Set up users and cases in Office 365 Advanced eDiscovery

This topic describes how to set up users and cases for Office 365 Advanced eDiscovery.

Note: Advanced eDiscovery requires an Office 365 E5 subscription for your organization. If you don't have that plan and want to try Advanced eDiscovery, you can sign up for a trial of Office 365 Enterprise E5.


Before setting up cases and users in Advanced eDiscovery, the following is required:

  • To analyze a user's data using Advanced eDiscovery, the user (the custodian of the data) must be assigned an Office 365 E5 license. Alternatively, users with an Office 365 E1 or E3 license can be assigned an Advanced eDiscovery standalone license. Administrators and compliance officers who are assigned to cases and use Advanced eDiscovery to analyze data don't need an E5 license.

  • To access Advanced eDiscovery, you have to be an eDiscovery Administrator in the Security & Compliance Center or an administrator in Advanced eDiscovery. For instructions, see:

Define Advanced eDiscovery access for Office 365 users

  1. Go to the Office 365 Security & Compliance Center.

  2. Click Search & investigation > eDiscovery, click Go to Advanced eDiscovery.

  3. Click the Cogwheel Cogwheel icon icon in the toolbar.

  4. Open Settings and utilities > Tenant settings > User administration.

    User administration
  5. To add a user, click the + icon. The Add user page is displayed.

    Add user page
  6. Enter the Email address and Display name of Office 365 users to enable their access to Advanced eDiscovery.

    Note: Advanced eDiscovery authentication is performed using a Microsoft account. Enter the same email as the user's Microsoft account.

    Select the user’s role from the Role drop-down list, or accept the default. The available Advanced eDiscovery user roles are Administrator, Manager, and Reviewer. Advanced eDiscovery permissions are derived from the user's role. For more details about user roles and permissions, see User roles and access.

    Note: The user's role will be based on the role defined in User administration, and not the role defined in the Security & Compliance Center (except for Administrator).

  7. Click Save. The user is added.

Create a case in Advanced eDiscovery and assign users

In order to create a new case, the user’s role must be defined as an Advanced eDiscovery administrator.

Note: Currently, you can have up to three existing cases at one time, and there is a one million file limit per case. You can reuse a case by initializing the case's data using Advanced eDiscoverySettings and utilities > Clear data. Alternatively, you can delete a case in the Cases page. You can also contact Office 365 Support to request an increase in the case limit. Note that the case limit will be increased significantly in the near future.

  1. Go to the Office 365 Security & Compliance Center.

  2. Click Search & investigation > eDiscovery, click Go to Advanced eDiscovery.

  3. On the Cases page, click the + icon to create a case. The Add case page is displayed.

    Add case
  4. Enter a case Name and Description.

    Tip: It's recommended to use the same case name as defined in the Security & Compliance Center. A case name cannot contain the following characters: \ / : * ? " < > |

  5. In the Assign users to case section, use the arrow buttons to assign access to the case for the selected users.

  6. Click OK. The case is created, and the selected users are assigned to it.

See Also

Office 365 Advanced eDiscovery

Preparing data

User roles and access

Share Facebook Facebook Twitter Twitter Email Email

Was this information helpful?

Great! Any other feedback?

How can we improve it?

Thank you for your feedback!