Explanation Compliance Data Administrator, Compliance Administrator, and Security Administrator already have the required permissions to create the labels. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365- worldwide#permissions-required-to-create-and-manage-sensitivity-labels