Question 30

Explanation

You can view the contents of your organization’s sensitive information in the content explorer tab under the data classification section.

But, since the content explorer stores classified information, the access is restricted. Even a global administrator cannot view the sensitive content. To access the confidential information, you need to be added to both the following role groups:

· Content Explorer List Viewer (Can only view the item and its location, not the contents)

· Content Explorer Content Viewer (can view the sensitive information in plain text)

If you are not a member of either of the two role groups or added only to the Content Explorer Content Viewer role group, you will get this message. You cannot even navigate the document hierarchy.

If you are a member of the Content Explorer List Viewer role group, but not the Content Explorer Content Viewer role group, you will get this message. You can navigate the document hierarchy (thanks to Content Explorer List Viewer) but cannot view the content.

Only if you are added to both the role groups can you access the sensitive information (see the below image).

Note: I have faded the data, but the user can view the credit card number (sensitive data) in plain text.

Additional info: You can add users to the two role groups in the Microsoft Purview compliance portal.

Reference Link: https://learn.microsoft.com/en-us/training/modules/describe-information-protection-governance-capabilities-microsoft-365/3-describe-data-classification-capabilities-compliance-portal#what-is-the-content-explorer