Creating Policies within Purview under a Microsoft 365 Business Premium Licence

Question

Creating Policies within Purview under a Microsoft 365 Business Premium Licence

Mark G Lomas 20

The standard documentation is not helping - can I create DLP Policies within Purview under a Microsoft 365 Business Premium Licence?

In Purview > Information Protection > Policies > Proetction policies (preview) page says "Looks like you need permissions to get started". I have a Global Administrator role.

What else am I missing?

0 comments

2 answers

Your answer

Answer 1

Hi @Mark G Lomas ,

Microsoft 365 Business Premium does include Microsoft Purview Data Loss Prevention, so you can create DLP policies with this license.

In this case, because DLP policies can be created from Purview > Data Loss Prevention > Policies, the license and core DLP permissions look fine. The permission message appears to be specific to the Information Protection > Protection policies (preview) page, which is a separate preview experience.

Please continue creating DLP policies from Purview > Data Loss Prevention > Policies. If access to the Protection policies (preview) page is specifically required, this should be checked through Microsoft support because it may be tenant/preview-experience specific rather than a standard DLP licensing issue.

Answer 2

Ana Le 1,895 Independent Advisor

Hi,

Yes, Microsoft 365 Business Premium supports Microsoft Purview Data Loss Prevention (DLP), so you should be able to create DLP policies with this license.

Based on the error message, this appears to be a permissions issue rather than a licensing issue.

Although you’re a Global Administrator, some workloads in Microsoft Purview use their own role-based access control (RBAC). In particular, creating and managing DLP policies requires your account to be assigned to an appropriate Microsoft Purview built-in role group, such as Compliance Administrator, Compliance Data Administrator, Information Protection, Information Protection Admin, or Security Administrator.

I recommend checking the following:

Go to Microsoft Purview portal > Settings > Roles and scopes > Role groups.
Verify that your account is a member of one of the required Purview role groups for DLP management.
If you have just been assigned the role, sign out of the Purview portal, wait for the permission changes to propagate, and then sign back in.

For more information, you can refer to these Microsoft Learn articles:

If you’ve already confirmed that your account has the appropriate Purview role assigned and you’re still seeing the same message, could you let me know:

Is this a newly created Microsoft 365 Business Premium tenant or an existing one?
Does the issue only occur under Information Protection > Policies > Protection policies (preview), or do you encounter permission errors elsewhere in the Purview portal as well?
If possible, could you also share a screenshot of the error (with any personal information removed)?

That information will help determine whether this is a role assignment issue or something specific to the Protection policies (preview) experience.

Mark G Lomas 20 Reputation points

2026-07-28T07:30:02.8033333+00:00

I have the following roles assigned to me: Global administrator and, in Purview (under Microsoft Entra ID) Compliance data administrator and Compliance administrator.
Mark G Lomas 20 Reputation points

2026-07-28T07:33:30.0533333+00:00

It is an existing Microsoft 365 Business Premium tenant

I have not encountered issues elsewhere, but I am only trying to set up DLP at this time.
Ana Le 1,895 Reputation points Independent Advisor

2026-07-29T12:43:21.38+00:00

Thank you for the additional information and for sharing the screenshot.

Based on what you've described, it doesn't appear to be a straightforward licensing or standard role assignment issue. I did notice that the page also lists Organization Management as one of the role groups that can manage Protection policies. Could you check whether your account is also a member of the Organization Management role group in Microsoft Purview > Settings > Roles and scopes > Role groups?

I'd also like to confirm one more thing:

Are you able to open Data Loss Prevention from the left navigation and create a DLP policy there, or does the same permission error occur?

This will help determine whether the issue is specific to the Protection policies (preview) experience or whether it affects DLP management more broadly.

If you're also unable to access Data Loss Prevention despite having the appropriate roles assigned, I would recommend opening a support request through the Microsoft 365 admin center (Help & support > New service request). At that point, the issue is likely to require further investigation by the Microsoft Purview support team to verify the backend permission configuration or identify any tenant-specific issues.ation or identify any tenant-specific issues.
Mark G Lomas 20 Reputation points

2026-07-30T07:58:47.27+00:00

I was not, but I am now a member of Organization Management role group.

It seems I can create a policy in Microsoft Purview > DLP > Policies

But I cannot create in Microsoft Purview > IP > Policies > Protection policies (preview) where I get the same error message as the screenshot above
Ana Le 1,895 Reputation points Independent Advisor

2026-07-30T11:12:17.29+00:00

Since you're able to create policies under Data Loss Prevention > Policies, this confirms that your licensing and the required permissions for DLP are working correctly.

As the issue is isolated to Information Protection > Protection policies (preview), it appears to be specific to that experience rather than to DLP management in general.

If your goal is to create DLP policies, you can continue using the Data Loss Prevention section.

However, if you specifically need to use Protection policies (preview), I'd recommend contacting Microsoft Support for further investigation, as this doesn't appear to be caused by licensing or the standard administrative role assignments.
Ganesh Chelluri 190 Reputation points Microsoft External Staff Moderator

2026-08-04T04:20:58.0333333+00:00

Hi @Mark G Lomas ,

Thanks for confirming. Since DLP > Policies works now, your licence and DLP permissions are fine Business Premium does include Purview DLP, and the required membership is one of the Purview role groups such as Compliance Administrator, Compliance Data Administrator, Information Protection, Information Protection Admin or Security Administrator. Worth noting the roles you originally listed were Entra roles rather than Purview role group membership, which is a common mix-up adding Organization Management is what gave you the Role Management role and full visibility there.

The Protection policies (preview) page is a separate experience, so being blocked there isn't a DLP or licence problem. If you specifically need it, raise a service request from the M365 admin center (Help & support > New service request) so they can check it against your tenant mention your licence, the roles you now hold, and that DLP policy creation works.

Otherwise, carry on building your DLP policies under Data Loss Prevention > Policies, and start them in simulation mode before enforcing.