478660 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Separate role added for downloading the original file evidence for Endpoint

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

MC1000267

Details:

Microsoft Purview has introduced a new separate role for downloading the original evidence for Endpoint. It is applicable for both Customer Managed and Microsoft Managed storage when you try to download the evidence using Purview or XDR portal.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-01-30

updated:
2026-01-21

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Microsoft Purview has made a change that introduces a new role specifically for downloading original file evidence related to Endpoint Data Loss Prevention (DLP). To understand this, think of it like a library system. Previously, anyone with general access could check out certain books (or files, in this case). Now, there's a special librarian role created just for handling rare or sensitive books. This role ensures that only authorized individuals can access and download the original files that serve as evidence in DLP cases.

This change applies to both types of storage management: Customer Managed and Microsoft Managed. Whether you are using Purview or the XDR portal, this new role acts as a gatekeeper, allowing only designated people to handle these sensitive downloads. This is similar to how a museum might have a special curator responsible for handling and preserving valuable artifacts, ensuring they are only accessed under the right conditions and by the right people.

In practice, this means that organizations can have better control over who can access and download original file evidence, enhancing security and compliance. This role separation helps ensure that sensitive information is handled appropriately, reducing the risk of unauthorized access or data breaches.