HANDS ON SharePoint
HANDS ON Teams
HANDS ON Lists
HANDS ON tek
M365 Admin
Microsoft Purview | Insider Risk Management: Granular trigger throttling
Microsoft Purview Insider Risk Management is introducing granular trigger throttling limits in a public preview by late May 2024, with general availability in late December 2024. This update aims to prevent policy interference from high trigger volumes, setting daily limits for sensitive and other triggers, and enhancing policy health warning messages. No preparation is needed from users.
Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits.
This message is associated with Microsoft 365 Roadmap ID 382130.
When this will happen:
Public Preview: We will begin rolling out late May 2024 and expect to complete by mid-June 2024.
General Availability: We will begin rolling out late December 2024 and expect to complete by late December 2024.
How this will affect your organization:
With this update, we are introducing more granular trigger throttling limits to isolate the impact of a surge in noisy trigger volumes and prevent other policies from being affected. This ensures that organizations can receive critical alerts without being throttled by these limits. By default, these throttling limits will be applied:
- All sensitive triggers, including HR signals, Azure AD leavers, and custom triggers, will be limited to 15,000 per day per trigger.
- All other triggers will be limited to 5,000 per day per trigger.
Additionally, the policy health warning messages will be enhanced to assist admins with appropriate permissions in effectively identifying and addressing noisy triggers.
What you need to do to prepare:
No action is needed from you to prepare for this rollout. You may want to notify your admins about this change and update any relevant documentation as appropriate.
You can access the Insider Risk Management solution in the Microsoft Purview compliance portal.
Learn more: Insider risk management | Microsoft Learn
Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.
Message ID: MC788980
