Microsoft Purview DSPM Policy Configuration for DLP and IRM

Question

Microsoft Purview DSPM Policy Configuration for DLP and IRM

Details

In Microsoft Purview for DSPM, two DLP policies and IRM policies are created in fully functional mode without simulation mode.

There is an option to change the policies to simulation or targeted group from DLP and IRM after enabling from DSPM. However, it seems there is no option to enable simulation or targeted group directly from DLP or IRM without first enabling for all from DSPM, which targets for at least 10 minutes before changing it from DLP or IRM.

Is there a way to enable these configurations directly without the initial full enablement?

Answer 1

Hi @Prasant Chettri

Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

As I understand that you are seeking a method to directly enable simulation mode or a targeted group for DLP and IRM policies without first enabling the policy for the entire organization through DSPM. In other words, you want to avoid the process of applying the policies to everyone before switching to simulation or targeted mode.

Clarification on Microsoft Purview DSPM Policy Configuration for DLP and IRM

In the current functionality of Microsoft Purview DSPM, the process works as follows:

Initial Full Application: When creating DLP and IRM policies, they are initially applied to the entire organization (in full enforcement mode). This is required before switching to either simulation mode or applying the policy to a targeted group.

Simulation Mode or Targeted Group Configuration: While there is an option to later switch the policy to simulation mode or apply it to a targeted group, this action must be done after the policy has been fully enabled for the organization. This typically means the policy will apply to all users for a short period (at least 10 minutes) before you can make adjustments.

Is there a way to enable these configurations directly without the initial full enablement?

Currently, it appears that the current functionality in Microsoft Purview DSPM does not allow for direct configuration of DLP and IRM policies in simulation mode or for targeted groups without first fully applying the policy across the organization. This is a step that ensures the policy has been evaluated under the full scope before fine-tuning its settings.

Appreciate if you could share the feedback on our feedback channel. Which would be open for the user community to upvote & comment on. This allows our product teams to effectively prioritize your request against our existing feature backlog and gives insight into the potential impact of implementing the suggested feature.

I hope this information helps. Please do let us know if you have any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.