Microsoft Purview · Tenant-Level Governance
Data Estate Insights Admins
Tenant-level role group providing admin access to all insights reports across platforms and providers in the classic Data Catalog.
Scope: Administrative access to all Data Estate Insights configuration and reporting
Permissions
- Full administrative access to Data Estate Insights
- Configure insights reports and dashboard settings
- Manage insights across all platforms and data providers
- Create custom insights reports and analytics
- Configure insights data retention and refresh schedules
- Manage insights access and sharing settings
- All Data Estate Insights Readers permissions
- Read Data Map objects and metadata
Common use cases
- Configuring enterprise-wide data governance dashboards
- Setting up automated insights reporting for stakeholders
- Customizing insights views for different audiences
- Managing insights infrastructure and performance
- Building custom analytics on data estate health
- Integrating insights with external reporting tools
Best practices
- Limit to 3-5 data governance analysts or administrators
- Document insights configuration and customizations
- Establish standard reporting cadence and distribution
- Coordinate with stakeholders on insights requirements
- Regular review of insights accuracy and relevance
- Use for continuous improvement of governance program
- Create role-specific views for different audiences
Security considerations
- Can configure insights visible to entire organization
- Configuration changes affect governance reporting accuracy
- Should coordinate with data governance leadership
- Monitor configuration changes through audit logs
- Cannot modify underlying catalog data - insights only
Common questions
When should I assign the Data Estate Insights Admins role?
Assign Data Estate Insights Admins when you need to: Configuring enterprise-wide data governance dashboards; Setting up automated insights reporting for stakeholders; Customizing insights views for different audiences; Managing insights infrastructure and performance; and Building custom analytics on data estate health. It is part of Microsoft Purview and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Data Estate Insights Admins role do?
The Data Estate Insights Admins role grants permissions including: Full administrative access to Data Estate Insights; Configure insights reports and dashboard settings; Manage insights across all platforms and data providers; Create custom insights reports and analytics; Configure insights data retention and refresh schedules; and Manage insights access and sharing settings. See the Permissions section above for the full list.
What are the security risks of the Data Estate Insights Admins role?
Key considerations when assigning Data Estate Insights Admins: Can configure insights visible to entire organization; Configuration changes affect governance reporting accuracy; Should coordinate with data governance leadership; and Monitor configuration changes through audit logs. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.