Microsoft Purview introduces a new View-only Role Management role, providing users read-only visibility into role group membership and assignments in the Purview admin portal.
Microsoft Purview now supports time-limited role group assignments, with expiration dates ranging from one day to two years to reducing the risk of unnecessary long-term privileged access.
Microsoft is updating how access controls are enforced in Purview Data Explorer and Content Explorer. Administrators should verify that users hold the appropriate role or role group before the change rolls out in May 2026.
Microsoft has started assigning the new Purview workload admin roles in Microsoft Entra, triggering PIM assignment notifications for administrators.
Microsoft is simplifying access management for Data Security Investigations (DSI) in Purview by automatically adding the DSI Admin and DSI Contributor roles to additional role groups, reducing manual role assignments for teams working across DSPM, IRM, and Microsoft Defender XDR.