We’re updating permissions to ensure that all roles with access to view DLP policies in Microsoft Purview can also run diagnostics on those policies. This change enhances visibility and empowers authorized users to troubleshoot and validate policy behavior more effectively.
The following roles will now have diagnostic access:
Organization Configuration
View-Only Configuration
Compliance Admin
Security Admin
Security Reader
DLP Compliance Management
View-Only DLP Compliance Management
Insider Risk Management Admin
Information Protection Admin
Information Protection Analyst
Information Protection Investigator
Data Security AI Admin
GA date: April CY2026
Preview date: February CY2026