Enable aggregation of DLP alerts based on common entities user even when multiple rules are matched. This feature should consolidate related alert events into a single alert object to: Reduce alert noise, simplify investigation workflows, enhance contextual understanding of violations.
Roadmap › 564765
Microsoft Purview: Data Loss Prevention - User Based Aggregation of DLP Alerts
- General availability
- 2026-08
- Preview
- 2026-07
- Added
- 01 Jun 2026
- Last modified
- 01 Sep 2026 23:00 UTC
- First archived
- 25 Aug 2026
- Release rings
- General Availability, Preview
- Clouds
- Worldwide (Standard Multi-Tenant)