Purview Configuration Discovery

Softchoice a World Wide Technology co.

New · October 2026

Discover how a customer's Microsoft Purview is configured, from sensitivity labels and DLP to retention, audit and insider risk, and score it in one pass. Read-only: nothing in the tenant changes, and results stay in this browser tab.

Live discoveryGraph + Purview API · one sign-in

Signs in to the customer tenant and reads everything in one pass: licences, labels and label policies, auto-labeling, DLP, retention, insider risk, communication compliance, audit, alerts, Secure Score and SharePoint sharing. Purview policies are read through a Softchoice relay that forwards the reader's own token and stores nothing.

Tenant ID or domain

App registration

Entra app client ID

Defaults to the existing multi-tenant Softchoice assessment app. Purview scopes are requested at sign-in, so the first run in a tenant needs admin consent.

Import PowerShell exportFallback

Use this when the Purview API is refused in a tenant (no Exchange.Manage consent, or a cmdlet blocked for the account). Run the read-only collector script below, then drop its .json here. It merges with a live discovery of the same tenant.

Drop purview-discovery-*.json here or click to choose a file

PowerShell collector script

Needs the ExchangeOnlineManagement module (3.4+) and a Global Reader or Compliance Administrator account. Calls only Get-* cmdlets.

Admin consent for a new tenant

If Microsoft asks for admin consent, send this link to the customer's Global Admin. After consent, any Global Reader can run live discovery.

Delegated, read-only scopes:

What each source covers

© Softchoice & World Wide Technology (WWT).
Proprietary & Confidential. For internal Softchoice-WWT consultant use only.

Copy this text