DLP Policies

Data Loss Prevention (DLP) policies detect and protect sensitive content across Exchange, SharePoint, OneDrive, Teams, Defender for Cloud Apps, Windows and macOS endpoints, and on-premises file shares. Each policy contains one or more rules that define what to look for - sensitive info types, sensitivity labels, trainable classifiers, or specific conditions - and what to do when a match occurs, such as blocking access, restricting sharing, showing policy tips, generating alerts, or requiring user justification. This page lets you view and manage the DLP policies and their underlying rules in the selected tenant.

Page Actions

Deploy DLP Policy

This will open an action drawer that will allow you deploy a DLP policy either by template or by pasting the JSON into the Parameters block. Select the tenant(s) you want to deploy the policy to, select the template or paste the JSON, and click Deploy.

Table Details

The properties returned are for the Exchange PowerShell command Get-DlpCompliancePolicy. For more information on the command please see the Microsoft documentation. We also return the associated rules with Get-DlpComplianceRule. See the Microsoft documentation for more on that command.

Table Actions

Action	Description	Bulk Action Available
Create template based on policy	Creates a template based on the selected policy(ies)
Enable Policy	Enables the selected policy(ies). Will only be available if the selected policy is disabled.
Disable Policy	Disables the selected policy(ies). Will only be available if the selected policy is enabled.
Delete Policy	Deletes the selected policy(ies)
More Info	Opens the Extended Info flyout

---

Feature Requests / Ideas

We value your feedback and ideas. Please raise any feature requests on GitHub.