485769 – Microsoft Purview compliance portal: Endpoint DLP: – App or App Group Restriction support for Edge browser

Product:

Purview, Purview Communication Compliance, Purview compliance portal

Platform:

US Instances, Web, World tenant

Status:

Launched

Change type:

Links:

Details:

Previously, Purview Admins could not restrict Edge browser access to sensitive files through Restricted apps or app groups. With this feature, apps or app groups can be configured to be blocked in Edge, including a message showing policy violation info.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-05-02

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Access Restrictions
Users may experience disruptions in accessing sensitive files if their apps or app groups are blocked in Edge without prior notice, leading to confusion and potential workflow interruptions.
   - roles: End Users, Compliance Officers
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-compliance-portal-endpoint-dlp-app-or-app/ba-p/3741230

Policy Violation Messaging
Users may receive unexpected policy violation messages when attempting to access restricted files, which could lead to frustration and decreased productivity if not communicated effectively beforehand.
   - roles: End Users, IT Support Staff
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-compliance-portal-endpoint-dlp-app-or-app/ba-p/3741230

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you're managing a law firm, and you have a secure filing cabinet where you keep all your sensitive documents. You trust your team, but you want to ensure that only specific people can access certain files, and only in certain rooms of the office. This is similar to what Microsoft Purview's new feature does for digital files.

Previously, when using the Edge browser, there wasn't a way to restrict access to sensitive files based on the application being used. It was like having a filing cabinet that anyone could open with any key they had. Now, with the new feature, you can decide which apps or groups of apps can access certain files when using the Edge browser. It's like having a special lock on the filing cabinet that only opens with a specific key, and if someone tries to use the wrong key, a note pops up explaining why they can't access it.

This feature is particularly useful for ensuring compliance and protecting sensitive information. It allows administrators to set rules about which applications can be used to open or edit certain files, providing an extra layer of security. If someone tries to use an unauthorized app, they will see a message explaining that this action violates the company's policy.

In practical terms, this means that if your firm uses the Edge browser to access client files, you can now ensure that only approved applications can open those files. This helps in maintaining confidentiality and compliance with legal standards, much like ensuring that only authorized personnel can enter certain rooms in your office.