trying to use Data Security Investigations preview, getting "fail to create workspace!" error
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 13%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBF%3C/text%3E%3C/svg%3E)
Ben Frame
0
Reputation points
Trying the new "Data Security Investigations (preview)" feature in Purview. Setup tasks 1 and 3 completed fine, but step #2 throws an error over and over again saying "Fail to create workspace!"
Microsoft Security | Microsoft Purview
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 18%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVP%3C/text%3E%3C/svg%3E)
VRISHABHANATH PATIL 85 Reputation points Microsoft External Staff Moderator2025-08-28T08:04:13.38+00:00 Hi @Ben Frame ,
Thanks for reaching out to Microsoft QA.
It appears you're encountering a "Fail to create workspace!" error while setting up the Data Security Investigations (preview) feature in Microsoft Purview. This issue is commonly linked to misconfigured billing and usage settings, which are addressed in Step 2 of the setup process.
Here's a consolidated technical checklist to help resolve the “Fail to create workspace!” error during Step #2 of setting up the Data Security Investigations (preview) feature in Microsoft Purview:
Area What to Check Recommended Action Area What to Check Recommended Action Billing Information Is billing configured and active for your Azure subscription? Go to Azure Portal > Cost Management + Billing and verify that payment details are up to date. Ensure the subscription supports workspace creation and usage-based billing. Permissions Do you have the correct role assignments? You must have Contributor or Owner access to the subscription and resource group where the workspace is being created. Use Azure IAM to confirm and assign roles. Workspace Region Is the selected region supported for Data Security Investigations? Check that both the Purview account and the Log Analytics workspace are in a supported region. Mismatched or unsupported regions will block creation. Subscription Status Is your subscription active and unrestricted? Confirm that the subscription is not disabled, not expired, and has no policy restrictions preventing resource creation. Also, ensure the Microsoft.OperationalInsights resource provider is registered. Manual Workspace Creation Can you create the workspace manually? Try creating a Log Analytics workspace manually in the Azure Portal under the same region and link it to your Purview account. This often bypasses wizard-related issues. Please refer to the official documentation below to complete the configuration of the Data Security Investigations (preview) feature in Microsoft Purview.
Regards,
Vrishabh -
VRISHABHANATH PATIL 85 Reputation points Microsoft External Staff Moderator
2025-08-29T04:57:49.01+00:00 Hi @Ben Frame
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Regards,
Vrishabh
Sign in to comment
Sign in to answer