What role do I need to assign myself roles in Purview?

Question

What role do I need to assign myself roles in Purview?

Steven Kadish - KHF 45

What Entra roles do I need to make the "Roles and Scopes" page in Purview appear? So far I have checked out "Compliance Administrator" and "Privileged Role Administrator."

Manoj Kumar Boyini 8,950 Reputation points Microsoft External Staff Moderator

2026-02-13T19:53:04.25+00:00

Hi Steven Kadish - KHF

To access the “Roles and scopes” page in Microsoft Purview, you need a directory-level Microsoft Entra ID role, not just a Purview role. The recommended minimum role for this is Privileged Role Administrator (also known as Role Management Administrator), which provides the necessary permission for Purview to display that page. The Global Administrator role would also allow access, but it isn’t required and is typically only used when broader administrative privileges are needed.

After the page is visible, you will also need a Purview permission to manage role assignments within the portal. Specifically, you should have the Collection Administrator role assigned at the root collection (or the appropriate scope). This enables you to create and manage Purview role assignments.

Hope this helps, Please let us know if you have any questions and concerns.
Steven Kadish - KHF 45 Reputation points

2026-02-13T19:58:13.7766667+00:00

Hi Manoj,

Thanks, but Privileged Role Administrator didn't work, even though Microsoft says that it will. Nothing worked until I made myself a Global Admin. Now I'm all squared away.

3 answers

Your answer

Manoj Kumar Boyini 8,950 Reputation points Microsoft External Staff Moderator

2026-02-13T19:53:04.25+00:00

Hi Steven Kadish - KHF

To access the “Roles and scopes” page in Microsoft Purview, you need a directory-level Microsoft Entra ID role, not just a Purview role. The recommended minimum role for this is Privileged Role Administrator (also known as Role Management Administrator), which provides the necessary permission for Purview to display that page. The Global Administrator role would also allow access, but it isn’t required and is typically only used when broader administrative privileges are needed.

After the page is visible, you will also need a Purview permission to manage role assignments within the portal. Specifically, you should have the Collection Administrator role assigned at the root collection (or the appropriate scope). This enables you to create and manage Purview role assignments.

Hope this helps, Please let us know if you have any questions and concerns.
Steven Kadish - KHF 45 Reputation points

2026-02-13T19:58:13.7766667+00:00

Hi Manoj,

Thanks, but Privileged Role Administrator didn't work, even though Microsoft says that it will. Nothing worked until I made myself a Global Admin. Now I'm all squared away.

Answer 1

Manoj Kumar Boyini 8,950 Microsoft External Staff Moderator

Hi Steven Kadish - KHF,

Thanks what you observed makes sense. Although Privileged Role Administrator is the documented minimum role, some tenant-level controls can prevent it from unlocking Purview’s Roles and scopes page. Examples include PIM eligibility not being activated, Conditional Access or tenant hardening policies, role assignments scoped below the tenant root, or propagation delays. These controls can cause the portal to require a broader admin context.

Global Administrator succeeds because it bypasses those tenant-level restrictions and therefore is the most reliable way to make the page appear in hardened environments. That said, before leaving someone as Global Admin, you can try these lower-privilege checks: ensure the role is assigned at the tenant root (not just eligible), activate the PIM assignment if applicable, sign out and sign back in, and wait ~10–15 minutes for propagation. If those don’t work, Global Admin is a practical short-term fix.

Hope this helps, Please let us know if you have any questions and concerns.

Manoj Kumar Boyini 8,950 Reputation points Microsoft External Staff Moderator

2026-02-16T20:17:30.57+00:00

Hi Steven Kadish - KHF

I hope you had a chance to review the information shared earlier, and I hope this information has been helpful! If you still have questions, please let us know what is needed in the comments so the question can be answered.
Steven Kadish - KHF 45 Reputation points

2026-02-17T14:20:28.3766667+00:00

Thanks, no further questions.

Answer 2

Steven Kadish - KHF 45

Amazing! Another instance where Microsoft provides a hundred Entra roles, but Copilot tells me I need to use Global Admin.

Answer 3

To access the "Roles and Scopes" page in the Microsoft Purview portal, you need to be a global administrator or assigned the Role Management role. The Role Management role is specifically assigned to the Organization Management role group, which allows users to view, create, and modify role groups within Purview.

While the Compliance Administrator role is relevant for managing compliance-related tasks, it does not grant access to the "Roles and Scopes" page by itself. The Privileged Role Administrator role is also not mentioned as a requirement for this specific access.

Therefore, to ensure you can access the "Roles and Scopes" page, you should either be a global administrator or have the Role Management role assigned to you.

References:

Share via

What role do I need to assign myself roles in Purview?

3 answers

Your answer