Compliance Problems

Permissions Needed to Place a Microsoft 365 Litigation Hold

Aamir Naveed Akram Oct 9, 2026 869 views

Question details

The user needs to know what specific administrator permissions are required to successfully place a Microsoft 365 mailbox on Litigation Hold.

Permissions Needed to Place a Microsoft 365 Litigation Hold

Product: Microsoft 365
Device & OS: not provided
Scenario: A user is attempting to place a user mailbox on Litigation Hold for compliance reasons but is receiving an insufficient-permissions error message.
Observed behavior: The system blocks the Litigation Hold action unless the account has been explicitly assigned the Discovery Management role group or the Legal Hold and Mailbox Search roles.

Before you start

Ensure you have access to a Global Administrator or Exchange Administrator account, as these privileges are required to view and modify role group assignments in Microsoft 365.

Solution 1Recommended

Assign Discovery Management and Legal Hold Permissions

To resolve insufficient permissions, an administrator must assign specific Exchange Online eDiscovery roles to the user account.

Placing a mailbox on Litigation Hold in Microsoft 365 requires specialized administrative roles to ensure legal compliance and data security. Standard users cannot perform this action.

Specifically, the account performing the hold must be a member of the Discovery Management role group, or must have the Legal Hold and Mailbox Search management roles manually assigned via the Exchange Admin Center.

Sign in to the Admin Center

Log into the Microsoft Purview compliance portal or the Exchange Admin Center using a Global Administrator account.

Navigate to Exchange Roles

In the left navigation pane, go to 'Roles' and then select 'Exchange role groups'.

Edit Discovery Management

Search for and select the 'Discovery Management' role group from the list, then click on the edit option to modify its settings.

Assign the User

Add the target user account to the member list and save the changes to grant them the required Litigation Hold permissions.

Assign Discovery Management and Legal Hold Permissions

Permission Propagation Time: Please note that it may take a few hours for newly assigned Exchange Online permissions to fully propagate and take effect across the Microsoft 365 environment.

Free Microsoft Office alternative

Boost Your Everyday Productivity with WPS Office

While advanced tasks like Litigation Holds require Microsoft 365 admin capabilities, your everyday document management shouldn't be complicated. WPS Office provides a free, lightweight, and highly compatible suite for all your word processing, spreadsheet, and presentation needs.

Fully compatible with Microsoft Office formats, allowing you to open, edit, and save Word, Excel, and PowerPoint files.A free, lightweight office suite that operates smoothly on Windows, Mac, and Linux systems.Familiar and intuitive user interface ensures a seamless migration with zero learning curve.Built-in PDF editing tools for secure document handling, signing, and local compliance.

microsoft office alternative - wps office

Frequently Asked Questions

What happens when a mailbox is placed on Litigation Hold?

When a mailbox is placed on Litigation Hold, all mailbox content—including deleted items and original versions of modified items—is preserved indefinitely or for a specified duration to meet legal and compliance requirements.

Can a standard user place a Litigation Hold on their own mailbox?

No, standard users cannot place a Litigation Hold. This action is restricted to compliance officers and administrators with specific eDiscovery permissions, such as the Discovery Management role.

How long does it take for a Litigation Hold to apply?

Once the hold is applied by an administrator with the correct permissions, it can take up to 60 minutes for the Litigation Hold to fully take effect on the specific mailbox in Exchange Online.

Microsoft Office Security Issues