Microsoft Purview compliance portal: Data Loss Prevention: User based alert aggregation

Originally posted by Microsoft Sep 1, 2025 Uncategorized 0 Comments

User-Based Aggregation consolidates DLP alerts by user identity i.e. a DLP rule violations, in a specified aggregation time window, of the same rule and single user will be aggregated into a single alert enabling quicker triage and remediation. Instead of reviewing alerts containing rule match events of multiple users, DLP admin can now analyze grouped DLP rule match events per user, gaining insights into repeated policy violations and anomalous behavior.

Product
Release phase Preview
Release date November CY2025
Preview date: September CY2025
Platform Web
Cloud Instance Worldwide (Standard Multi-Tenant)
Created 2025-08-29
Roadmap ID 501786
Roadmap Link https://www.microsoft.com/microsoft-365/roadmap?id=501786

Comments are closed.

Joao Ferreira

I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

%d bloggers like this: