479759 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Configure network share groups using IP or IP address range

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention

Platform:

US Instances, Web, World tenant

Status:

Launched

Change type:

Links:

Details:

With this feature, data officers can now configure specific IP addresses or IP address ranges in DLP Settings within Sensitive service domain groups to be used in DLP policies for more precise scoping.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
Preview, General Availability

Created:
2025-02-19

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Loss Prevention Configuration
Without proper preparation, configuring IP address ranges for DLP policies may lead to misconfigured settings, resulting in unauthorized data access or data leaks.
   - roles: Data Officer, IT Security Manager
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-compliance-portal-endpoint-data-loss-prevention/ba-p/3741230, https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention " target="_blank" rel="nofollow noopener noreferrer">https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention

User Access Issues
Changes to DLP settings without adequate testing may inadvertently block legitimate user access to necessary data, impacting productivity and user experience.
   - roles: End User, IT Support Specialist
   - references: https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention, https://techcommunity.microsoft.com/t5/security-compliance-identity/understanding-data-loss-prevention-dlp-in-microsoft-365/ba-p/3741230

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you're organizing a large event and you need to control who can enter certain areas. You decide to use wristbands of different colors to grant access to specific zones. Only people with the right color wristband can enter certain sections, ensuring that everyone is where they should be.

In the world of IT, Microsoft Purview's new feature works similarly. It allows data officers to define specific areas, or "zones," using IP addresses or ranges. These IP addresses act like the wristbands, determining who can access certain data or systems. By setting these boundaries, organizations can ensure that sensitive information is only accessible to those who need it, much like how you control access to different parts of your event.

This feature is part of a larger toolset aimed at preventing data loss, known as Data Loss Prevention (DLP). Just as you wouldn't want unauthorized people wandering into a VIP area, companies don't want sensitive data to be accessed or leaked by unauthorized users. By configuring these IP address "wristbands," organizations can better protect their data and ensure compliance with various regulations.

In essence, this feature provides a more precise way to manage who can access what within a company's network, helping to keep sensitive information safe and secure.