How to Fix Activity Explorer or DLP Client Error in Microsoft Purview
Question details
Users and administrators cannot access Activity Explorer or DLP features in Microsoft Purview due to a client error indicating missing roles.

- Product
- Microsoft Purview
- Device & OS
- not provided
- Scenario
- Attempting to manage compliance features or view activity data within the Microsoft Purview portal.
- Observed behavior
- The portal displays a client error stating that required roles are missing, even when the user actively holds Compliance Administrator or Global Administrator permissions.
Ensure that your Microsoft 365 subscription includes the necessary licenses for Data Loss Prevention and that your admin role has been assigned for at least 24 hours to allow backend replication.
Verify Roles, Clear Browser Cache, and Check Service Health
Perform basic local troubleshooting to rule out browser caching issues and verify if there is a known service-side incident affecting Microsoft Purview.
Often, administrative role changes take time to propagate, or browser session tokens expire and cause false permission errors. Ruling these out is the first step before escalating the issue.
Log into the Microsoft 365 admin center, navigate to 'Roles', and ensure your account currently holds the 'Compliance Administrator' or 'Global Administrator' role.
Open your browser's settings and clear all cached data and cookies. Alternatively, open an Incognito or InPrivate browsing window and attempt to access Microsoft Purview again.
In the Microsoft 365 admin center, navigate to 'Health' > 'Service health' and look for any active advisories or incidents related to Microsoft Purview, Activity Explorer, or DLP services.

Contact Microsoft Online Support
If multiple administrators experience the exact same role-missing error, the issue is likely a backend synchronization failure requiring Microsoft engineering assistance.
Need a Reliable, Offline-Friendly Office Suite? Try WPS Office
While Microsoft Purview handles enterprise compliance, dealing with constant cloud service errors in Microsoft 365 can disrupt your workflow. If you need a fast, reliable, and highly compatible suite for creating documents and spreadsheets without worrying about backend access issues, WPS Office is an excellent free alternative.

Frequently Asked Questions
Why does Activity Explorer say I lack permissions when I am a Global Administrator?
This is often caused by a service-side synchronization incident within Microsoft 365, or a browser cache retaining outdated session tokens. If clearing your cache does not resolve it, Microsoft engineering may need to fix the backend sync.
Which roles are specifically required to view the Activity Explorer?
To access Activity Explorer, you typically need roles such as Compliance Administrator, Compliance Data Administrator, Security Administrator, or Global Administrator assigned in Microsoft Entra ID.
How long does it take for a newly assigned Compliance Administrator role to take effect?
Role assignments in Microsoft 365 can sometimes take up to 24 hours to fully propagate across all admin centers, including the Microsoft Purview portal. If you just assigned the role, wait and try logging in again later.
Can I access Purview DLP settings from PowerShell if the portal is down?
Yes, if the web portal is displaying client errors, administrators can use the Exchange Online PowerShell module (Connect-IPPSSession) to manage certain Data Loss Prevention compliance rules as a temporary workaround.




