'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix: Cannot Create Sensitivity Label in Microsoft Purview
Question details
The user is unable to create a sensitivity label in Microsoft Purview despite having an eligible Microsoft 365 E5 license.
- Product
- Microsoft Purview
- Device & OS
- not provided
- Scenario
- Attempting to set up data protection, encryption, and compliance policies by creating new sensitivity labels in the Microsoft Purview compliance portal.
- Observed behavior
- The label creation process fails or returns an error, preventing the new sensitivity label from being saved and applied to the tenant.
Ensure you have global administrator or compliance administrator credentials handy, as troubleshooting Purview label creation requires elevated tenant-level permissions in the Microsoft 365 admin center.
Verify Account Roles and License Propagation
Ensure your user account is assigned the necessary compliance roles and that your Microsoft 365 E5 license is active and fully propagated.
Microsoft Purview requires specific administrative roles to manage sensitivity labels. Even if the tenant holds an E5 license, the individual user account must be granted explicit permission to create labels.
Additionally, recently purchased or assigned licenses may take up to 24 hours to fully propagate across Microsoft's backend services.
Navigate to admin.microsoft.com and log in with your global administrator credentials.
Go to the 'Billing' section on the left sidebar and select 'Your products'. Confirm that the Microsoft 365 E5 license is active and assigned to your account.
Navigate to 'Roles' > 'Role assignments'. Search for your user account and verify that it has either the 'Compliance Administrator' or 'Compliance Data Administrator' role assigned.
If you just assigned the role or license, wait a few hours before attempting to create the sensitivity label in the Purview portal again.
Submit a Business Support Ticket
If licensing and permissions are correct but the label creation still fails, a backend tenant configuration issue may be blocking the process.
Secure Your Documents Seamlessly with WPS Office
While resolving enterprise-level compliance issues in Microsoft Purview requires backend administrative support, everyday document creation and security can be handled effortlessly. WPS Office is a highly compatible, free alternative to Microsoft Office that offers built-in document protection features.
- 1. Download WPS Office: Visit the official WPS website and download the installation package for your operating system.
- 2. Install the Application: Run the installer and follow the on-screen prompts to set up WPS Office on your device.
- 3. Encrypt Your Files: Open any document, go to Menu > Document Encryption, and set a secure password to protect your sensitive data.
Frequently Asked Questions
What roles are required to create sensitivity labels in Microsoft Purview?
To create and manage sensitivity labels, your account must be assigned specific permissions, typically the 'Compliance Administrator', 'Compliance Data Administrator', or 'Security Administrator' role in Microsoft Entra ID.
Can I use sensitivity labels without a Microsoft 365 E5 license?
Yes, basic manual sensitivity labeling is available with standard Microsoft 365 E3 licenses. However, advanced features like automated labeling, recommended labeling, and certain machine learning classifiers require an E5 license or an E5 Compliance add-on.
Why is the Purview portal grayed out when I try to add a label?
This usually indicates that your account lacks the necessary administrative permissions, or your organization's subscription does not support the specific compliance feature you are trying to access. Verify your roles in the Microsoft 365 admin center.
How long does it take for a new sensitivity label to appear in Office apps?
Once successfully created and published via a label policy in Microsoft Purview, it can take up to 24 hours for the new sensitivity label to sync and appear in desktop or web versions of Word, Excel, and PowerPoint.
