Link to home
Start Free TrialLog in
Avatar of John Water
John WaterFlag for United States of America

asked on

Can I prevent eDiscovery for sensitive SharePoint documents?

We have our email and SharePoint environments in the cloud with O365. We are  just starting to use eDiscovery. We do have some documents in SharePoint that have a higher security placed on them and we have set access to them accordingly.
What I want to find out is there a way to exempt these documents from an eDiscovery search? If not, will the elevated access requirement to the documents prevent them from being read by the person doing the search (providing they do not have required access) even if they are found in the eDiscovery?
ASKER CERTIFIED SOLUTION
Avatar of Vasil Michev (MVP)
Vasil Michev (MVP)
Flag of Bulgaria image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
It should also be noted that a user will never be able to see content that they aren't allowed to. If permissions preclude viewing of a given sensitive file for a user, eDiscovery will not highlight that document for the user either.

Search is also security trimmed in a similar way.
Avatar of John Water

ASKER

Jamie and Vasil,

Thank you both for your input. I would like to confirm my understanding of each -

I can use the information in the link from Vasil to set up filters to limit WHERE an eDiscovery search would look, correct?

From Jamie's input, if permissions to a site, folder, etc. were set up so that I cannot access them, my eDiscovery search would never produce them as a product of my search, no matter if I had filters or not, correct?
Is this true no matter my role, Compliance Administrator, Global Admin, etc.?
If this is accurate, then the same eDiscovery search criteria could have different results for two different staff members with different levels of data access, correct?

Thank you,
Hi swfwmd2,

I can confirm that search results will be different depending on a users access rights.

J
Even though I do not have access to a file when I navigate to it (purposely set up this way), I can find it in an eDiscovery search since I am a global admin. Is this expected and will the implementation of "compliance security filters" block me from finding it when I do an eDiscovery search?

Thank you
It's expected, as eDiscovery runs as a "system" process. The only way that I know of to restrict what data can Be accessed via eDiscovery is Compliance Security Fitlers, so try them out.