MC1058262 – (Updated) Microsoft Purview | Insider Risk Management: Enhancements to global exclusions in IRM settings

cloudscout.one Icon

check before: 2025-04-15

Product:

Purview Communication Compliance, Purview Information Protection, Purview Insider Risk Management

Platform:

Online, US Instances, Web, World tenant

Status:

Rolling out

Change type:

Admin impact, New feature, Updated message, User impact

Links:

(486826)
483485

Details:

Summary:
Microsoft Purview | Insider Risk Management is enhancing global exclusions to reduce alert noise. Public Preview began in mid-April 2025, with General Availability starting in early June 2025. Enhancements include keyword logic updates, file path exclusions, and domain exclusions for browsing indicators. Admins should update exclusion settings in IRM.

Details:
Updated May 8, 2025: We have updated the timeline below. Thank you for your patience.
Coming soon for Microsoft Purview | Insider Risk Management (IRM): Enhancements to IRM exclusions to reduce alert noise.
This message is associated with Microsoft 365 Roadmap ID 486826 and Roadmap ID 483485.
[When this will happen:]
Public Preview: We began rolling out mid-April 2025 and expect to complete by late April 2025.
General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out early June 2025 (previously late April) and expect to complete by late June 2025 (previously early May).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-04-19

updated:
2025-05-09

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft is updating its Purview Insider Risk Management tool to reduce alert noise by enhancing keyword logic for emails, considering file path exclusions for copied files, and supporting domain exclusions for browsing, allowing administrators to focus on genuine threats.

Direct effects for Operations**

Increased Alert Noise
Without proper configuration of the new exclusion settings, users may experience an increase in irrelevant alerts, leading to alert fatigue and potential oversight of critical issues.
   - roles: Admins, Security Analysts
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=483485, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=486826

User Experience Degradation
Failure to update exclusion settings may result in users receiving excessive notifications about benign activities, negatively impacting their productivity and overall experience with the system.
   - roles: End Users, IT Support
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=483485, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=486826

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



change history

DatePropertyoldnew
2025-05-09MC MessageTagNamesNew feature, User impact, Admin impactUpdated message, New feature, User impact, Admin impact
2025-05-09MC SummaryEnhancements to Microsoft Purview's Insider Risk Management (IRM) exclusions will reduce alert noise, including updates to keyword logic, file path exclusions, and domain exclusions. Public Preview starts mid-April 2025, with General Availability by early May 2025. Admins should update exclusion settings in IRM.Microsoft Purview | Insider Risk Management is enhancing global exclusions to reduce alert noise. Public Preview began in mid-April 2025, with General Availability starting in early June 2025. Enhancements include keyword logic updates, file path exclusions, and domain exclusions for browsing indicators. Admins should update exclusion settings in IRM.
2025-05-09MC Last Updated04/19/2025 01:58:542025-05-08T16:45:03Z
2025-05-09MC MessagesComing soon for Microsoft Purview | Insider Risk Management (IRM): Enhancements to IRM exclusions to reduce alert noise.
This message is associated with Microsoft 365 Roadmap ID 486826 and Roadmap ID 483485.
[When this will happen:]
Public Preview: We began rolling out mid-April 2025 and expect to complete by late April 2025.
General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late April 2025 and expect to complete by early May 2025.
Updated May 8, 2025: We have updated the timeline below. Thank you for your patience.
Coming soon for Microsoft Purview | Insider Risk Management (IRM): Enhancements to IRM exclusions to reduce alert noise.
This message is associated with Microsoft 365 Roadmap ID 486826 and Roadmap ID 483485.
[When this will happen:]
Public Preview: We began rolling out mid-April 2025 and expect to complete by late April 2025.
General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out early June 2025 (previously late April) and expect to complete by late June 2025 (previously early May).
2025-05-09MC TitleMicrosoft Purview | Insider Risk Management: Enhancements to global exclusions in IRM settings(Updated) Microsoft Purview | Insider Risk Management: Enhancements to global exclusions in IRM settings
2025-05-09MC End Time07/25/2025 09:00:002025-08-04T09:00:00Z

Last updated 2 weeks ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!