Get started with Priva

Learn how to get set up with Microsoft Priva and start interpreting insights about your organization's personal data.

Initial settings

Confirm subscriptions and licensing

Priva is available in the Microsoft Purview compliance portal and can be purchased by organizations with the licenses outlined in the Microsoft 365 licensing guidance for security & compliance.

Priva offers licensing options for two different solutions: Priva Privacy Risk Management and Priva Subject Rights Requests. These can be purchased individually or together. When obtaining licenses for subject rights requests, you can choose the appropriate licensing tier for how many requests you need to handle. You can purchase additional requests at any time.

Start a free trial

Use a free trial subscription to explore all the features and functionality of both Priva solutions. Learn how to sign up for the Priva trial.

Enable the Microsoft 365 audit log

Microsoft 365 audit logs are a summary of all activities within your organization. Privacy Risk Management policies may use these activities for generating policy insights.

Your organization may already have audit logs turned on. If you need to start using them for the first time, see Turn audit log search on or off for step-by-step instructions to turn on auditing. After you turn on auditing, a message is displayed that says the audit log is being prepared and that you can run a search in a couple of hours after the preparation is complete. You only have to do this action once. For more information about using the Microsoft 365 audit log, see Search the audit log.

Set user permissions and assign roles

Priva uses a role-based access control (RBAC) permission model. Only users who are assigned a role may access Priva, and the actions allowed by each user are restricted by role type.

Your global admin has permissions to access Priva and assign other users to roles. They can sign in and set user permissions in the Microsoft Purview compliance portal for Priva. For a quick start, the Privacy Management role group has permissions to access all features of Priva. This group may be a good fit for organizations where the same individual may perform all duties. Other privacy roles allow you to take more granular control and assign users to selected features or functions.

To learn more about role groups and how to grant access, see Set user permissions and assign roles in Priva.

Start visualizing your data and assessing risks

When insights start to populate

The Privacy risk management overview page displays dynamic insights about how personal data is evolving in your Microsoft 365 environment to help you quickly spot issues, identify risk indicators, and take action to fix issues. Your overview page starts to populate with initial insights within the first 72 hours. As you continue to use Priva, the overview page will refresh to continue to provide current information.

Your Data profile page provides more visualizations and analytics to give you a holistic view of your organization's data by geographic location and by Microsoft 365 location. See Find and visualize personal data in Priva.

The overview page shows insights generated from the default policies that are running when you start Privacy Risk Management. These policies evaluate your organization's data against three key risk scenarios: data minimization, data overexposure, and data transfers.

The insights shown are based on user activity detected from the point at which your organization began to use Priva. Data in the Data transfers detected in organization and Overexposed personal data cards will surface within 48-72 hours if policy matches are detected. The Unused personal data card will show insights within 72 hours of starting Priva for data that hasn't been modified within the last 30 days.

Learn more about creating, customizing, and working with Privacy Risk Management policies.

Start fulfilling subject rights requests

Priva Subject Rights Requests automates the subject rights request fulfillment process, providing easy access to data and customizable workflows that fit into existing business processes. You can easily find the relevant data, review the findings, and produce reports. Along the way, you can securely collaborate with other experts in your organization to complete the subject rights request. You can also manage and customize your business workflows with built-in templates. To learn more about using these features, see Learn about Priva Subject Rights Requests.

Priva availability

Microsoft Priva is available to customers worldwide. If your organization provisioned its tenant in one of the local data centers listed below in order to meet data residency requirements, the Priva solutions won't be available to you in the left navigation of the Microsoft Purview compliance portal:

  • Norway
  • Poland
  • Qatar
  • Singapore
  • South Africa
  • South Korea
  • Spain
  • Sweden
  • Switzerland
  • United Arab Emirates

Microsoft Priva legal disclaimer