* Assign Vault Administrator Role: In the Google Admin console, assign the compliance team members the Google Vault administrator role to give them the necessary permissions.
* Access Google Vault: Have the compliance team access Google Vault.
* Create a Matter: In Google Vault, create a new matter for the investigation.
* Create a Hold: Within the matter, create a legal hold specifically targeting the employee's email and any other relevant data. This will preserve all the necessary information beyond the default retention period.
* Review Data: The compliance team can now review the preserved data as part of their investigation.
References:
* Google Vault Help: Assign Vault privileges
* Google Vault Help: Create and manage holds