Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
You can run diagnostics to identify and resolve issues in Microsoft Purview. The diagnostics offer insights into known issues and provide instructions to fix them. Although the diagnostics can fix some configuration issues, they don't make changes to your tenant without your consent.
Self-help diagnostics that relate to Microsoft Purview are available in the following locations:
-
- On Solutions pages
- On the Help pane
-
- On the Help pane
Diagnostics on Solutions pages
The diagnostics on Solutions pages currently cover the following areas in Microsoft Purview:
- Sensitivity labels and label policies
- Email message encryption
- Data loss prevention (DLP) policies
You can find these diagnostics on the following portal pages:
- Solutions > Information Protection > Diagnostics
- Solutions > Data Loss Prevention > Diagnostics
Note
Diagnostics on Solutions pages are being rolled out gradually and might not yet be available in your organization.
Available diagnostics
The following table lists the available diagnostics on Solutions pages. You can access the diagnostics by selecting the associated link in the third column. When you're prompted, sign in to the Microsoft Purview portal.
Note: To run these diagnostics, you must be a Microsoft 365 global administrator.
| Issue | Checks performed | Solutions page |
|---|---|---|
| Email encryption isn't working as expected. Are there any issues with my licenses or settings? | Checks license availability for sensitivity labels. Also checks information protection settings for your tenant, including Information Rights Management (IRM) and transport rule settings. Validates encryption settings. | Information Protection diagnostics |
| A user can't find the sensitivity label they need. Does the label policy apply to them? | Checks which sensitivity labels are available to the user. Diagnostic results include information such as the label names, settings, and where the labels are available. | Information Protection diagnostics |
| A DLP rule isn't enforced for a particular user. Is this user included in the DLP policy? | Checks which DLP policies apply to a user. Diagnostic results include the policy names and where the policies apply. | DLP diagnostics |
Diagnostics on the Help pane
The diagnostics on the Help pane cover the following areas in Microsoft Purview:
- Archive mailboxes
- Mailbox retention
- eDiscovery holds and searches
- Email account security
- Sensitivity labels and label policies
- Email message encryption
- DLP policies
Note
Diagnostics on the Help pane aren't available in the following environments: GCC High, DoD, and Microsoft 365 operated by 21Vianet.
Find diagnostics through the Help menu
You can search for diagnostics by using the Help menu in the Microsoft Purview portal or the Microsoft 365 admin center.
Microsoft 365 admin center
Sign in to the Microsoft 365 admin center as an administrator.
Select the Help icon in the upper-right corner of the portal to open the Help pane.
In the search box, enter a brief description of the issue that you want to resolve.
Select one of the listed options that are generated based on the issue that you described.
If the selected option has an associated diagnostic, enter any requested information, and then select Run Tests to start the diagnostic.
Microsoft Purview portal
Sign in to the Microsoft Purview portal as an administrator.
Select the Help icon in the upper-right corner of the portal to open the Help and support pane.
In the Help and support pane, select Ask a question to open the Help pane.
In the search box, enter a brief description of the issue that you want to resolve.
Select one of the listed options that are generated based on the issue that you described.
If the selected option has an associated diagnostic, enter any requested information, and then select Run Tests to start the diagnostic.
Available diagnostics
The following table lists the available diagnostics on the Help pane. You can access each diagnostic by selecting the associated link in the first column. When you're prompted, sign in to the Microsoft 365 admin center as an administrator.
Note: To run these diagnostics, you must meet the minimum role requirement that's listed in the table.
| Diagnostics | Checks performed | Minimum role | Support article |
|---|---|---|---|
| Archive mailbox | Checks for issues that are related to archive mailboxes. | Any Microsoft 365 admin role | Enable archive mailboxes for Microsoft 365 |
| Retention policy for a user mailbox | Checks the retention policy settings for a user mailbox. | Any Microsoft 365 admin role | Retention tags and retention policies in Exchange Online |
| Mailbox holds | Lists all holds that are applied to a mailbox. Hold types include: retention, eDiscovery, app retention, delay, and delay release. | Compliance admin | How to identify the type of hold placed on an Exchange Online mailbox |
| Grace eDiscovery hold or invalid retention policy | Identifies items that prevent site deletion, specifically active holds, compliance tags (retention labels), and invalid retention policies. Provides an option to remove any grace eDiscovery hold or invalid retention policy that's found. | Any Microsoft 365 admin role to identify items. Compliance admin role for removal. | Can't delete a site because of a retention policy or eDiscovery hold |
| Compromised account | Identifies suspicious account activities, and provides information about how to recover a compromised account. | Any Microsoft 365 admin role | Respond to a compromised email account |
| eDiscovery RBAC | Checks eDiscovery role-based access control (RBAC) to determine whether the Search, Export, or Preview roles are assigned to the designated administrator account. | Any Microsoft 365 admin role | Resolve search errors in eDiscovery (Standard) |
| DLP policy and rule configuration |
Troubleshoots common issues that affect a DLP policy and rule configuration. Checks whether a DLP policy and rule are correctly configured for use in the following workloads:
|
Global admin | Scenario-based troubleshooting guide for DLP issues |
| DLP policy and rule configuration for policy tips |
Troubleshoots common policy tip configuration issues that affect a DLP rule and its policy for Outlook desktop clients and Outlook on the web. | Global admin | Resolve issues that affect DLP policy tips |
| Sensitivity label configuration |
Troubleshoots common issues that affect a sensitivity label. Checks whether a sensitivity label is correctly configured for use in various workloads. | Global admin | Sensitivity labels are missing in Outlook, Outlook on the web, and other Office apps |
| Microsoft Purview Message Encryption configuration |
Validates the tenant configuration for Microsoft Purview Message Encryption. Identifies any configuration issues. | Any Microsoft 365 admin role | Resolve Microsoft Purview Message Encryption issues |