向高级电子数据展示案例添加保管人Add custodians to an Advanced eDiscovery case

使用高级电子数据展示中的内置保管人管理工具,协调工作流,以管理保管人并识别与案例关联的相关、监管数据源。Use the built-in custodian management tool in Advanced eDiscovery to coordinate your workflows around managing custodians and identifying relevant, custodial data sources associated with a case. 添加保管人时,系统可自动识别并保留其 Exchange 邮箱和 OneDrive for Business 帐户。When you add a custodian, the system can automatically identify and place a hold on their Exchange mailbox and OneDrive for Business account. 在调查的发现过程中,您还可以确定保管人访问或参与 (的其他数据源,例如) 邮箱、网站或 Teams 网站。During the discovery process of your investigation, you might also identify other data sources (such as mailboxes, sites, or Teams) that a custodian accessed or contributed to. 在这种情况下,可以使用保管人管理工具将这些数据源关联为特定保管人。In this situation, you can use the custodian management tool to associate those data sources will a specific custodian. 将保管人添加到案例并将其他数据源与案例关联后,您可以快速保留数据并搜索监管数据。After you add custodians to a case and associate other data source with them, you can quickly preserve data and search the custodial data.

可以通过四个步骤在高级电子数据展示事例中添加和管理保管人:You can add and manage custodians in Advanced eDiscovery cases in four steps:

  1. 确定保管人。Identify the custodians.

  2. 选择保管人数据位置。Choose custodian data locations.

  3. 配置保留设置。Configure hold settings.

  4. 查看保管人并完成该过程。Review the custodians and complete the process.

    高级电子数据展示案例中的"源"选项卡 Sources tab in Advanced eDiscovery case

确保你拥有必要的权限Make sure you have the necessary permissions

若要向案例添加保管人,您必须是电子数据展示管理员角色组的成员。To add custodians to a case, you must be a member of the eDiscovery Manager role group. 这为您提供了向案例添加保管人并保留监管数据源的必要权限。This provides you with the necessary permissions to add custodians to a case and place a hold on the custodial data sources. 有关详细信息,请参阅分配电子数据展示权限For more information, see Assign eDiscovery permissions.

步骤 1:确定保管人Step 1: Identify custodians

  1. 转到已分配有相应电子数据展示权限的用户帐户 https://compliance.microsoft.com 并登录。Go to https://compliance.microsoft.com and sign in with a user account that has been assigned the appropriate eDiscovery permissions.

  2. 在 Microsoft 365 合规中心的左侧导航窗格中,单击"全部显示",然后单击"电子数据展示>高级"In the left navigation pane of the Microsoft 365 compliance center, click Show all, and then click eDiscovery > Advanced.

  3. "高级电子数据 展示"页上,单击"事例"选项卡,然后选择要添加保管人的情况。On the Advanced eDiscovery page, click the Cases tab, and then select the case that you want to add custodians to.

  4. 单击 "数据源" 选项卡,然后单击 "添加数据源 > 添加新保管人"。Click the Data sources tab and then click Add data source > Add new custodians.

  5. 通过键入人员姓名或别名的第一部分,将组织中一个或多个用户添加为案例保管人。Add one or more users in your organization as custodians to the case by typing the first part of a person's name or alias. 找到正确的人员后,选择他们的姓名以将其添加到列表中。After you find the correct person, select their name to add them to the list.

步骤 2:选择保管人数据位置Step 2: Choose custodian data locations

选择保管人后,系统将自动尝试标识和验证这些用户及其数据源。After you select custodians, the system automatically attempts to identify and verify these users and their data sources. 将保管人添加到列表中后,该工具将自动包含每个保管人的主邮箱和 OneDrive 帐户。After adding custodians to the list, the tool automatically includes the primary mailbox and OneDrive account for each custodian. 在向案例添加保管人时,可以选择不包括这些数据源。You can choose not to include these data sources when adding custodians to the case.

除了保管人邮箱和 OneDrive 帐户之外,还可以将其他数据位置关联到保管人,如保管人是保管人所参与的 SharePoint 网站或 Microsoft 团队。In addition to a custodian's mailbox and OneDrive account, you can also associate other data locations to a custodian, such as SharePoint site or a Microsoft Team the custodian is a member of. 这允许您保留、收集、分析和查看与案例保管人关联的其他数据源中的内容。This allows you to preserve, collect, analyze, and review content in other data sources associated with the custodians of the case.

若要取消选择保管人的主邮箱和 OneDrive 帐户:To deselect the primary mailbox and OneDrive account for a custodian:

  1. 展开保管人以查看已自动与每个保管人关联的主数据位置。Expand the custodian to view the primary data locations that have been automatically associated to each custodian.

  2. Select Clear next to Mailbox or OneDrive to remove a custodian's mailbox or OneDrive account from being associated as a data location for this custodian.Select Clear next to Mailbox or OneDrive to remove a custodian's mailbox or OneDrive account from being associated as a data location for this custodian.

    将位置配置为与保管人关联

若要将其他邮箱、网站、Teams 或 Yammer 组关联到特定保管人:To associate other mailboxes, sites, Teams, or Yammer groups to a specific custodian:

  1. 展开保管人以显示以下服务,以将数据位置与保管人关联。Expand a custodian to display the following services to associate data locations with the custodian. 单击 服务 旁边的"编辑"可添加数据位置。Click Edit next to a service to add a data location.

    • Exchange: 用于将其他邮箱与保管人关联。Exchange: Use to associate other mailboxes to the custodian. 在搜索框中键入用户邮箱或 (组) 至少包含三个字符的名称或别名。Type into the search box the name or alias (a minimum of three characters) of user mailboxes or distribution groups. 选择要分配给保管人的邮箱,然后单击"添加 "。Select the mailboxes to assign to the custodian and then click Add.

    • SharePoint: 用于将 SharePoint 网站与保管人关联。SharePoint: Use to associate SharePoint sites to the custodian. 在列表中选择网站,或在搜索框中键入 URL 来搜索网站。Select a site in the list or search for a site by typing a URL in the search box. 选择要分配给保管人的网站,然后单击"添加 "。Select the sites to assign to the custodian and then click Add.

    • Teams: 用于分配保管人当前是 Microsoft Teams 的成员。Teams: Use to assign the Microsoft Teams the custodian is currently a member of. 选择要分配给保管人的团队,然后单击"添加 "。Select the teams to assign to the custodian and then click Add. 添加团队后,系统会自动标识并找到与该团队关联的 SharePoint 网站和组邮箱,并将其分配给保管人。After you add a team, the system automatically identifies and locates the SharePoint site and group mailbox associated to that team and assigns them to the custodian.

    • Yammer: 用于分配保管人当前是其中一个成员的 Yammer 组。Yammer: Use to assign the Yammer groups the custodian is currently a member of. 选择要分配给保管人组,然后单击"添加 "。Select the groups to assign to the custodian and then click Add. 添加团队后,系统会自动标识并找到与该组关联的 SharePoint 网站和组邮箱,并将其分配给保管人。After you add a team, the system automatically identifies and locates the SharePoint site and group mailbox associated to that group and assigns them to the custodian.

    备注

    您可以使用 ExchangeSharePoint 位置选取器将其他团队或 Yammer 组 (保管人不是保管人) 保管人。You can use the Exchange and SharePoint location pickers to associate other teams or Yammer groups (that a custodian is not a member of) to a custodian. 为此,您必须添加与每个团队或 Yammer 组关联的邮箱和网站。To do this, you have to add both the mailbox and site associated with each team or Yammer group.

  2. 通过展开表中的每个保管人,可以查看分配给每个保管人的邮箱、网站、Teams 和 Yammer 组总数。You can view the total number of mailboxes, sites, Teams, and Yammer groups assigned to each custodian by expanding each custodian in the table. 完成为每个保管人分配的数据位置后,将在高级电子数据展示工作流中的收集、处理和审阅阶段维护和使用这些关联。When you've finalized the assigned data locations for each custodian, these associations will be maintained and used during the collection, processing, and review stages in the Advanced eDiscovery workflow.

  3. 添加保管人并配置其数据位置后,单击" 一步"转到 "保留设置" 页。After adding custodians and configuring their data locations, click Next to go to the Hold settings page.

步骤 3:配置保留设置Step 3: Configure hold settings

完成保管人及其数据位置后,可以将部分或所有保管人放在保留状态。After you've finalized the custodians and their data locations, you can place some or all of the custodians on hold. 当您将保管人保留时,与保管人关联的所有内容位置中的内容将一直保留,直到您删除保留或解除保管人。When you place a custodian on hold, all content in all content locations that are associated with the custodian is preserved until you remove the hold or release the custodian from the hold. 在某些情况下,你可能希望向事例添加保管人,而不将其置于保留状态。In some cases, you may want to add custodians to a case without placing them on hold.

将保管人和数据源放在保留状态:To place the custodians and data sources on hold:

  1. "保留设置 "页上,可以通过选中"保留"列下的复选框将保留应用于 各个保管 人。On the Hold settings page, you can apply a hold to individual custodians by selecting the checkbox under the Hold column.

    或者,可以通过选中列顶部的"保留"复选框来保留所有保管人。Alternatively, you can place all custodians on hold by selecting the Hold checkbox at the top of the column.

  2. 验证保管人保留选择,然后单击"下 一步"。Verify the custodian hold selections and then click Next.

    备注

    如果未对保管人进行保留,则保管人及其关联的数据源将添加到案例,但这些数据源中的内容不会由与案例关联的保留保留。If you don't place a hold on a custodian, the custodian and their associated data sources will be added to the case but the content in those data sources won't preserved by the hold that associated with the case.

步骤 4:查看保管人并完成此过程Step 4: Review the custodians and complete the process

在将保管人实际添加到案例之前,你可以查看保管人列表、分配给保管人的数据位置以及保留设置。Before you actually add the custodians to the case, you can review the list of custodians, the data locations assigned to them, and the hold settings.

  1. 验证并查看与表中每个保管人关联的所有数据源计数和保留设置。Verify and review all the data sources count and the hold setting associated with each custodian in the table. 如有必要,请返回到" 标识保管人 "或" 保留 设置"页进行任何更改。If necessary, go back to the Identify custodian or Hold settings pages to make any changes.

  2. 单击 " 提交"将保管人及其数据位置添加到案例,并应用所有监管保留设置。Click Submit to add custodians and their data locations to the case and apply all custodial hold settings.

    新保管人将添加到案例,并显示在"数据源 " 选项卡上。The new custodians are added to the case and displayed on the Data sources tab.

    "数据源"选项卡上列出的保管人 Custodians listed on the Data sources tab