Roles for creating vs changing sensitivity labels
This sheet compares Information Protection Admins, Sensitivity Label Administrator, Compliance Administrator, M365 group Owner.
| Criterion | Information Protection Admins | Sensitivity Label Administrator | Compliance Administrator | M365 group Owner |
|---|---|---|---|---|
| Grants | Purview built-in role group for labelling | Single role for a custom role group | General compliance role group | SharePoint/Teams group ownership, not a Purview role |
The verdict, the full comparison, 4 rules and 3 traps are part of SC-401 access. Unlock SC-401.