The Hacking Coach course
Microsoft Purview 2027
Retention, eDiscovery and compliance in Microsoft Purview for Microsoft 365 admins.

Learning objectives
- Understand Microsoft Purview architecture, including the compliance substrate, governance metadata layer, and how compliance records support Microsoft 365 compliance scenarios.
- Design and implement data lifecycle management strategies using retention policies, retention labels, adaptive scopes, and preservation holds.
- Apply retention and records management concepts across Microsoft 365 workloads such as Exchange Online, SharePoint, OneDrive, Teams, Planner, and Viva Engage.
- Manage eDiscovery cases and content searches to discover, preserve, and review information for legal, regulatory, and internal investigations.
- Configure and troubleshoot Microsoft Purview solutions with a practical understanding of permissions, licensing, policy behavior, and workload-specific processing delays.
Overview
Microsoft Purview for Microsoft 365 Pros
Take control of Microsoft 365 compliance with a course built for real-world administrators, compliance professionals, and IT pros who need to retain, protect, discover, and govern data with confidence. Microsoft Purview can feel complex at first — with its architecture, compliance records, retention logic, and workload-specific behavior — but this course breaks it down into a practical, understandable framework you can actually use.
What you’ll learn
By the end of this course, you’ll be able to:
Explain Microsoft Purview architecture and how the compliance substrate powers retention, eDiscovery, and reporting.
Implement data lifecycle management with retention policies and retention labels.
Use adaptive scopes and preservation holds to target the right content at the right time.
Work with records management concepts to support legal and regulatory requirements.
Manage eDiscovery cases and content searches for investigations and discovery workflows.
Apply Purview concepts across Microsoft 365 workloads such as Exchange Online, SharePoint, OneDrive, Teams, Planner, and Viva Engage.
Why this course matters
Microsoft 365 data grows fast — and so do the risks. If you’re responsible for compliance, legal hold, retention, or information governance, you need more than theory. You need a practical approach that shows how Purview works across the tenant, where policies apply, what gets stored as compliance records, and why some actions take time to propagate.
This course helps you move from confusion to clarity:
Not sure whether to use a retention policy or a retention label? You’ll learn when each one fits best.
Worried about workload differences? We cover how Exchange, SharePoint, Teams, and other services behave differently.
Concerned about permissions and licensing? You’ll understand the role groups and access requirements that control Purview features.
Need to support legal or regulatory requests? You’ll gain the foundation for eDiscovery and preservation workflows.
Practical, hands-on learning focus
This is not just a conceptual overview. The course is designed to help you think like an administrator who must make Purview work in a live Microsoft 365 tenant. You’ll explore:
How compliance records are generated and used
How retention policies affect content over time
How labels can preserve, classify, and dispose of data
How eDiscovery cases are structured and managed
How to align governance decisions with business and legal needs
Example scenarios you’ll be ready for
Retaining Exchange mailboxes for a defined period
Applying retention labels to SharePoint and OneDrive content
Using adaptive scopes to target specific users or groups
Preserving content for investigations without disrupting users
Searching and exporting content for legal review
Who should take this course?
This course is ideal for:
Microsoft 365 administrators
Compliance and governance professionals
Security and information protection teams
Legal operations and records management staff
IT pros preparing for Microsoft Purview responsibilities
If you’ve ever felt that Purview is powerful but hard to navigate, you’re exactly the audience this course was made for. You do not need to master everything at once — this course gives you a structured path through the most important concepts and tools.
Start now
Microsoft Purview is central to modern Microsoft 365 governance, and the organizations that understand it are better prepared for audits, investigations, retention requirements, and AI-era compliance challenges. Join the course now and build the confidence to manage Microsoft 365 data lifecycle and eDiscovery the right way. 🚀
Curriculum
Learning time: ~15 min
Microsoft Purview Overview and Architecture1 minute
- Purview Suite Overview & Architecture
eDiscovery Overview and Case Management2 minutes
- eDiscovery Overview and Case Management
Data Lifecycle Management Principles and Retention Policies2 minutes
- 2.1 Principles of Data Governance: Import, Retain, Delete, Classify
Retention Policies and Adaptive Scopes Details2 minutes
- Retention Policy Types, Adaptive Scopes & Planning…
Compliance Records and the Microsoft 365 Substrate13 minutes
- What Are Compliance Records?
- Quiz: The Purpose of Compliance Records
- Digital Twins: How Compliance Records Mirror App Data
- Multiple Choice: Apps That Generate Compliance Records
- How Compliance Records Are Created Per App
- Quiz: Copilot and Compliance Records
- Where Compliance Records Live: TeamsMessagesData
- Multiple Choice: Facts About the TeamsMessagesData Folder
- Inspecting Compliance Records with PowerShell
- Reflection: Why the Substrate Approach Matters
Retention Policies Implementation and Preservation2 minutes
- Retention Policy Effects & the Preservation Hold Library
Preservation Hold Library and Retention Label Usage2 minutes
- Preservation Hold Library and Retention Label Usage
Retention Labels Concepts and Usage in Microsoft 36514 minutes
- Retention Label Concepts: Priority, Auto-Labels & Rules
- Quick Check: Label Priority Rules
- Rules Governing Retention Label Behavior
- Planning Your Retention Labels: Categories & Best Practices
- Design Your Own Retention Label Strategy
- Creating & Naming a New Retention Label
- Quick Check: Naming Retention Labels
- Retention Actions & Periods: What Happens to Labeled Items
- Understanding Post-Retention Actions
- Design a Retention Label Configuration
Exchange Online Retention Labels and Policies1 minute
- Exchange Retention Tags vs. Retention Labels
Licensing Microsoft Purview Solutions12 minutes
- Microsoft Purview Licensing: E3 vs E5
- Check: E3 vs E5 Features
- Purview Add-on Licenses
- Check: Purview Add-on Licenses
- Pay-as-You-Go: Data Security Investigations & OCR
- Check: Pay-as-You-Go Billing
- Best Practices for License Management
- Check: License Management Best Practices
- Reflection: Choosing Between E5 and Add-ons
Compliance Permissions and Role Groups12 minutes
- What Is Role-Based Access Control in Microsoft Purview?
- Check: Core RBAC Concept
- Built-in Role Groups You'll Use Most
- Match the Job to the Built-in Role Group
- Creating Custom Role Groups
- Design Your Own Custom Role Group
- Administrative Units: Scoping Access by Region or Department
- Check: Administrative Units Scope
- Assigning and Managing Permissions in Purview
Compliance Manager10 minutes
- What Is Compliance Manager?
- Quick Check: Core Concepts
- Understanding Assessments
- Assessments and Templates
- Breaking Down Controls
- Quick Check: Control Ownership
- Improvement Actions Explained
- Managing Improvement Actions
- Plan an Improvement Action Workflow
- Reflect: Scoring Your Organization's Posture
Hands-On Lab:16 minutes
- Welcome to the Microsoft Purview Portal
- Finding Your Way Around the Portal
- Understanding Roles and Permissions
- Matching Roles to Tasks
- Connecting to Security & Compliance PowerShell
- PowerShell Connection Check
- Portal or PowerShell — When Do You Choose Which?
- Final Review: Purview Portal, Roles, and PowerShell
Data Loss Prevention18 minutes
- Why Data Loss Prevention Matters
- Purview DLP Coverage and Licensing
- Sensitive Information Types and Exact Data Match
- Understanding DLP Policy Structure
- Encrypting Email and Blocking Risky Domains
- Monitoring DLP: Alerts, Audits, and Copilot Protection
- Endpoint DLP and Document Fingerprinting
- Automating DLP with PowerShell
Information Protection14 minutes
- 5.1–5.3 Why Microsoft 365 Data Needs Rights Management
- Check: Rights Management Fundamentals
- 5.4 Enabling Rights Management for a Tenant
- Check: Tenant Activation and Key Management
- 5.5 Building and Publishing Sensitivity Labels
- Check: Sensitivity Label Features
- 5.6–5.7 Protecting SharePoint, OneDrive, and Email…
- 5.8 Managing Microsoft Purview Message Encryption (OME)
- Discuss: Visibility and Governance Beyond Labels
- Final Check: Information Protection Scenarios
Auditing and Reporting12 minutes
- 7.1 The Microsoft 365 Audit Framework
- Check: Audit Framework Basics
- 7.2 Searching Audit Events
- Practical Uses of Audit Information
- Hands-On: Search the Audit Log
- 7.4–7.5 Query Graph API & Premium Auditing for Forensics
- Check: Retention and Purging of Audit Logs
- 7.8–7.9 Activity Alerts & Office 365 Cloud App Security
- Exchange Online Administrative & Mailbox Auditing
- Reporting on Workload Activity
The Basics of eDiscovery Extended6 minutes
- Case settings, data sources, searches, holds, exports, and review sets.
- Case members and permissions.
- Data Loss Prevention – Extended
Ready to start Microsoft Purview 2027?
Self-paced, on The Hacking Coach.
Enroll now ↗