check before: 2025-03-01
Product:
Defender, Defender XDR, Purview Communication Compliance, Purview Data Loss Prevention, Purview Insider Risk Management
Platform:
Online, US Instances, Web, World tenant
Status:
In development
Change type:
New feature, Admin impact
Links:
Details:
Summary:
Microsoft Purview Insider Risk Management is introducing a user analytics feature to help analysts access insider risk summaries of user activities. Public preview starts in late March 2025, with general availability by late October 2025. Admins can enable this feature in the Insider Risk Management settings.
Details:
Microsoft Purview Insider Risk Management will be rolling out a new user analytics feature to help Microsoft Defender, Microsoft Purview Data Loss Prevention, and Communication Compliance analysts access an insider risk summary of user activities.
This message is associated with Microsoft 365 Roadmap ID 475058.
[When this will happen:]
Public Preview: We began rolling out in late March 2025 and expect to complete by mid-April 2025.
General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out in late September 2025 and expect to complete by late October 2025.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2025-04-01
updated:
2025-04-01
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft is introducing a user analytics feature in its Purview Insider Risk Management tool to help analysts understand potentially risky user activities, with a public preview available in March 2025 and a full rollout by October 2025, ensuring privacy through pseudonymization.
Direct effects for Operations**
User Analytics Feature Rollout
If the user analytics feature is enabled without proper preparation, it may lead to confusion among analysts due to a sudden influx of new data and alerts, potentially overwhelming them and causing delays in incident response.
- roles: Data Loss Prevention Analyst, Compliance Analyst
- references: https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-analytics?view=o365-worldwide&tabs=purview-portal, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=475058
Data Sharing Settings
Enabling user analytics without ensuring proper data sharing settings may result in incomplete or inaccurate insights, leading to misinformed decisions regarding insider risks and potential security incidents.
- roles: Insider Risk Admin, Security Analyst
- references: https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-analytics?view=o365-worldwide&tabs=purview-portal, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=475058
Configutation Options**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 months ago
