Resources

Tenant · Unified Catalog · Data Map

Microsoft Purview access model

Who sees what, and why.

Pick a person. Follow their permissions through the three places Purview grants access, and see exactly where each role is assigned.

Portrait of Maya Chen

Maya Chen · Sales operations

Business user

“I just want to find the right report and know I can trust it.”

    Choose a persona

    Maya Chen’s path through Purview

    How far they can reach

      All eight personas at a glance

      PersonaTenantUnified CatalogData Map
      Business userMaya Chen, Sales operationsNoneGlobal Catalog ReaderNone
      Data consumerDaniel Ortiz, Financial analystNoneGlobal Catalog ReaderData Reader
      Data stewardPriya Nair, Finance data stewardNoneData Steward
      Governance Domain Reader
      Data Curator
      Data product ownerJames Okafor, Product lead, Treasury dataNoneData Product OwnerData Reader
      Domain ownerLaura Becker, Head of Finance dataNoneGovernance Domain OwnerNone
      Data quality leadTom Lindqvist, Data quality engineerNoneData Quality Steward
      Data Profile Steward
      Data Health Reader
      None
      Data Map engineerAisha Rahman, Platform data engineerNoneGlobal Catalog ReaderCollection Admin
      Data Source Admin
      Data Curator
      Governance adminKen Watanabe, Purview administratorData GovernanceGovernance Domain CreatorDomain Admin
      Collection Admin

      Sources

      Role names reflect the Microsoft Purview portal as of November 2026, checked against Microsoft's documentation. Preview roles change, so confirm on Microsoft Learn before you assign roles in production. People and organisation are fictional; sample portraits from Unsplash.

      Assigning roles across many domains? Keystone Studio assigns Unified Catalog roles in bulk from a CSV, or we can set up the whole access model for you.

      Not sure where to start?

      Book a 30-minute call and tell us what worries you about Microsoft 365: oversharing, an audit, or a Copilot rollout. Or email us and we'll reply within one working day.