You may have heard the Microsoft 365 terms ‘Purview’ and ‘eDiscovery’ floating around, but what actually is Microsoft Purview eDiscovery? And how can information managers and governors benefit from it? 

Watch our in-depth intro to Microsoft Purview eDiscovery here, hosted by our trainer and consultant Sara Fennah (Microsoft MVP). Titled: Microsoft Purview eDiscovery | An intro for Information Managers.

What is eDiscovery?

Electronic discovery, or eDiscovery, is the process of identifying and delivering electronic information that can be used as evidence in legal cases, Official Information Act requests, Privacy Act requests or any other business scenarios when searching across the whole M365 ecosystem is required.

How do I use eDiscovery as an information manager?

You can use eDiscovery tools in Microsoft Purview to search for content in Exchange Online, OneDrive for Business, SharePoint Online, Microsoft Teams, Microsoft 365 Groups, and Yammer teams. 

You can search mailboxes and sites in the same eDiscovery search, and then export the search results.  

You can use Microsoft Purview eDiscovery (Standard) cases to identify, hold, and export content found in mailboxes and sites. 

What can you do with Microsoft Purview eDiscovery (Premium)?

If your organisation has an Office 365 E5 or Microsoft 365 E5 subscription (or related E5 add-on subscriptions), you can further manage custodians and analyse content by using the feature-rich Microsoft Purview eDiscovery (Premium) solution in Microsoft 365. 

Microsoft Purview eDiscovery (Premium) case can be used to create ‘holds’ to preserve content that might be relevant for your case. 

You can place ‘holds’ on users and their data sources. 

You can also place ‘holds’ on mailboxes (including group mailboxes), SharePoint sites, OneDrive for Business sites, Microsoft 365 groups as well as mailboxes and sites associated with Microsoft Teams. 

When content locations are placed on ‘hold’, content can’t be removed until these locations are released from hold. 

What are the role permissions within Microsoft Purview eDiscovery?

  • eDiscovery Manager This role group allows its members to create and manage eDiscovery cases, as long as they have created the case or have been added as members to the case.
  • eDiscovery Administrator – Is a role group which allows full access to each and every eDiscovery case, without necessarily being a member of said case.
  • Reviewer – Reviewers can be assigned as members of a case. They cannot create eDiscovery cases, run content search or even preview results of the search – they can only access and analyse the case data in Advanced eDiscovery. This is the most restrictive eDiscovery-related role, but without it, users cannot access any part of eDiscovery at all. 

What’s the difference between Microsoft Purview eDiscovery (Standard) and (Premium)?

Microsoft Purview provides three eDiscovery solutions:

  • Content search
  • eDiscovery (Standard)
  • eDiscovery (Premium)
Content SearcheDiscovery (Standard)eDiscovery (Premium)
  • Search for content
  • Keyword queries and search conditions
  • Export search results
  • Role-based permissions
  • Search and export
  • Case management
  • Legal hold
  • Custodian management
  • Legal hold notifications
  • Advanced indexing
  • Review set filtering
  • Tagging
  • Analytics
  • Predictive coding models
  • And more…

The following table from Microsoft (link to source) compares the key capabilities available in Content search, eDiscovery (Standard), and eDiscovery (Premium). 

Capability Content search eDiscovery (Standard) eDiscovery (Premium) 
Search for content YesYesYes
Keyword queries and search conditions YesYesYes
Search statistics YesYesYes
Export search results YesYesYes
Role-based permissions YesYesYes
Case management  YesYes
Place content locations on legal hold  YesYes
Custodian management   Yes
Legal hold notifications   Yes
Advanced indexing   Yes
Error remediation   Yes
Review sets   Yes
Support for cloud attachments and SharePoint versions   Yes
Optical character recognition   Yes
Conversation threading   Yes
Collection statistics and reports   Yes
Review set filtering   Yes
Tagging   Yes
Analytics   Yes
Predictive coding models   Yes
Computed document metadata   Yes
Transparency of long-running jobs   Yes
Export to customer-owned Azure Storage location    Yes


Want to learn more?

If you’d like to learn about the in-depth capabilities of Microsoft Purview eDiscovery tools, our 3-hour, Microsoft Purview eDiscovery Training Course is the best place to start. (Links to course in UKUSANZ time zones). 

Our virtual, instructor-led training courses are conducted in three different time zones. Select the country below that most closely matches your time zone to find out more about this course.