484083 – Microsoft Purview compliance portal: Generative AI apps activities as triggers in IRM

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Information Protection, Purview Insider Risk Management

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

MC1102774

Details:

With this update, the generative AI apps indicators will be supported as triggers in Risky AI usage policy. With triggers, customers can define the conditions for bringing the user into the scope of a policy while the generative AI apps indicators are used to determine risk score. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
Preview, General Availability

Created:
2025-03-11

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine your organization as a bustling city. In this city, you have various departments, like neighborhoods, each with its own set of rules and regulations to keep things running smoothly. Now, let's say there's a new type of vehicle, like electric scooters, zooming around the city. These scooters represent generative AI apps, which are innovative tools that can be used in many ways, both good and potentially risky.

To manage these scooters, the city (your organization) needs a way to monitor their use and ensure they're not causing problems, like blocking sidewalks or being used inappropriately. This is where Microsoft Purview's compliance tools come in, acting like the city's traffic management system. They help keep an eye on these scooters (AI apps) and make sure they're being used safely and responsibly.

With the latest update, Microsoft Purview's Insider Risk Management is like a smart traffic cop. It uses various signals, like traffic cameras and sensors, to detect if someone is using these scooters in a way that might lead to issues, such as taking them into restricted areas (think of this as data leakage or security violations). The system allows you to set up rules, much like city ordinances, to define what constitutes risky behavior.

For example, if a scooter is found in a no-scooter zone, it triggers an alert. Similarly, if someone uses an AI app in a way that breaches your organization's policies, the system can flag this as a potential risk. This helps in identifying insider threats, whether intentional or accidental, such as someone trying to take sensitive information out of the organization.

Moreover, just like how city authorities respect the privacy of individuals, Microsoft Purview ensures that users' identities are protected. It uses pseudonyms, like assigning a number to each scooter instead of tracking who is riding it, and has strict access controls to maintain privacy.

In summary, Microsoft Purview's compliance tools help organizations manage the use of generative AI apps by setting up policies and monitoring their use, much like a city manages new modes of transportation to ensure safety and compliance with local laws.