Implement Adaptive Protection in Microsoft Purview
Intermediate
Administrator
Microsoft Purview
Microsoft 365
Office 365
Adaptive Protection in Microsoft Purview bridges the gap between detecting insider risk and enforcing the right security controls. Instead of applying the same restrictions to every user, Adaptive Protection assesses risk and assigns each user an insider risk level. That level then drives enforcement across data loss prevention, Conditional Access, and data lifecycle management policies. This module covers how insider risk levels work and how to implement risk-driven enforcement across DLP, Conditional Access, and Data Lifecycle Management.
Learning objectives
By the end of this module, you should be able to:
- Describe how Adaptive Protection uses insider risk levels to enforce controls across DLP, Conditional Access, and Data Lifecycle Management.
- Evaluate how insider risk level thresholds align to organizational risk tolerance.
- Determine when to use quick setup versus custom setup.
- Configure DLP policies that use insider risk levels as a condition.
- Configure Conditional Access policies that use insider risk levels as a condition.
- Determine when to enable Data Lifecycle Management retention for high-risk users.
Prerequisites
- Foundational knowledge of Microsoft Purview Data Loss Prevention (DLP)
- Understanding of Microsoft Purview Insider Risk Management concepts
- Basic familiarity with Microsoft Entra Conditional Access policies
- Basic understanding of data lifecycle management and retention concepts