Compliance Problems

How to Create Custom Microsoft Purview DLP Roles for HR and Finance

Maira Mehtab Sep 24, 2026 870 views

Question details

The user needs to create custom Microsoft Purview roles to separately manage Data Loss Prevention (DLP) policies and alerts for HR and Finance departments.

Product: Microsoft Purview
Device & OS: not provided
Scenario: Managing separate Data Loss Prevention (DLP) policies and alerts for different organizational departments (HR and Finance).
Observed behavior: The user requires guidance on configuring custom roles within the Microsoft Purview compliance portal to achieve departmental separation for DLP management.

Before you start

Ensure you have Global Administrator or Compliance Administrator permissions in your Microsoft 365 tenant before attempting to create or modify custom Purview roles.

Solution 1Recommended

Seek Guidance in the Microsoft Purview Q&A Forum

Since configuring custom departmental DLP roles requires specialized Microsoft 365 tenant configurations, the official Microsoft Q&A forum is the recommended place for tailored assistance.

Microsoft Purview's compliance architecture can be complex, especially when separating policies and alert visibility across multiple departments like HR and Finance. The Microsoft community engineers monitor the official Q&A forums and can provide specific architectural advice.

Access the Microsoft Q&A Forum

Open your web browser and navigate to the dedicated Microsoft Purview Q&A tag at https://learn.microsoft.com/en-us/answers/tags/284/microsoft-purview.

Sign in to Your Account

Click the 'Sign in' button at the top right of the page and log in using your Microsoft account credentials.

Post Your Question

Click 'Ask a question', detail your exact requirements for separating DLP policies and alerts for HR and Finance, and submit it for expert community guidance.

Official Microsoft Support: Posting detailed information about your current licensing (e.g., E5 vs E3) in the forum will help the Microsoft engineers provide a more accurate solution.

Solution 2

Configure Custom Role Groups in the Compliance Portal

You can manually create custom role groups in the Microsoft Purview compliance portal to restrict administrative access for specific departments.

Free Microsoft Office alternative

Looking for a Highly Compatible Office Suite?

While Microsoft Purview handles complex enterprise compliance and data loss prevention, WPS Office provides a lightweight, free, and highly compatible alternative for your daily document creation and editing needs across all your departments.

1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
2. Install WPS Office: Run the downloaded file and follow the simple on-screen instructions to complete the installation.
3. Start Creating: Open WPS Office to instantly start creating, editing, and sharing your Word, Excel, and PowerPoint documents.

Free and lightweight alternative to Microsoft OfficeFully compatible with Microsoft Word, Excel, and PowerPoint formatsFamiliar user interface for seamless migration without steep learning curvesCross-platform support for Windows, Mac, Linux, iOS, and AndroidBuilt-in PDF editing and format conversion tools

microsoft office alternative - wps office

Frequently Asked Questions

Why do I need custom roles for Microsoft Purview DLP?

Custom roles allow organizations to restrict access so that specific departments, like HR and Finance, can only view and manage DLP policies and alerts that are relevant to their own highly sensitive data.

What permissions are required to create Purview DLP roles?

You typically need to be assigned the Role Management role or be a Global Administrator in your Microsoft 365 tenant to create and manage custom role groups in the Microsoft Purview compliance portal.

Can I separate DLP alerts by department in Microsoft Purview?

Yes, by configuring custom role groups and scoping your DLP policies to specific SharePoint sites, Exchange mailboxes, or OneDrive accounts associated with those departments, you can restrict alert visibility strictly to the respective custom role members.

Microsoft Office Security Issues