Unable to Access Sensitivity Labels in Microsoft Purview Account

Question

Unable to Access Sensitivity Labels in Microsoft Purview Account

Sooriya E 10

Hi Team,

A Microsoft Purview account has been set up in one of the subscriptions, and Information Protection has been enabled recently. While access to the sensitivity labels page is available for one user, a team member with equal privileges cannot view the page. What is the least privilege required for a user to access this page? Below is the error encountered:

ERROR - Diagnostic information:{Version:1.0.2245.1,Environment:SEAPROD,DeploymentId:aks-scc-prod-southeastasia,InstanceId:akswpool20000zk,TrafficSlot:Rolling Deployment,SID:7975887a-4be5-4716-8b7c-bb37d8fba86b,CID:6f833ac9-95b0-4372-86ec-8cc7311b0254} Time:2025-07-30T13:53:05.2050127Z

User's image

Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-01T14:56:54.1033333+00:00
Hi Sooriya E

Thanks for confirming that the Compliance Admin role has been assigned and browser-related issues have been ruled out.

If the issue persists even with the correct role, here are a few additional checks to help isolate it:

Check Microsoft 365 Compliance Center Permissions

Ensure the user has access to Microsoft 365 Compliance Center. Sensitivity labels are surfaced from there, and Purview pulls them using the user’s Microsoft Entra (AAD) permissions.

Roles like Information Protection Analyst or Compliance Data Administrator may also be required depending on your organization’s setup.

Microsoft 365 Licensing

Make sure the user has one of the following licenses assigned:

Microsoft 365 E5 / A5 / G5

Microsoft 365 E3 + Compliance Add-on

Or a license that includes Microsoft Information Protection

Without this, the sensitivity label feature might not fully load even if the role is present.

Purview Account Region vs. Compliance Center

Ensure the Purview account and the Microsoft 365 tenant are in the same region or supported pairings. Mismatches can cause UI-level issues for some users.

If the Issue Still Persists:

If all above settings are in place and the error still shows up, I would recommend raising a support request with Microsoft to check backend mappings. There could be token or sync issues preventing proper access for that user.

Let me know if you'd like help drafting a support ticket.

Also, regarding your question: “Is it possible to add the user in this thread?” -unfortunately, Microsoft Q&A currently doesn’t support tagging or adding users into existing threads. You can, however, have the impacted user reply separately and reference this thread.

Let us know how it goes!

I hope this information helps. Please do let us know if you have any further queries.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.
Sooriya E 10 Reputation points

2025-08-04T12:47:56.3633333+00:00

Hi Jimmy,

We are having some doubts, If possible can we schedule a call and connect for better understanding?

Thanks,
Sooriya E
Sooriya E 10 Reputation points

2025-08-05T06:26:31.2766667+00:00

Any Update on this?
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-05T10:29:05.66+00:00

Sooriya E Since the issue persists even after assigning the Compliance Admin role, confirming browser behavior, and validating license access, the next best step would be to engage Microsoft support directly. This will help determine if there's a backend issue (such as token misalignment or delayed role propagation) affecting this specific user.
Sooriya E 10 Reputation points

2025-08-05T12:27:27.0033333+00:00

Hi Smaran Thoomu,

I received an email notification that you have sent an message but couldn't able view that. Can you please send it again?

Thanks,
Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-05T16:49:32.03+00:00

Sooriya E Since the issue persists even after assigning the Compliance Admin role, confirming browser behavior, and validating license access, the next best step would be to engage Microsoft support directly. This will help determine if there's a backend issue (such as token misalignment or delayed role propagation) affecting this specific user.
Sooriya E 10 Reputation points

2025-08-05T17:18:53.5833333+00:00

Hi Smaran,

I am not aware of that, Can you guide me how to engage with the Microsoft support directly.

Thanks,
Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-05T19:16:13.12+00:00

Sooriya E If you have a support plan could you please file a support ticket for deeper investigation and do share the SR# with us? In case if you don't have a support plan please let us know here.
https://azure.microsoft.com/en-us/support/create-ticket/?msockid=1a8c2face9cb6e2425273993edcb6834
Sooriya E 10 Reputation points

2025-08-06T08:03:55.99+00:00

Hi Smaran,

I have a Developer support plan, but when I click on "Help + support" in the Azure portal, I'm redirected to Microsoft Q&A and cannot raise a support request. This issue was posted five days ago with no resolution, so it would be better if you could connect me with someone who can solve this or schedule a call.

Thanks,
Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-06T20:58:43.6866667+00:00

Sooriya E I kindly request you to provide the details mentioned in the private message so we can identify the root cause and address the issue effectively.
Sooriya E 10 Reputation points

2025-08-07T09:03:54.4333333+00:00

Hi Smaran,

Private message means? Not able to understand. If you can able to send me message through teams please send.

Thanks,

Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-07T16:14:57.8233333+00:00

Sooriya E You can access the private message by following the steps shown in the screenshot, or you can provide your email ID instead.

3 answers

Your answer

Sooriya E 10 Reputation points

2025-08-04T12:47:56.3633333+00:00

Hi Jimmy,

We are having some doubts, If possible can we schedule a call and connect for better understanding?

Thanks,
Sooriya E
Sooriya E 10 Reputation points

2025-08-05T06:26:31.2766667+00:00

Any Update on this?
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-05T10:29:05.66+00:00

Sooriya E Since the issue persists even after assigning the Compliance Admin role, confirming browser behavior, and validating license access, the next best step would be to engage Microsoft support directly. This will help determine if there's a backend issue (such as token misalignment or delayed role propagation) affecting this specific user.
Sooriya E 10 Reputation points

2025-08-05T12:27:27.0033333+00:00

Hi Smaran Thoomu,

I received an email notification that you have sent an message but couldn't able view that. Can you please send it again?

Thanks,
Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-05T16:49:32.03+00:00

Sooriya E Since the issue persists even after assigning the Compliance Admin role, confirming browser behavior, and validating license access, the next best step would be to engage Microsoft support directly. This will help determine if there's a backend issue (such as token misalignment or delayed role propagation) affecting this specific user.
Sooriya E 10 Reputation points

2025-08-05T17:18:53.5833333+00:00

Hi Smaran,

I am not aware of that, Can you guide me how to engage with the Microsoft support directly.

Thanks,
Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-05T19:16:13.12+00:00

Sooriya E If you have a support plan could you please file a support ticket for deeper investigation and do share the SR# with us? In case if you don't have a support plan please let us know here.
https://azure.microsoft.com/en-us/support/create-ticket/?msockid=1a8c2face9cb6e2425273993edcb6834
Sooriya E 10 Reputation points

2025-08-06T08:03:55.99+00:00

Hi Smaran,

I have a Developer support plan, but when I click on "Help + support" in the Azure portal, I'm redirected to Microsoft Q&A and cannot raise a support request. This issue was posted five days ago with no resolution, so it would be better if you could connect me with someone who can solve this or schedule a call.

Thanks,
Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-06T20:58:43.6866667+00:00

Sooriya E I kindly request you to provide the details mentioned in the private message so we can identify the root cause and address the issue effectively.
Sooriya E 10 Reputation points

2025-08-07T09:03:54.4333333+00:00

Hi Smaran,

Private message means? Not able to understand. If you can able to send me message through teams please send.

Thanks,

Sooriya E
Smaran Thoomu 28,310 Reputation points Microsoft External Staff Moderator

2025-08-07T16:14:57.8233333+00:00

Sooriya E You can access the private message by following the steps shown in the screenshot, or you can provide your email ID instead.

Answer 1

JimmySalian-2011 43,251

Hi Sooriya,

In this case to access the Sensitivity Label or Information Protection panel, I will suggest you start with Compliance Admin role this will cover mostly all the compliance requirements and least priviledge is Compliance Manager Readers.

Also it seems the browser issue, can you try incognito mode and clear the cache. Check if user has PIM assigned to the admin user.

Hope this helps.

JS

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.

Answer 2

Sooriya E 10

Any Update Jimmy?

Answer 3

Sooriya E 10

Hi Jimmy Salian,

I have provided the mentioned access to the user, also they tried with different browser and clearing the cache also tried in incognito mode. Still not working the user is getting the same error. What else do we need to do?

Additionally Is it possible to add the user in this thread?

Thanks,
Sooriya E

Share via

Unable to Access Sensitivity Labels in Microsoft Purview Account

3 answers

Your answer