MS Purview - Communication Compliance - not being able to read mail messages

Question

Up until very recently (last week). when I looked at the entries in a pre-written policy (e.g searching for the word SAR). I was always able to open the mail item and / or teams item. Now the mail item is not loading.

The error message I get is

"Risk activity data sharing is not enabled from inside Insider Risk Management. Work with your IRM Admin to enable".

As my role covers 2 organisations I initially wondered whether it was an error in one - but I get the same message for both organisations now.

IRM admin stress nothing has changed.

Answer 1

Hi Richard Holdsworth,
Thankyou for reaching microsoft Q&A!

The error “Risk activity data sharing is not enabled from inside Insider Risk Management” typically indicates that the integration between Insider Risk Management and other Microsoft Purview investigation experiences is currently disabled or not syncing correctly, even if no intentional changes were made by administrators.

Since the issue began recently and is occurring across multiple tenants, this is more likely related to a service configuration or cross-solution integration state rather than a specific policy change.

Please ask the Insider Risk Management admin to review the following:

First, navigate to Insider Risk Management > Settings > Data sharing (or Privacy) and confirm that risk activity data sharing with other Microsoft security or Purview solutions is enabled. In some cases, service updates or licensing refreshes can affect this configuration without a clear audit entry.

Second, verify permissions. Users may be able to view policy matches but still be unable to open the underlying mail or Teams content unless they also have the appropriate roles for content access (for example, Insider Risk Management Analyst/Investigator plus required Audit or eDiscovery permissions).

Third, try refreshing the configuration by toggling the data-sharing setting Off, saving the change, waiting a few minutes, and then enabling it again. This can re-establish the connection between IRM and investigation workloads if the integration state is stuck.

As a validation step, attempt to open the same item through Purview Audit search or eDiscovery. If the content loads there but not from the IRM experience, it generally confirms a data-sharing or integration sync issue rather than a policy or role misconfiguration.
Hope this helps!