You may have heard the Microsoft 365 terms ‘Purview’ and ‘eDiscovery’ floating around, but what actually is Microsoft Purview eDiscovery? And how can information managers and governors benefit from it?
Watch our in-depth intro to Microsoft Purview eDiscovery here, hosted by our trainer and consultant Sara Fennah (Microsoft MVP). Titled: Microsoft Purview eDiscovery | An intro for Information Managers.
What is eDiscovery?
Electronic discovery, or eDiscovery, is the process of identifying and delivering electronic information that can be used as evidence in legal cases, Official Information Act requests, Privacy Act requests or any other business scenarios when searching across the whole M365 ecosystem is required.
How do I use eDiscovery as an information manager?
You can use eDiscovery tools in Microsoft Purview to search for content in Exchange Online, OneDrive for Business, SharePoint Online, Microsoft Teams, Microsoft 365 Groups, and Yammer teams.
You can search mailboxes and sites in the same eDiscovery search, and then export the search results.
You can use Microsoft Purview eDiscovery (Standard) cases to identify, hold, and export content found in mailboxes and sites.
What can you do with Microsoft Purview eDiscovery (Premium)?
If your organisation has an Office 365 E5 or Microsoft 365 E5 subscription (or related E5 add-on subscriptions), you can further manage custodians and analyse content by using the feature-rich Microsoft Purview eDiscovery (Premium) solution in Microsoft 365.
Microsoft Purview eDiscovery (Premium) case can be used to create ‘holds’ to preserve content that might be relevant for your case.
You can place ‘holds’ on users and their data sources.
You can also place ‘holds’ on mailboxes (including group mailboxes), SharePoint sites, OneDrive for Business sites, Microsoft 365 groups as well as mailboxes and sites associated with Microsoft Teams.
When content locations are placed on ‘hold’, content can’t be removed until these locations are released from hold.
What are the role permissions within Microsoft Purview eDiscovery?
- eDiscovery Manager – This role group allows its members to create and manage eDiscovery cases, as long as they have created the case or have been added as members to the case.
- eDiscovery Administrator – Is a role group which allows full access to each and every eDiscovery case, without necessarily being a member of said case.
- Reviewer – Reviewers can be assigned as members of a case. They cannot create eDiscovery cases, run content search or even preview results of the search – they can only access and analyse the case data in Advanced eDiscovery. This is the most restrictive eDiscovery-related role, but without it, users cannot access any part of eDiscovery at all.
What’s the difference between Microsoft Purview eDiscovery (Standard) and (Premium)?
Microsoft Purview provides three eDiscovery solutions:
- Content search
- eDiscovery (Standard)
- eDiscovery (Premium)
| Content Search | eDiscovery (Standard) | eDiscovery (Premium) |
|---|---|---|
|
|
|
The following table from Microsoft (link to source) compares the key capabilities available in Content search, eDiscovery (Standard), and eDiscovery (Premium).
| Capability | Content search | eDiscovery (Standard) | eDiscovery (Premium) |
| Search for content | Yes | Yes | Yes |
| Keyword queries and search conditions | Yes | Yes | Yes |
| Search statistics | Yes | Yes | Yes |
| Export search results | Yes | Yes | Yes |
| Role-based permissions | Yes | Yes | Yes |
| Case management | Yes | Yes | |
| Place content locations on legal hold | Yes | Yes | |
| Custodian management | Yes | ||
| Legal hold notifications | Yes | ||
| Advanced indexing | Yes | ||
| Error remediation | Yes | ||
| Review sets | Yes | ||
| Support for cloud attachments and SharePoint versions | Yes | ||
| Optical character recognition | Yes | ||
| Conversation threading | Yes | ||
| Collection statistics and reports | Yes | ||
| Review set filtering | Yes | ||
| Tagging | Yes | ||
| Analytics | Yes | ||
| Predictive coding models | Yes | ||
| Computed document metadata | Yes | ||
| Transparency of long-running jobs | Yes | ||
| Export to customer-owned Azure Storage location | Yes |
Want to learn more?
If you’d like to learn about the in-depth capabilities of Microsoft Purview eDiscovery tools, our 3-hour, Microsoft Purview eDiscovery Training Course is the best place to start. (Links to course in UK, US, ANZ time zones).
Our virtual, instructor-led training courses are conducted in three different time zones. Select the country below that most closely matches your time zone to find out more about this course.
- Australia / New Zealand – Microsoft Purview eDiscovery Training Course
- United Kingdom – Microsoft Purview eDiscovery Training Course
- United States – Microsoft Purview eDiscovery Training Course
