417161 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Just-in-time support on MacOS (archived)

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention

Platform:

Mac, Web, World tenant

Status:

Launched

Change type:

Links:

Details:

You can use Endpoint data loss prevention (DLP) just-in-time (JIT) protection to block all egress activities on monitored files while waiting for policy evaluation to successfully complete. When JIT protection is enabled, and while policy evaluation is processing, Endpoint DLP blocks all egress activities for each user whose account is in the selected scope. Endpoint DLP audits the egress activities for all user accounts that have been excluded (via the Exclude setting) or are otherwise not in scope.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
Preview, General Availability

Created:
2024-11-05

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

More Info URL

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Purview's Endpoint Data Loss Prevention (DLP) on MacOS uses Just-in-Time (JIT) protection to temporarily block file movement or sharing until access rules are fully processed, ensuring sensitive data remains secure and maintaining an audit trail of all access attempts.

Direct effects for Operations**

Egress Activity Blocking
Enabling JIT protection may block legitimate egress activities for users while waiting for policy evaluation, potentially disrupting workflows.
   - roles: End Users, Compliance Officers
   - references: https://learn.microsoft.com/en-us/purview/endpoint-dlp-get-started-jit?view=o365-worldwide

User Experience Degradation
Users may experience frustration and confusion due to unexpected blocking of file transfers, leading to decreased productivity.
   - roles: End Users, IT Support Staff
   - references: https://learn.microsoft.com/en-us/purview/endpoint-dlp-get-started-jit?view=o365-worldwide

Audit Log Overload
Increased auditing of egress activities for excluded accounts may lead to an overload of logs, complicating compliance monitoring and analysis.
   - roles: Compliance Officers, IT Administrators
   - references: https://learn.microsoft.com/en-us/purview/endpoint-dlp-get-started-jit?view=o365-worldwide

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only