Microsoft Purview · Compliance Manager
Compliance Manager Administrators
Manage template creation and modification in Microsoft Purview Compliance Manager. Can create assessments, implement improvement actions, and manage all Compliance Manager content.
Scope: Full Compliance Manager administration including template management and all assessment operations
Permissions
- Compliance Manager Administration - Manage template creation and modification
- Compliance Manager Assessment - Create assessments and implement improvement actions
- Compliance Manager Contribution - Create assessments and perform work to implement improvement actions
- Compliance Manager Reader - View all Compliance Manager content
- Data Connector Admin - Configure data connectors
Common use cases
- Creating and customizing compliance assessment templates
- Managing organizational compliance posture
- Configuring Compliance Manager settings and automation
- Overseeing improvement action implementation across teams
Best practices
- Limit to compliance program leads who manage assessment templates
- Use Assessors role for staff who only create and update assessments
- Document template customizations and their regulatory basis
- Review compliance score trends regularly
Security considerations
- Can create and modify templates affecting compliance scoring
- Template changes can affect organizational compliance posture visibility
- Has full access to all Compliance Manager content and configurations
Common questions
When should I assign the Compliance Manager Administrators role?
Assign Compliance Manager Administrators when you need to: Creating and customizing compliance assessment templates; Managing organizational compliance posture; Configuring Compliance Manager settings and automation; and Overseeing improvement action implementation across teams. It is part of Microsoft Purview and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Compliance Manager Administrators role do?
The Compliance Manager Administrators role grants permissions including: Compliance Manager Administration - Manage template creation and modification; Compliance Manager Assessment - Create assessments and implement improvement actions; Compliance Manager Contribution - Create assessments and perform work to implement improvement actions; Compliance Manager Reader - View all Compliance Manager content; and Data Connector Admin - Configure data connectors. See the Permissions section above for the full list.
What are the security risks of the Compliance Manager Administrators role?
Key considerations when assigning Compliance Manager Administrators: Can create and modify templates affecting compliance scoring; Template changes can affect organizational compliance posture visibility; and Has full access to all Compliance Manager content and configurations. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.