526792 – Microsoft Purview: Endpoint Data Loss Prevention- Mac device and device group-based policy scoping support for Endpoint DLP

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention

Platform:

Mac, US Instances, Web, World tenant

Status:

Rolling out

Change type:

Links:

MC1198078

Details:

Currently you can create Purview Endpoint DLP policy and assign to specific users or user groups. This feature will allow you to create and assign policy based on both users and machines. You can use this feature to achieve different policies for same user on different Mac devices.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-11-17

updated:
2026-01-06

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine you're a librarian managing a library with multiple branches. Each branch has its own rules about how books can be borrowed and returned. Some branches might allow longer borrowing periods, while others might have stricter rules. Now, think of Microsoft Purview's Endpoint Data Loss Prevention (DLP) as a system that helps you manage these rules not just based on the person borrowing the book, but also based on which branch they are visiting.

In the world of IT, organizations often need to protect sensitive information and ensure it doesn't get lost or misused. Microsoft Purview's Endpoint DLP is like the library's rule system, but for data. Previously, you could set rules based on who the user is, much like setting rules for library members. Now, with the new feature, you can also set rules based on the device they are using, similar to setting different rules for each library branch.

For example, if a user works on two different Mac devices, one at the office and one at home, you can now create different data protection rules for each device. This is like allowing a user to borrow more books from the main branch than from a smaller branch. It provides flexibility and control, ensuring that sensitive data is handled appropriately depending on the device and location.

This feature is particularly useful for organizations with diverse work environments, where employees might use different devices for different tasks. By tailoring data protection policies to both users and devices, organizations can better safeguard their information while accommodating various work scenarios.