Management. Review the role description for access details. | Data Security AI Admin |
| **Data Security AI Content Viewers** | Use this group to grant permissions for users to view extended prompt and response details in AI application interactions within Data Security Posture Management for AI (classic) and the preview version of Data Security Posture Management. | Data Security AI Content Viewer |
| **Data Security AI Viewers** | Use this group to assign read-only permissions to users for Data Security Posture Management for AI (classic) and the preview version of Data Security Posture Management. | Data Security AI Viewer |
| **Data Security DLP Triage Agent** | Intended exclusively for non-interactive agent users to triage and remediate data loss prevention alerts. | Data Classification Content Download Data Classification Content Viewer Information Protection Analyst Purview Content Analyst Purview Copilot Workspace Contributor |
@@ -217,7 +217,7 @@ Roles that aren't assigned to the Organization Management role group by default | ^\*^**Data Investigation Management** | Create, edit, delete, and control access to data investigation. | Compliance Administrator Data Investigator |
| ^\*^**Data Map Reader** | Read actions on data map objects. | Compliance Administrator Data Catalog Curators Data Estate Insights Admins Data Estate Insights Readers Data Security Management Information Protection Information Protection Admins Information Protection Analysts Information Protection Investigators Privacy Management Privacy Management Administrators Privacy Management Analysts Privacy Management Contributors Privacy Management Investigators Privacy Management Viewers |
| ^\*^**Data Map Writer** | Create, read, modify, and delete actions on data map objects and establish relationships between objects. | Data Catalog Curators |
-| ^\*^**Data Security AI Admin** | Role for editing Data Loss Prevention policies related to Copilot and viewing AI content in Data Security Posture Management. This role does not have access to read prompts and responses of AI interactions. | Data Security AI Admins |
+| ^\*^**Data Security AI Admin** | Role for editing Data Loss Prevention policies and viewing AI content in Data Security Posture Management. This role does not have access to read prompts and responses of AI interactions. | Data Security AI Admins |
| ^\*^**Data Security AI Content Viewer** | Role for read-only access to prompts and responses of AI interactions in Data Security Posture Management for AI (classic) and the preview version of Data Security Posture Management. | Data Security AI Content Viewers |
| ^\*^**Data Security AI Viewer** | Role for read-only access to all pages in Data Security Posture Management for AI (classic) and AI-related data in the preview version of Data Security Posture Management. This role does not have access to read prompts and responses of AI interactions. | Data Security AI Viewers |
| ^\*^**Data Security Investigation Admin** | Used to create and manage investigations, processes, and settings in Data Security Investigation. | Compliance Administrator Data Security Investigation Admins Organization Management |