check before: 2025-08-01
Product:
Purview, Purview Communication Compliance, Purview compliance portal, Purview Information Protection, Purview Insider Risk Management
Platform:
Online, Web, World tenant
Status:
Launched
Change type:
Admin impact, Feature update, Updated message, User impact
Links:
Details:
Summary:
Microsoft Purview Insider Risk Management alert workflow is enhanced to improve usability by reducing clutter and maximizing visual space. Updates include default opening of Activity Explorer, relocated alert details and actions, and adjustable panels. Rollout begins September 2025, enabled by default for licensed tenants, with no admin action needed.
Details:
Updated August 13, 2025: We have updated the content. Thank you for your patience.
Introduction
We're enhancing the Insider Risk Management (IRM) alert investigation experience to streamline workflows and improve usability. These updates are designed to maximize visual space, reduce clutter, and make it easier for analysts and investigators to focus on key insights during alert investigations.
This message is associated with Microsoft 365 Roadmap ID 493754 for Worldwide.
When this will happen
Public Preview (Worldwide): We will begin rolling out early September 2025 and expected to complete by late September 2025
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2025-07-30
updated:
2025-08-14
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
Pictures
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft is updating its Purview Insider Risk Management alert workflow to enhance user-friendliness and efficiency by automatically opening the Activity Explorer with alerts, relocating alert details and actions under a Details button, moving the User Timeline to a Timeline button, and allowing resizing of the Activity Explorer panel.
Direct effects for Operations**
User Interface Changes
The new layout may confuse users who are accustomed to the previous interface, leading to potential delays in alert investigations as users adapt to the new locations of features.
- roles: Insider Risk Management Analysts, Investigators
- references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=493754
Workflow Disruption
The default opening of the Activity Explorer may disrupt established workflows, causing inefficiencies as users may need to adjust their investigation processes to accommodate the changes.
- roles: Insider Risk Management Analysts, Investigators
- references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=493754
Configutation Options**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-08-14 | MC MessageTagNames | Feature update, User impact, Admin impact | Updated message, Feature update, User impact, Admin impact |
| 2025-08-14 | MC Summary | Microsoft Purview is enhancing the Insider Risk Management alert workflow to improve usability by reducing clutter and maximizing visual space. Key updates include default opening of the Activity Explorer tab, relocated features under the Manage button, and adjustable panels. Rollout begins August 2025, with no admin action needed. | Microsoft Purview Insider Risk Management alert workflow is enhanced to improve usability by reducing clutter and maximizing visual space. Updates include default opening of Activity Explorer, relocated alert details and actions, and adjustable panels. Rollout begins September 2025, enabled by default for licensed tenants, with no admin action needed. |
| 2025-08-14 | MC Last Updated | 07/30/2025 02:00:46 | 2025-08-13T21:26:11Z |
| 2025-08-14 | MC Messages | Introduction
We're enhancing the Insider Risk Management (IRM) alert investigation experience to streamline workflows and improve usability. These updates are designed to maximize visual space, reduce clutter, and make it easier for analysts and investigators to focus on key insights during alert investigations. This message is associated with Microsoft 365 Roadmap ID 493754 for Worldwide. When this will happen Public Preview (Worldwide): We will begin rolling out in early August 2025 and expect to complete by late August 2025. | Updated August 13, 2025: We have updated the content. Thank you for your patience.
Introduction We're enhancing the Insider Risk Management (IRM) alert investigation experience to streamline workflows and improve usability. These updates are designed to maximize visual space, reduce clutter, and make it easier for analysts and investigators to focus on key insights during alert investigations. This message is associated with Microsoft 365 Roadmap ID 493754 for Worldwide. When this will happen Public Preview (Worldwide): We will begin rolling out early September 2025 and expected to complete by late September 2025 |
| 2025-08-14 | MC How Affect | Prerequisite: To receive the updated IRM alert workflow experience, tenants must have an Insider Risk Management (IRM) license.
This feature is on by default for eligible tenants once rollout begins. These updates will improve the alert investigation experience for Insider Risk Management analysts and investigators. While all existing functionality remains available, some features will appear in new locations. Key changes include: The Activity Explorer tab will now open by default when an alert is selected. The All Risk Factors tab has been enhanced to support more efficient investigations. The alert details banner previously shown at the top of each tab is now accessible via the Manage button. Actions such as assigning users or taking action on an alert are now located under the Manage button. The User Timeline, previously displayed to the left of the Activity Explorer, is now accessible via the View activity timeline button. Users can now maximize or minimize the Activity Explorer panel for improved visibility. These changes are designed to reduce visual clutter and improve focus during investigations. Alert workflow enhancements before and after | Prerequisite: To receive the updated IRM alert workflow experience, tenants must have an Insider Risk Management (IRM) license.
This feature is on by default for eligible tenants once rollout begins. These updates will improve the alert investigation experience for Insider Risk Management analysts and investigators. While all existing functionality remains available, some features will appear in new locations. Key changes include: The Activity Explorer tab will now open by default when an alert is selected. The All Risk Factors tab has been enhanced to support more efficient investigations. The alert details banner previously shown at the top of each tab is now accessible via the Details button. Actions such as assigning users or taking action on an alert are now located under the Details button. The User Timeline, previously displayed to the left of the Activity Explorer, is now accessible via the Timeline button above Activity Explorer where the columns are managed. Users can now maximize or minimize the Activity Explorer panel for improved visibility. These changes are designed to reduce visual clutter and improve focus during investigations. Alert workflow enhancements before and after |
| 2025-08-14 | MC Title | Microsoft Purview | Experience enhancements to IRM alert workflow | (Updated) Microsoft Purview | Experience enhancements to IRM alert workflow |
| 2025-08-14 | MC End Time | 09/30/2025 09:00:00 | 2025-11-10T08:00:00Z |
Last updated 4 weeks ago ago
