MC1006620 – Retirement of Alerts Policy cmdlets in Microsoft Purview Audit

cloudscout.one Icon

check before: 2025-03-24

Product:

Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Online, World tenant

Status:

Change type:

Admin impact, Retirement

Links:

Details:

Summary:
Microsoft Purview will retire the event alerts capability within the Purview Audit solution on March 24, 2025. Existing alert policies created through the Audit solution will stop generating alerts, and related cmdlets will be retired. Users should recreate these policies through Purview DLP, which remains unaffected.

Details:
Microsoft Purview previously offered the flexibility to create event alert policies through the Purview Audit solution (in addition to the more commonly used Data Loss Prevention alerts). On March 24, 2025, we will be retiring the event alerts capability within the Purview Audit solution. With this change, any existing alert policies which had been created through the Audit solution will no longer generate alerts and customers will no longer be able to create new alert policies through the Audit solution. This functionality had already been removed from the Purview Portal's Audit UI in 2023. Starting March 24, 2025, support for the following cmdlets will also be retired:
Get-AuditConfigurationRule
New-AuditConfigurationRule
Remove-AuditConfigurationRule
Set-AuditConfigurationRule
Please note that the event alerts capability within Purview DLP will remain unaffected by this change. Any alert policies created through Purview DLP will continue to generate alerts as expected. We recommend that you use the alerts functionality within DLP, which is where we will continue to invest our development resources.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-02-15

updated:
2025-02-15

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Loss of Alert Functionality
Existing alert policies created through the Purview Audit solution will stop generating alerts, leading to potential oversight of critical events.
   - roles: Compliance Officer, IT Administrator
   - references: https://learn.microsoft.com/purview/create-activity-alerts?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-alerts-get-started

Increased Risk of Data Breaches
Without alerts from the Purview Audit solution, there is a higher risk of undetected data breaches or compliance violations.
   - roles: Data Protection Officer, Security Analyst
   - references: https://learn.microsoft.com/purview/create-activity-alerts?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-alerts-get-started

Operational Disruption
IT teams may face operational disruptions as they scramble to recreate alert policies in Purview DLP without prior preparation.
   - roles: IT Support Specialist, System Administrator
   - references: https://learn.microsoft.com/purview/create-activity-alerts?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-alerts-get-started

User Experience Degradation
Users may experience delays in incident response due to the lack of timely alerts from the Purview Audit solution.
   - roles: End User, Help Desk Technician
   - references: https://learn.microsoft.com/purview/create-activity-alerts?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-alerts-get-started

Training and Knowledge Gaps
Staff may require additional training to adapt to the new alerting system in Purview DLP, leading to temporary knowledge gaps.
   - roles: Training Coordinator, Compliance Officer
   - references: https://learn.microsoft.com/purview/create-activity-alerts?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-alerts-get-started

Configutation Options**

XXXXXXX ... paid membership only

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



Last updated 1 month ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!