AskTechGurus Get help now →

Microsoft 365 & OneDrive

Purview content search fails with a permissions error

eDiscovery or content search returns a permissions error even for an administrator. The account needs the right Purview role group, not just a global admin role.

What you’re seeing

  • A content search or eDiscovery case returns a permissions error, even when you're signed in as a global administrator.
  • The eDiscovery or content search area of the Microsoft Purview portal is missing or unavailable.
  • Searches run, but previewing results or starting an export fails.
  • You can see cases you created but not ones started by a colleague.

Common causes

Every environment is different, but these are the causes our engineers find most often:

  • Global administrator doesn't automatically include eDiscovery rights, and the account isn't in the eDiscovery Manager role group or an equivalent.
  • The account is an eDiscovery Manager rather than an eDiscovery Administrator, so it can only see and work with its own cases.
  • Preview and export depend on separate permissions that weren't granted along with the ability to search.
  • A compliance boundary or search permissions filter limits which mailboxes and sites the account may search.
  • Role group membership was changed recently and hasn't finished taking effect.

Why it matters

Content searches are how businesses answer legal holds, litigation discovery, HR investigations, public records requests and regulatory inquiries. These requests usually come with deadlines, and a search that won't run can mean missed obligations, extra legal cost or sanctions. Granting broad rights in a hurry is risky too, because eDiscovery access lets someone read any mailbox or file in the organization. Getting the role assignments right protects both your deadline and your staff's privacy.

How AskTechGurus fixes it

Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.

Tell us what’s happening

Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.

A certified engineer diagnoses it

A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.

Fixed and verified with you

The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.

Pay only when it’s resolved

Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.

Frequently asked questions

Why can't a global administrator run a search?

Microsoft deliberately separates eDiscovery rights from general administration, because searching everyone's mail is a sensitive privilege. The account needs membership in the right Purview role group.

Is it safe to give someone eDiscovery access?

It's safe when it's limited to the people who need it and the actions are logged. We confirm with you who should hold the role before assigning anything.

Does running a content search change or delete any data?

No. A search only locates and copies matching items; the original mailboxes and files are left untouched.

Still stuck? Let a pro take it from here.

AskTechGurus connects you with vetted, US-based systems engineers who fix this every day. No call centers, no scripts, no surprise bills.

Start now →