Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,171 questions
Unable to locate Purview Administrator role group
Brendan Yee
60
Reputation points
Hello, I'm looking to create a new domain within the Purview data map (data map domain, not business domain), but I'm unable to do so.
This documentation notes that the Purview Administrator role group (organization level) is required to create domains:
However, this other documentation notes that Tenant Admin or Microsoft Purview Admin roles (Purview Governance Portal) are required to manage domains:
I'm unclear on where to go to assign the Purview Administrator, Microsoft Purview Admin, or Tenant Admin roles (I'm using the new Purview Governance Portal experience, and have checked in both the portal and in Microsoft Entra, but haven't been able to find these roles).
Could I receive some guidance on where to assign these roles, please?
{count} votes
-
PRADEEPCHEEKATLA-MSFT 89,571 Reputation points Microsoft Employee2024-08-08T12:06:49.9166667+00:00 @Brendan Yee - We are reaching out to the internal team to get more information related to your query and will get back to you as soon as we have an update.
-
PRADEEPCHEEKATLA-MSFT 89,571 Reputation points Microsoft Employee
2024-08-09T02:42:14.25+00:00 @Brendan Yee - Add yourself or get someone to add you to Purview Admin role group in this tenant under roles and scopes in the unified purview portal, and then try creating a Domain.
Regarding the document corrections, owner of the document has been notified and will be updated asap.
Hope this helps. Do let us know if you any further queries.
-
Brendan Yee 60 Reputation points
2024-08-09T17:32:51.31+00:00 Thank you @PRADEEPCHEEKATLA-MSFT . In addition to what was noted in the documentation, it looks like there's another consideration to take into account: the Roles and Scopes blade (within the unified Purview portal) is only visible to users who have the Global Administrator or Role Management roles (within Entra ID) (related documentation).
In order to create/edit/delete domains, a Global Admin or Role Management user (Entra ID scope) must assign the Purview Admin role to a user (unified Purview portal scope). The user with the Purview Admin role can then create/edit/delete domains.
-
PRADEEPCHEEKATLA-MSFT 89,571 Reputation points Microsoft Employee
2024-08-12T04:00:52.7166667+00:00 @Brendan Yee - Thanks for the details. I will share with the content author to update asap.
Sign in to comment
Sign in to answer