Insider Risk Management Investigators

Type: Admin role

Analysts of insider risk management that can triage alerts, investigate and action on cases (but cannot explore content).

RoleGroup	Role	Role Description
Insider Risk Management Investigators	Insider Risk Management Investigation

Cmdlet	Role	Cmdlet Description
Test-TextExtraction	Insider Risk Management Investigation	This cmdlet returns the text that is found in a file in Exchange. The Microsoft classification engine uses this text to classify content and determine which sensitive information types are found in this file/message. You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see Find the permissions required to run any Exchange cmdlet (https://docs.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).