A unified data governance solution that helps manage, protect, and discover data across your organization
To access the Content Explorer tab and view the item list, two permission layers matter:
- Access to the Content Explorer tab
- Access to items inside Content Explorer
Based on the roles listed, the missing permission is the second layer. For list-only access, the account must be added to the Content Explorer List viewer role group in Microsoft Purview. The current roles such as Compliance Administrator and Compliance Data Administrator can grant access to the tab, but they do not grant permission to view the item list.
Use this setup:
- In the Microsoft Purview portal, go to Settings > Roles and scopes.
- Open Role groups.
- Search for Content Explorer List viewer.
- Open that role group and add the account as a member.
- Save the change.
If content preview is also needed later, add the account to Content Explorer Content viewer as well. That role is separate and not cumulative with list viewer permissions.
Important details:
- The account used to access Content Explorer must be in one or both of these role groups: Content Explorer List viewer and/or Content Explorer Content viewer.
- These role groups are independent. For list and location visibility only, Content Explorer List viewer is sufficient.
- If item names must be visible, Content Explorer Content viewer is also required, because that role is required to view item names in list view when names might contain sensitive data.
- A user who assigns this membership must be able to manage Purview role groups. In Microsoft Purview, users need to be a global administrator or have the Role Management role to view and modify role groups. The documentation also states that Role management role holders in Microsoft Purview can assign the necessary Content Explorer List Viewer and Content Explorer Content Viewer role group membership.
If the role group is not visible in Roles and scopes, verify that the account performing the assignment has Role Management or Global Administrator permissions.