Enable aggregation of DLP alerts based on common entities user even when multiple rules are matched. This feature should consolidate related alert events into a single alert object to: Reduce alert noise, simplify investigation workflows, enhance contextual understanding of violations.
Roadmap › 567010
Microsoft Purview: Data Loss Prevention - User Based Aggregation of DLP Alerts
- General availability
- 2026-09
- Preview
- —
- Added
- 07 Jul 2026
- Last modified
- 07 Jul 2026 23:10 UTC
- First archived
- 25 Aug 2026
- Release rings
- General Availability
- Clouds
- GCC, GCC High, DoD