Updated min admin role required to run diag for grace ediscovery hold

Author: Cloud-Writer

Microsoft365/purview/purview/diagnostics/purview-compliance-diagnostics.md

@@ -15,7 +15,7 @@ ms.reviewer: shadans, sathyana, meerak, v-shorestris
 appliesto:
   - Microsoft Purview
 search.appverid: MET150
-ms.date: 07/21/2025
+ms.date: 09/11/2025
 ---
 
 # Self-help diagnostics for Microsoft Purview
@@ -117,7 +117,7 @@ The following table lists the available diagnostics on the **Help** pane. You ca
 | [Archive mailbox](https://aka.ms/PillarArchiveMailbox) | Checks for issues that are related to archive mailboxes. | Any Microsoft 365 admin role | [Enable archive mailboxes for Microsoft 365](/microsoft-365/compliance/enable-archive-mailboxes) |
 | [Retention policy for a user mailbox](https://aka.ms/PillarRetentionPolicy) | Checks the retention policy settings for a user mailbox. | Any Microsoft 365 admin role | [Retention tags and retention policies in Exchange Online](/exchange/security-and-compliance/messaging-records-management/retention-tags-and-policies) |
 | [Mailbox holds](https://aka.ms/PillarMailboxHoldsDiag) | Lists all holds that are applied to a mailbox. Hold types include: retention, eDiscovery, app retention, delay, and delay release. | Compliance admin | [How to identify the type of hold placed on an Exchange Online mailbox](/purview/ediscovery-identify-a-hold-on-an-exchange-online-mailbox) |
-| [Grace eDiscovery hold or invalid retention policy](https://aka.ms/PillarInvalidRetention) | Identifies items that prevent site deletion, specifically active holds, compliance tags ([retention labels](/purview/retention)), and invalid retention policies. Provides an option to remove any grace eDiscovery hold or invalid retention policy that's found. | Any Microsoft 365 admin role to identify items. Compliance admin role for removal. | [Can't delete a site because of a retention policy or eDiscovery hold](/sharepoint/troubleshoot/sites/compliance-policy-blocking-site-deletion) |
+| [Grace eDiscovery hold or invalid retention policy](https://aka.ms/PillarInvalidRetention) | Identifies items that prevent site deletion, specifically active holds, compliance tags ([retention labels](/purview/retention)), and invalid retention policies. Provides an option to remove any grace eDiscovery hold or invalid retention policy that's found. | Compliance admin | [Can't delete a site because of a retention policy or eDiscovery hold](/sharepoint/troubleshoot/sites/compliance-policy-blocking-site-deletion) |
 | [Compromised account](https://aka.ms/diagca) | Identifies suspicious account activities, and provides information about how to recover a compromised account. | Any Microsoft 365 admin role | [Respond to a compromised email account](/microsoft-365/security/office-365-security/responding-to-a-compromised-email-account) |
 | [eDiscovery RBAC](https://aka.ms/PillareDisRBACDiag) | Checks eDiscovery role-based access control (RBAC) to determine whether the Search, Export, or Preview roles are assigned to the designated administrator account. | Any Microsoft 365 admin role | [Resolve search errors in eDiscovery (Standard)](/microsoft-365/troubleshoot/ediscovery/resolve-ediscovery-issues) |
 | [DLP policy and rule configuration](https://aka.ms/PillarDLPPolicyConfig)<br> | Troubleshoots common issues that affect a DLP policy and rule configuration. Checks whether a DLP policy and rule are correctly configured for use in the following workloads:<ul><li>Exchange Online</li><li>Endpoint devices</li><li>SharePoint</li><li>OneDrive for work or school</li></ul> | Global admin | [Scenario-based troubleshooting guide for DLP issues](https://techcommunity.microsoft.com/blog/microsoft-security-blog/scenario-based-troubleshooting-guide---dlp-issues/3445489)<br> |