top of page
Search

(80) Microsoft Purview - eDiscovery Solutions

  • Writer: Mr B SOE way
    Mr B SOE way
  • Jun 16, 2023
  • 2 min read

Electronic discovery, or eDiscovery, is the process of identifying and delivering electronic information that can be used as evidence in legal cases.


Microsoft Purview provides three eDiscovery solutions: Content search, eDiscovery (Standard), and eDiscovery (Premium).


Solutions:

Content search:

  • Search for content

  • Keyword queries and search conditions

  • Export search results

  • Role-based permissions

eDiscovery (Standard):

  • Search and export

  • Case management

  • Legal hold

eDiscovery (Premium):

  • Custodian management

  • Legal hold notifications

  • Advanced indexing

  • Review set filtering

  • Tagging

  • Analytics

  • Predictive coding models and more

How to use eDiscovery in Microsoft Purview:


Step 1: Verify and assign appropriate licenses:

Check for licensing for eDiscovery (Standard), ensure licenses have been assigned.

Organization subscription. To access eDiscovery (Standard) in the Microsoft Purview compliance portal and use the hold and export features, an organization must have:

  • Exchange online Plan 2, OR

  • Microsoft 365 E3 or Office 365 E3 subscription or higher, OR

  • Microsoft 365 Frontline organizations must have an F5 subscription.

  • Per-user licensing. To place an eDiscovery hold on mailboxes and sites, users must be assigned one of the following licenses, depending on your organization subscription:

    • Exchange online Plan 2 license, OR

    • A Microsoft 365 E3 or Office 365 E3 license or higher, OR

    • Office 365 E1 license with an Exchange Online Plan 2 or Exchange Online Archiving add-on license, OR

    • Microsoft 365 Frontline F5 Compliance or F5 Security & Compliance add-on license AND Office 365 E1 license with a SharePoint Online Plan 2 or OneDrive for Business Plan 2 add-on license.

Step 2: Assign eDiscovery permissions

1. On the https://compliance.microsoft.com portal, select Roles & Scopes then select Permissions

2. On the Permissions page, under the Microsoft Purview solutions group, select Roles. 3. On the Role groups for Microsoft Purview solutions page, select the eDiscovery Manager role group.



4. On the eDiscovery Manager detail pane that appears, select Edit next to the eDiscovery Manager section.

5. On the choose eDiscovery Manager page in the edit role group wizard, select Choose Discovery Manager.

6. On the Choose eDiscovery Manager page, select the +Add button. Doing so displays the list of users.


7. Select the checkbox for all users you want to add to the role group, and then select the Add button at the bottom of the pane.

8. Select users to manage eDiscovery Administrator.


9. Under review the role group and finish, edit any changes if needed then click Save.


Step 3: Create an eDiscovery (Standard) case.

The user who creates the case is automatically added as a member.

1. On the https://compliance.microsoft.com portal, select eDiscovery then select Standard.

2. Select Create a case.

















3. Enter a name for the case then click Save. It will then appear here.




Step 4: Create an eDiscovery hold


After an organisation creates a eDiscovery hold, it will take up to 24 hours for the hold to take effect.


1. On the https://compliance.microsoft.com portal, select eDiscovery then select Standard.

2. Click on the case name which will then appear like so.














3. Select Searches tab, then select New Search. Tick the relevant locations.



4. Under conditions, enter the keywords along with conditions. Then select Next then select Submit.


5. You can click on the "Search" then select Actions then select Export results.




 
 
 

Comments

bottom of page