Microsoft Purview · Global & Security Roles
AI Administrators
In addition to the capabilities of the AI Administrator role in Microsoft Entra, this group assigns read-only permissions for AI security insights in Microsoft Purview. Used for governing Microsoft 365 Copilot and AI-related enterprise services from a compliance perspective.
Scope: Microsoft 365 Copilot governance and read access to Purview AI security insights
Permissions
- AI Administrator (Entra) - Manage Microsoft 365 Copilot configuration
- Read AI security insights in Microsoft Purview
- View DSPM for AI dashboards and reports
- Access AI-related compliance signals
- Configure AI governance policies (read in Purview, manage in Entra)
Common use cases
- Governing Microsoft 365 Copilot rollout
- Monitoring AI usage and compliance signals
- Coordinating AI compliance program with Purview Data Security teams
- Responding to AI-related compliance audit requests
Best practices
- Pair with Data Security AI Admin for Purview-side AI policy management
- Coordinate with Information Protection team on sensitivity labels for AI content
- Review Copilot interaction logs through audit
- Document AI governance decisions for compliance audit trail
Common questions
When should I assign the AI Administrators role?
Assign AI Administrators when you need to: Governing Microsoft 365 Copilot rollout; Monitoring AI usage and compliance signals; Coordinating AI compliance program with Purview Data Security teams; and Responding to AI-related compliance audit requests. It is part of Microsoft Purview and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the AI Administrators role do?
The AI Administrators role grants permissions including: AI Administrator (Entra) - Manage Microsoft 365 Copilot configuration; Read AI security insights in Microsoft Purview; View DSPM for AI dashboards and reports; Access AI-related compliance signals; and Configure AI governance policies (read in Purview, manage in Entra). See the Permissions section above for the full list.