Microsoft Purview · Compliance Manager
Compliance Manager Readers
View all Microsoft Purview Compliance Manager content except for administrator functions. Read-only access to assessments, improvement actions, and compliance score.
Scope: Read-only access to all Compliance Manager assessments, scores, and improvement actions
Permissions
- Compliance Manager Reader - View all Compliance Manager content
Common use cases
- Executive visibility into organizational compliance posture
- Audit and oversight of compliance program progress
- Board reporting on compliance score and assessment status
- External auditor access for compliance reviews
Best practices
- Use for executives, board members, and auditors
- Assign broadly for compliance awareness across the organization
- Combine with other reader roles for broader compliance visibility
- Use for external auditors during regulatory reviews
Security considerations
- Read-only role - cannot modify any compliance data
- Can view all assessment details and compliance scores
- Safe for broad assignment including external auditors
Common questions
When should I assign the Compliance Manager Readers role?
Assign Compliance Manager Readers when you need to: Executive visibility into organizational compliance posture; Audit and oversight of compliance program progress; Board reporting on compliance score and assessment status; and External auditor access for compliance reviews. It is part of Microsoft Purview and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Compliance Manager Readers role do?
The Compliance Manager Readers role grants permissions including: Compliance Manager Reader - View all Compliance Manager content. See the Permissions section above for the full list.
What are the security risks of the Compliance Manager Readers role?
Key considerations when assigning Compliance Manager Readers: Read-only role - cannot modify any compliance data; Can view all assessment details and compliance scores; and Safe for broad assignment including external auditors. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.