Ensures Microsoft support engineers can't open customer content until the organisation explicitly says yes. The yes comes from a Global Administrator or someone holding the access approver role, and any request still pending after 12 hours expires.
Also called Microsoft Purview Customer Lockbox.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Customer Lockbox in context, with comparison tables and the common traps.
Terms in this definition
- Global Administrator
The Microsoft Entra role with complete control over the directory. On its own it gives no rights over Azure resources; the holder must elevate access to manage all subscriptions first.
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
Related terms
- Customer Lockbox access approver
Before a Microsoft support engineer can get into tenant content, someone has to allow it. People in this role make that call on Customer Lockbox requests, and can also enable the feature.
- Microsoft 365 A5
The top Microsoft 365 Education plan, which builds on A1 and A3 with premium security and compliance capabilities like Audit (Premium) and Customer Lockbox.