480732 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Device and Device group-based policy scoping support for Endpoint DLP

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

MC1028322

Details:

Currently, you can create a Purview Endpoint DLP policy and assign it to specific users or user groups. This feature will allow you to create and release features based on both users and machines. You can use this feature to achieve different policies for the same user on different devices.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-02-11

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Microsoft has introduced a new feature in its Purview compliance portal that enhances how Endpoint Data Loss Prevention (DLP) policies can be applied. Previously, these policies could only be assigned to specific users or user groups. Now, the feature allows for more granular control by enabling policies to be set based on both users and devices.

Think of it like setting different rules for how employees can use company cars. Previously, you could only decide who could drive the cars, but now you can also decide which cars they can drive. For example, you might allow an employee to drive a sedan for city errands but restrict them from using a truck meant for transporting heavy equipment. Similarly, with this new feature, you can have different data protection rules for the same user depending on the device they are using.

This flexibility is particularly useful in scenarios where an employee might use a secure company laptop for work but also access company data on a personal device. With device-based policy scoping, you can ensure that stricter data protection measures are in place on personal devices compared to company-issued ones.

This update aims to provide organizations with more tailored and effective data protection strategies, ensuring that sensitive information is safeguarded according to both user roles and the security level of the devices they use.