check before: 2025-03-01
Product:
Defender, Defender XDR, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, Purview Insider Risk Management
Platform:
Online, US Instances, Web, World tenant
Status:
Launched
Change type:
Admin impact, New feature, Updated message
Links:
Details:
Summary:
Microsoft Purview Insider Risk Management is rolling out a user analytics feature by late January 2026, providing analysts with insider risk summaries across Microsoft Defender, Data Loss Prevention, and Communication Compliance. Insider Risk admins can enable or opt-out of this feature and must ensure data sharing is enabled.
Details:
Updated October 16, 2025: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Purview Insider Risk Management will be rolling out a new user analytics feature to help Microsoft Defender, Microsoft Purview Data Loss Prevention, and Communication Compliance analysts access an insider risk summary of user activities.
This message is associated with Microsoft 365 Roadmap ID 475058.
[When this will happen:]
Public Preview: We began rolling out in late March 2025 and expect to complete by mid-April 2025.
General Availability (Worldwide, GCC, GCC High, DoD): We will roll out this feature in late January 2026.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2025-04-01
updated:
2025-10-17
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft's new user analytics feature in Purview Insider Risk Management helps security analysts identify potential insider threats by summarizing user activities across Microsoft services, with the option for administrators to enable or disable it.
Direct effects for Operations**
User Experience Degradation
If the user analytics feature is rolled out without proper preparation, users may experience delays or inaccuracies in data reporting, leading to confusion and potential security risks.
- roles: Insider Risk Admins, Data Analysts
- references: https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-analytics?view=o365-worldwide&tabs=purview-portal, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=475058
Increased Security Risks
Without adequate preparation, the rollout may lead to unmonitored insider risks, as the analytics feature may not be properly configured, resulting in missed alerts for potential data breaches.
- roles: Security Analysts, Compliance Officers
- references: https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-analytics?view=o365-worldwide&tabs=purview-portal, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=475058
Configutation Options**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-10-17 | MC MessageTagNames | New feature, Admin impact | Updated message, New feature, Admin impact |
| 2025-10-17 | MC Summary | Microsoft Purview Insider Risk Management is introducing a user analytics feature to help analysts access insider risk summaries of user activities. Public preview starts in late March 2025, with general availability by late October 2025. Admins can enable this feature in the Insider Risk Management settings. | Microsoft Purview Insider Risk Management is rolling out a user analytics feature by late January 2026, providing analysts with insider risk summaries across Microsoft Defender, Data Loss Prevention, and Communication Compliance. Insider Risk admins can enable or opt-out of this feature and must ensure data sharing is enabled. |
| 2025-10-17 | MC Last Updated | 04/01/2025 00:34:14 | 2025-10-17T03:59:46Z |
| 2025-10-17 | MC Messages | Microsoft Purview Insider Risk Management will be rolling out a new user analytics feature to help Microsoft Defender, Microsoft Purview Data Loss Prevention, and Communication Compliance analysts access an insider risk summary of user activities.
This message is associated with Microsoft 365 Roadmap ID 475058. [When this will happen:] Public Preview: We began rolling out in late March 2025 and expect to complete by mid-April 2025. General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out in late September 2025 and expect to complete by late October 2025. | Updated October 16, 2025: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Purview Insider Risk Management will be rolling out a new user analytics feature to help Microsoft Defender, Microsoft Purview Data Loss Prevention, and Communication Compliance analysts access an insider risk summary of user activities. This message is associated with Microsoft 365 Roadmap ID 475058. [When this will happen:] Public Preview: We began rolling out in late March 2025 and expect to complete by mid-April 2025. General Availability (Worldwide, GCC, GCC High, DoD): We will roll out this feature in late January 2026. |
| 2025-10-17 | MC Title | Microsoft Purview compliance portal: Insider Risk Management user analytics | (Updated) Microsoft Purview compliance portal: Insider Risk Management user analytics |
| 2025-10-17 | MC End Time | 12/22/2025 09:00:00 | 2026-03-16T09:00:00Z |
Last updated 2 weeks ago ago
