Sharepoint online DLP alerts ( Specifically with override)

Afsar Shariff 0 Reputation points
2024-09-13T18:44:45.9433333+00:00

Hello All

 

I have created the DLP policy with a very simple condition and action.

 

If content content U.S. Social security number 1- ANY AND

content is shared from M365 - with people outside organization.

 

Action

 

Block only people outside organization.

 

User notifications with Policy tips

 

Allowed the user overrides

 

===============

 

Whenever I am sharing the content outside the organization I am able to see the policy with override option. After overriding the policy , it is allowing to share content. However it is not generating alert in the dashboard. I am able to see the DLP undo rule but not the alert.

 

Please advise if it is by design or am I missing something important.  

Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Microsoft Security | Microsoft Purview
{count} votes

1 answer

Sort by: Most helpful
  1. PRADEEPCHEEKATLA 90,651 Reputation points Moderator
    2024-09-16T11:20:18.7133333+00:00

    @Afsar Shariff Thanks for the question and using MS Q&A platform.

    You may checkout the below thread addressing similar issue: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/overrides-and-false-positives-in-dlp-policy-end-user-experience/m-p/202790

    Hope this helps. Do let us know if you any further queries.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.